nc.bnpparibas.net

- BNP PARIBAS SA -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 4d:da:cd:7a:8d:97:30:0a:0f:8b:51:85:e8:ed:16:63 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Organization unit: BNP PARIBAS SA
State / Province: Paris
Locality: Paris
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:da:cd:7a:8d:97:30:0a:0f:8b:51:85:e8:ed:16:63
Serial Number (int): 103486643994223851012049048183784674915
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 21:9e:7a:f4:9a:91:6c:52:e0:83:91:fc:9c:e8:5b:26:7a:c1:0f:c9
Fingerprint (sha256): 00:c2:8c:2a:85:22:b8:d1:8e:15:72:b9:3c:d9:00:1c:a4:70:77:36:a5:95:42:01:34:dd:4d:29:33:8e:3e:f0

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate nc.bnpparibas.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nc.bnpparibas.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nc.bnpparibas.net

Other certificates including the domain name bnpparibas.net

(limited to 100 certificates)
exp1.mobile.entreprises.bnpparibas.net
bourses.bnpparibas.net
testsassuranceauto.bnpparibas.net
nc.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
prod-m-wea1s1-apa1s1.canalnet-pro.bnpparibas.net
bnp07s.bnpparibas.com
m-service-qual-we1-ap1-q.bnpparibas.net
mobile-waf-v2p2-secure.bnpparibas.net
bnp05b.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
bnpnetexp0.bnpparibas.net
protectionsante.bnpparibas.net
bnp06s.bnpparibas.com
automatesdcckms39.bnpparibas.net
tpc-login.mabanque.staging.bnpparibas.net
mabanque.bnpparibas
algerie.bnpparibas.net
mobo.bnpparibas.net
protectionsante.bnpparibas.net
bnp09s.bnpparibas.com
change.bnpparibas.net
bnp03s.bnpparibas.com
qua04-mutuelle-entreprises-bddf.bnpparibas.net
www.netcash2.bnpparibas.net
lesbonscomptes.bnpparibas.net
bnp06s.bnpparibas.com
bnp03s.bnpparibas.com
bnp06s.bnpparibas.com
m-service-qual-we1-ap1-q.bnpparibas.net
bnp09s.bnpparibas.com
bnp10s.bnpparibas.com
content.mabanque.bnpparibas
tpc-m-service.bnpparibas.net
bnp06s.bnpparibas.com
bnp07s.bnpparibas.com
algerie.bnpparibas.net
planification-retraite.bnpparibas.net
bnp07s.bnpparibas.com
mercanet3.bnpparibas.net
shopmobile.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp03s.bnpparibas.com
bourses.bnpparibas.net
bnp09s.bnpparibas.com
bnp10s.bnpparibas.com
secure1.entreprises.bnpparibas.net
bnp06s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
www.secure.bnpparibas.net
bnp09s.bnpparibas.com
secure1ms.entreprises.bnpparibas.net
tpc-login.mabanque.staging.bnpparibas.net
entrepartenairespros.bnpparibas.net
dsir-assurance.cardif.fr
prod-m-wea1s1-apa1s1.canalnet-part.bnpparibas.net
arval.com
qlf-grapheur.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09s.bnpparibas.com
animation.bnpparibas.net
app-mobile.entreprises.bnpparibas.net
automatesdcckms39.bnpparibas.net
bnp10s.bnpparibas.com
www.pse-qual.netcash.bnpparibas.net
bnp18b.bnpparibas.com
bnp09s.bnpparibas.com
mailingbmmstaging.bnpparibas.net
arval.com
bnp03s.bnpparibas.com
bnp06s.bnpparibas.com
bnp10s.bnpparibas.com
offres.bnpparibas.net
arval.fr
m.lanetagence.bnpparibas.net
arval.fr
bnp05b.bnpparibas.com
simple.qua02.entreprises.bnpparibas.net
bnp11s.bnpparibas.com
bnp06s.bnpparibas.com
WWW.EUROPEANCARDACQUIRING.BNPPARIBAS.NET
www.netcash2.bnpparibas.net
bnp05b.bnpparibas.com
bnp09s.bnpparibas.com
mailingbmmstaging.bnpparibas.net
bnp10s.bnpparibas.com
*.canalnet-pro.bnpparibas.net
bnp07s.bnpparibas.com
bnp06s.bnpparibas.com
simulateur-retraite.bnpparibas.net
automatesdccAP05568prod.bnpparibas.net
bnp05b.bnpparibas.com
bnp10s.bnpparibas.com
mabanqueprivee.bnpparibas.net
bnp09s.bnpparibas.com
WWW.EUROPEANCARDACQUIRING.BNPPARIBAS.NET
bnp09s.bnpparibas.com
bnp03s.bnpparibas.com

Certificate

The complete raw certificate details for nc.bnpparibas.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw15Q8tIxQH9tSyG5qZvv
BqBZZm4xziSVt7xhOicbWiC5Qp7JnxvqbVuFq5HIdF928f+mGEX0UA82dYrZHsRa
AbhfRdNh+FU9Z1bW9BR77YNgyV6uDIee7TB0dsM/aVTC0PTNt2x4309t6Kvdedi8
RRyzzQwSKkaqJwTezyOzmFh0IlKE6wY0cu6D6YZlK0dLRETZzyh+0jyxHGxFgvwT
8ydzcy8qsL9MrNeGgerYg9F/TnO2UQ8b6uJh5B/8XGjrO0FPr1Vsxn2I/KmKiMBz
ul0ABa/WwYaoe0SOlxIePj/g8/r0z4hXv0ro2+rFmVknn/BVUFYBQME/B0NE7vlf
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 103486643994223851012049048183784674915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'nc.bnpparibas.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24662978522559744689137431889761053336018736759916465276606756549527243623183954450132566941765216964129386815049971764244716707038016418217097386965380960025026785905555373867849341797736587938026050501839025852284729573530227552193938150310705972194860134854314726519014124297831208202433618267545321855567202328029901704703797246082614389257053169935959858786913130673034152741958668979066241072836232204134330846106727887603503254814944366529007456246928213647490345839295825663333366278735848119890569767100971469382341410161614679462006662994925106367140133835389600366045363653401635941120953779037583173050361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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