bnp05s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:2f:ad:47:bd:fa:f3:bf:bd:84:91:de:64:e5:ee:17 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2f:ad:47:bd:fa:f3:bf:bd:84:91:de:64:e5:ee:17
Serial Number (int): 8222920467917651770892618744675560983
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c9:2d:b6:dd:4d:03:0a:04:ed:e0:0a:08:31:24:74:88:25:f6:40:cb
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): dc:8d:bc:bd:5e:28:f7:6c:a0:29:1a:9b:c7:25:11:4a:cb:0c:4a:20
Fingerprint (sha256): 01:2f:59:2c:40:2e:78:d0:73:69:1f:d9:69:3c:09:df:ca:47:3c:c1:b0:22:28:58:fa:fa:d9:ad:c9:dd:6b:cc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bnp05s.bnpparibas.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp05s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp05s.bnpparibas.com
life-tw-pre.cardif.com
bizcover.qabnpparibasfortis.be
www.dixit.qabnpparibasfortis.be
myclub.bnpparibas-am.com
retail.myclub.bnpparibas
www.parvest.lu
private.myclub.bnpparibas-am.com
danshin.cardif.co.jp
retail.myclub.staging.bnpparibas-am.com
www.parvest.it
placements-financiers.bnpparibas-am.fr
retail.myclub.bnpparibas-am.com
www.parvest.com
www.placements-financiers.bnpparibas-am.fr
uat-mobile.cardif.com.tw
www.bizcover.be
me.cardif.co.jp
myclub.bnpparibas
private.myclub.staging.bnpparibas
corporate.myclub.staging.bnpparibas
bgl.retail-club.bnpparibas
parvest.be
myclub.staging.bnpparibas-am.com
blogs.bnpparibasfortis.com
www.bnl.retail-club.bnpparibas
bizcover.bnpparibasfortis.be
prioritybankingclub.bnpparibas
uat-my.cardif.com.tw
private.myclub.bnpparibas
www.parvest.de
www.private.myclub.bnpparibas
www.qahellobank.be
bnpparibasfortis.com
cardif.co.jp
parvest.com
www.corporate.myclub.bnpparibas-am.com
www.myclub.bnpparibas-am.com
sdm.bnpparibas-am.fr
my.cardif.co.jp
parvest-club.bnpparibas
www.prioritybankingclub.bnpparibas
parvest.fr
hellobank.be
life.cardif.co.jp
corporate.myclub.bnpparibas-am.com
cck.creditoclick.com.mx
codex.bnpparibas.com
qabnpparibasfortis.com
www.qabnpparibasfortis.com
www.retail.myclub.bnpparibas
parvest.lu
www.bgl.retail-club.bnpparibas
myclub.staging.bnpparibas
bnl.retail-club.bnpparibas
www.myclub.bnpparibas
www.parvest-club.bnpparibas
corporate.myclub.staging.bnpparibas-am.com
corporate.myclub.bnpparibas
dixit.bnpparibasfortis.be
parvest.it
www.corporate.myclub.staging.bnpparibas-am.com
www.parvest.be
pre-bigstar.cardif.com.tw
nonlife.cardif.co.jp
qahellobank.be
www.bnpparibasfortis.com
www.parvest.fr
www.retail.myclub.bnpparibas-am.com
dixit.qabnpparibasfortis.be
www.private.myclub.bnpparibas-am.com
quick.cardif.co.jp
private.myclub.staging.bnpparibas-am.com
parvest.de
retail.myclub.staging.bnpparibas
dna.bnpparibas.com
www.sdm.bnpparibas-am.fr
dnarec.bnpparibas.com
bway20coll.businessway.bnl.it
bizcover.be
nonlife-tw-pre.cardif.com
www.cardif.co.jp
blogs.qabnpparibasfortis.com
bankingcollnew.bnl.it
cms.cardif.co.jp
edm-tw-pre.cardif.com
www.hellobank.be
businessintelligence.bnpparibas.com
www.corporate.myclub.bnpparibas

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp05s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq80lcSIOg1+DbZqUlbMo
5weHR9kUlVaIrZa2QaQaZrbPBg6UnXPKu5xpdZSxh3ASevYUhujCUV69YmJ8TTbw
IwD33HeSS7nkbIpMIR/vbq3OaYyds6DKtIXJ4WNpg9ygS+ADry6cAZGWQt2CHORk
bzRRMIX1SfFXLYy1RH1TJuLxdA/DIMbpPLgWes0V43VaxUDRnzgwl+BEb5aYArYr
/tc/MmDp0xGbZE0YyHl0YVBBozK/PVhIQnFY92IFdFnukMZmTrIYslOF/2ufrPHk
rq6QIey5a1OWgPWrOxbDGc+O9SLO4vImYRuImD0Iel0V9MO1a4TfmDAXjeFiz9gJ
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8222920467917651770892618744675560983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp05s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21687911539117301104046405395414979231053495855930563153657852725823347634622912627237872514440051868670414075891910825923373701413905187147001638022877028331159344996192114342300287310742525489413082412583563408736280090024392259339333983372382835008659600876075917108168993675571563075975787704708203002599011954839578152719674217028432739257496561078328314330834108519956552262139230139701846695846759067283428803886598509555345429297726295898414086770219346580377162466004609170254791927457034096903229937986281170201260300725965151732103081664348934179135519549356526607974208999146543671888503971181445649009129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c92db6dd4d030a04ede00a083124748825f640cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp05s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-tw-pre.cardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcover.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dixit.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danshin.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placements-financiers.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placements-financiers.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-mobile.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bizcover.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.myclub.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.myclub.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgl.retail-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnl.retail-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcover.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prioritybankingclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-my.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qahellobank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporate.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdm.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prioritybankingclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellobank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cck.creditoclick.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retail.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgl.retail-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclub.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnl.retail-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixit.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporate.myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-bigstar.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonlife.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qahellobank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retail.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixit.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quick.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.myclub.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dna.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdm.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnarec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bway20coll.businessway.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcover.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonlife-tw-pre.cardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingcollnew.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edm-tw-pre.cardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellobank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessintelligence.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporate.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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