bnp07b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:35:d3:13:7c:37:cc:d1:27:ca:cc:33:ab:da:4d:a7 was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:35:d3:13:7c:37:cc:d1:27:ca:cc:33:ab:da:4d:a7
Serial Number (int): 1608700861492319369622729087560338855
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 12:c3:c4:24:6c:2c:19:da:cb:17:0e:67:b4:00:68:10:ad:72:a9:14
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a3:20:bb:e7:f4:ea:4f:2c:9e:51:7d:4a:fa:cd:05:fe:15:8a:82:ef
Fingerprint (sha256): 02:81:39:e2:c1:b3:0f:1a:bb:3f:bc:a7:0a:67:96:b4:6d:52:52:ce:59:21:8f:d5:dd:1c:a9:37:d5:18:9d:db

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate bnp07b.bnpparibas.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zonacliente.cetelem.es
www.websalaries-preprod.assurance.fr
www.sharekhanfinance.com
www.sharekhan.com
www.roszczenia.cardif.pl
www.pre-dsa-services.cardif.pl
www.moneycredit.co.za
www.investment-city.bnpparibas-am.fr
www.espace-indemnisation-pp.cardif.fr
www.espace-indemnisation-c03-rec.cardif.fr
www.espace-indemnisation-c02-rec.cardif.fr
www.espace-indemnisation-c01-rec.cardif.fr
www.dsa-services.cardif.pl
www.dsa-sales.cardif.pl
www.dsa-manage.cardif.pl
www.comercios.cetelem.es
www.cetelem.es
www.auto.cetelem.es
www.assurance-credit.cardif.fr
websalaries-preprod.assurance.fr
tradetiger.sharekhan.com
trade.sharekhan.com
theamquant.bnpparibas-am.com
suivigiant-prod-assurance.cardif.fr
suivigiant-pp-assurance.cardif.fr
succession-assurance-vie-c02-rec.cardif.fr
succession-assurance-vie-c01-rec.cardif.fr
strade.sharekhan.com
ss-qa.rcs.co.za
slow-qa.rcs.co.za
skweb.sharekhan.com
simulationrentes-pp-assurance.cardif.fr
simulationcg-pp-assurance.cardif.fr
sharekonnect.sharekhan.com
sharekhanfinance.com
shaker-pp-tmp-assurance.cardif.fr
shaker-pp-assurance.cardif.fr
sfp-pp-assurance.cardif.fr
roszczenia.cardif.pl
rcs.co.za
rcs.co.bw
ptp-pp-assurance.cardif.fr
protocolesligne-pp.cardif.fr
propositionarbitrage-pp-assurance.cardif.fr
pre-dsa-services.cardif.pl
pms.sharekhan.com
newtrade.sharekhan.com
mypms.sharekhan.com
investment-city.bnpparibas-am.fr
instamf.sharekhan.com
infosync.bnl.it
giant-pp-assurance.cardif.fr
geolocalisation-pp-assurance.cardif.fr
finagora-pp.cardif.fr
finagora-c03-rec.cardif.fr
finagora-c02-rec.cardif.fr
finagora-c01-rec.cardif.fr
fastaccess-pp.cardif.fr
fastaccess-c03-rec.cardif.fr
fastaccess-c01-rec.cardif.fr
espace-indemnisation-pp.cardif.fr
espace-indemnisation-c03-rec.cardif.fr
espace-indemnisation-c02-rec.cardif.fr
espace-indemnisation-c01-rec.cardif.fr
espace-client-pp.cardif.fr
espace-client-c03-rec.cardif.fr
espace-client-c02-rec.cardif.fr
espace-assurance-pp.cardif.fr
espace-assurance-c03-rec.cardif.fr
espace-assurance-c02-rec.cardif.fr
espace-assurance-c01-rec.cardif.fr
epicaste-refpdt-pp-assurance.cardif.fr
epicaste-pp-assurance.cardif.fr
epicaste-fwk-pp-assurance.cardif.fr
dsa-services.cardif.pl
dsa-sales.cardif.pl
dsa-manage.cardif.pl
dft.sharekhan.com
consultationcomptes-pp-assurance.cardif.fr
comptes-pp.cardif.fr
comptes-c03-rec.cardif.fr
comptes-c02-rec.cardif.fr
comptes-c01-rec.cardif.fr
comercios.cetelem.es
cis.sharekhan.com
china.bnpparibas-am.com
bnp07b.bnpparibas.com
assurance-credit.cardif.fr
alfin-pp-assurance.cardif.fr
adminfundquest.cardif.fr
adminfundquest-tmp.cardif.fr
adminfundquest-pp.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp07b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkOV5EX1Kbcu7gtJzSbJ
cpDepTz5PJhrja2Sj+UX1Zie/WZUTuI4LF3VdJl476WhXnctfQTzeR2dhq6l83mN
VomaUjPrEE8Jh9iw5+mGT8Ew9nu/fttXAHjPRD59xuKHfnbf106LIMW8xfXzVyzR
VRoN1Zc0SAtLAzZllTr/C1udwTvpuol6VkY5uNPZ6OCELa2l4q7lYrz+SioS+9nj
r1pqm9cJnazL073SPeMXYIGnBONirShROZIF7Oc/q9S6BKn8/UcKQa6Rcsg8W5V5
JoK7ha2lv72rPMzLZbXqhFHPmEuXLG5kumBkWiciAMhntj4PVZKP8zaJsKm1jJ6c
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1608700861492319369622729087560338855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24523558822716575954066488063402878920731003981843035288922150099220119027213276132761356992363446864796679496437511200423386119189122772003533889259581151658197057158282726634269563132824130004902923416624585711599867561360106780003173973897358688216360655907406780058416235988546696548825418000864761677256945063162390672002169135434012646249056516407970928857647452104975029253096511909325958533233330234021886229030362737135105635601264151045502150686675118725089710111006977443141436644581074655761173444567746696768182064600228042195320633719149671275804374937714902388803344764696967662869845820356365660363811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12c3c4246c2c19dacb170e67b4006810ad72a914
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2689 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharekhanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneycredit.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investment-city.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-indemnisation-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-indemnisation-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-indemnisation-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-indemnisation-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurance-credit.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradetiger.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theamquant.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slow-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skweb.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharekonnect.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharekhanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcs.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocolesligne-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propositionarbitrage-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtrade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-city.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instamf.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infosync.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geolocalisation-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-refpdt-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-fwk-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dft.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultationcomptes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurance-credit.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfin-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-tmp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-pp.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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