tpc-login.mabanque.staging.bnpparibas.net

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2c:8e:84:7c:1c:b6:55:09:10:96:83:1e:14:7b:e4:44 was issued on by Entrust, Inc..

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 2c:8e:84:7c:1c:b6:55:09:10:96:83:1e:14:7b:e4:44
Serial Number (int): 59226025079694084062827215701352899652
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: bb:8b:d8:ca:4b:46:27:79:b0:1b:b8:90:34:14:21:19:76:09:cf:12
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 19:64:38:72:19:ce:87:70:85:61:ce:5b:93:5a:51:5d:4b:09:f6:32
Fingerprint (sha256): 02:ec:48:d0:7d:8d:0d:0e:69:74:08:99:76:e8:07:71:46:cf:e6:41:15:de:ea:c6:bd:e3:45:2b:62:82:67:73

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tpc-login.mabanque.staging.bnpparibas.net

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tpc-login.mabanque.staging.bnpparibas.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tpc-login.mabanque.staging.bnpparibas.net
sandbox.login.mabanque.staging.bnpparibas.net
sandbox.login.mabanque-s1.staging.bnpparibas.net
sandbox.login.mabanque-s2.staging.bnpparibas.net
sandbox.login.hellobankpro.staging.bnpparibas.net
sandbox.login.hellobankpro-s1.staging.bnpparibas.net
sandbox.login.hellobankpro-s2.staging.bnpparibas.net
sandbox.login.hellobank.staging.bnpparibas.net
sandbox.login.hellobank-s1.staging.bnpparibas.net
sandbox.login.hellobank-s2.staging.bnpparibas.net
login.mabanque.staging.bnpparibas.net
login.mabanque-s1.staging.bnpparibas.net
login.mabanque-s2.staging.bnpparibas.net
login.hellobankpro.staging.bnpparibas.net
login.hellobankpro-s1.staging.bnpparibas.net
login.hellobankpro-s2.staging.bnpparibas.net
login.hellobank.staging.bnpparibas.net
login.hellobank-s1.staging.bnpparibas.net
login.hellobank-s2.staging.bnpparibas.net
cledigitale.login.mabanque.staging.bnpparibas.net
cledigitale.login.mabanque-s1.staging.bnpparibas.net
cledigitale.login.mabanque-s2.staging.bnpparibas.net
cledigitale.login.hellobank.staging.bnpparibas.net
cledigitale.login.hellobank-s1.staging.bnpparibas.net
cledigitale.login.hellobank-s2.staging.bnpparibas.net

Other certificates including the domain name bnpparibas.net

(limited to 100 certificates)
exp1.mobile.entreprises.bnpparibas.net
bourses.bnpparibas.net
testsassuranceauto.bnpparibas.net
nc.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
prod-m-wea1s1-apa1s1.canalnet-pro.bnpparibas.net
bnp07s.bnpparibas.com
m-service-qual-we1-ap1-q.bnpparibas.net
mobile-waf-v2p2-secure.bnpparibas.net
bnp05b.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
bnpnetexp0.bnpparibas.net
protectionsante.bnpparibas.net
bnp06s.bnpparibas.com
automatesdcckms39.bnpparibas.net
tpc-login.mabanque.staging.bnpparibas.net
mabanque.bnpparibas
algerie.bnpparibas.net
mobo.bnpparibas.net
protectionsante.bnpparibas.net
bnp09s.bnpparibas.com
change.bnpparibas.net
bnp03s.bnpparibas.com
qua04-mutuelle-entreprises-bddf.bnpparibas.net
www.netcash2.bnpparibas.net
lesbonscomptes.bnpparibas.net
bnp06s.bnpparibas.com
bnp03s.bnpparibas.com
bnp06s.bnpparibas.com
m-service-qual-we1-ap1-q.bnpparibas.net
bnp09s.bnpparibas.com
bnp10s.bnpparibas.com
content.mabanque.bnpparibas
tpc-m-service.bnpparibas.net
bnp06s.bnpparibas.com
bnp07s.bnpparibas.com
algerie.bnpparibas.net
planification-retraite.bnpparibas.net
bnp07s.bnpparibas.com
mercanet3.bnpparibas.net
shopmobile.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp03s.bnpparibas.com
bourses.bnpparibas.net
bnp09s.bnpparibas.com
bnp10s.bnpparibas.com
secure1.entreprises.bnpparibas.net
bnp06s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
www.secure.bnpparibas.net
bnp09s.bnpparibas.com
secure1ms.entreprises.bnpparibas.net
tpc-login.mabanque.staging.bnpparibas.net
entrepartenairespros.bnpparibas.net
dsir-assurance.cardif.fr
prod-m-wea1s1-apa1s1.canalnet-part.bnpparibas.net
arval.com
qlf-grapheur.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09s.bnpparibas.com
animation.bnpparibas.net
app-mobile.entreprises.bnpparibas.net
automatesdcckms39.bnpparibas.net
bnp10s.bnpparibas.com
www.pse-qual.netcash.bnpparibas.net
bnp18b.bnpparibas.com
bnp09s.bnpparibas.com
mailingbmmstaging.bnpparibas.net
arval.com
bnp03s.bnpparibas.com
bnp06s.bnpparibas.com
bnp10s.bnpparibas.com
offres.bnpparibas.net
arval.fr
m.lanetagence.bnpparibas.net
arval.fr
bnp05b.bnpparibas.com
simple.qua02.entreprises.bnpparibas.net
bnp11s.bnpparibas.com
bnp06s.bnpparibas.com
WWW.EUROPEANCARDACQUIRING.BNPPARIBAS.NET
www.netcash2.bnpparibas.net
bnp05b.bnpparibas.com
bnp09s.bnpparibas.com
mailingbmmstaging.bnpparibas.net
bnp10s.bnpparibas.com
*.canalnet-pro.bnpparibas.net
bnp07s.bnpparibas.com
bnp06s.bnpparibas.com
simulateur-retraite.bnpparibas.net
automatesdccAP05568prod.bnpparibas.net
bnp05b.bnpparibas.com
bnp10s.bnpparibas.com
mabanqueprivee.bnpparibas.net
bnp09s.bnpparibas.com
WWW.EUROPEANCARDACQUIRING.BNPPARIBAS.NET
bnp09s.bnpparibas.com
bnp03s.bnpparibas.com

Certificate

The complete raw certificate details for tpc-login.mabanque.staging.bnpparibas.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaAv1rpCIIx/IEohdSt5
+ltSNL54KsMxiIA1A1cM2z7K9y0jXHTOVFUjvMWlp1zA8jJQo6ctfeXPbxkwY3tH
8UfPEvBIL1TdymARMwj8esbuSMes3ROnXSkc1LM0v3V8vraEfbtKqE2qL1VZ0pN6
onZcMCRbxwe3nkFhgxum0mmssS+efZac+qHxexkrJlL8lTBQdFtJh7f9Bsz3Vnzk
hxGsxuSWMadA4ifAdeuhA//tvDr7F9aVy5Umh3yM3epgRd+ka46oGlPkAw/oyJRZ
UFvSOT/rACTz102T/t5oxHRmhF26pKkjv+213k8VNHB1fBkGXxGrN0UKAcA5J6GY
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59226025079694084062827215701352899652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 10:43:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-11 10:43:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tpc-login.mabanque.staging.bnpparibas.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22423171068742362590799793653779346399405616942398734727192782447985971338635372064762860514212998983028989145594778994121049060673995314502390724328231281785346953175662102751727466164117584479914351041730372784851050725127121246829784857060893110566434889735419153340512883381946309233331239195128944945497728424561445811651424305752677534656455956482680197909056963644071469621597998706415177297894621911564409784642783062454387858908560471864067557590209717656142759427511394865035922183679239118024601928168684648877867148062427958765412302587973548082946972297482334082003311571456190852621802120405154820888727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb8bd8ca4b462779b01bb890341421197609cf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1208 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpc-login.mabanque.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.mabanque.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.mabanque-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.mabanque-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobankpro.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobankpro-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobankpro-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobank.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobank-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobank-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mabanque.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mabanque-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mabanque-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobankpro.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobankpro-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobankpro-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobank.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobank-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobank-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.mabanque.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.mabanque-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.mabanque-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.hellobank.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.hellobank-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.hellobank-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00892a5b72d884ef8542d3356224dabe970509845a39ce10e51c9ff14bda54acadbd74225598806095135d578e712816b39cbe0ba40ea7e46e9d0ba54a5dcd5898d4472cacfbab9c020583346ba3f0bfdcb9cc81e175f927411bc1f151a43e8f45b15e083443aed9e04eae44eebcced6ecff9fac4c9922ecedc721b4dbe8746ce42c4566c822651760ef7a585833a162a6d285c65316bba53392f595e2af2ed438b3f2c7f5225dfe0c04d44147aa980eadecb2d6b01489c74af1a9b25a486da4d32dc31323eccb8d436b06015f8cbdd220127a1b2f80436a1aa3d47ce9d656cf9fe8b6c909d8811aabf3ac4eb6f67faad84e2462fd09a44c0666ad84d913f2fd0f