bnp09b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:16:67:f3:88:48:f6:79:13:dc:ea:bb:6c:c5:13:64 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:16:67:f3:88:48:f6:79:13:dc:ea:bb:6c:c5:13:64
Serial Number (int): 6762478892623180590991686389735953252
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6e:32:84:f7:f8:4b:6d:27:35:bc:04:fc:34:cc:d6:8f:2b:d3:b1:3b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e8:20:d5:4c:7f:d7:f8:77:15:20:fd:44:bc:fc:8d:84:6c:21:3e:f9
Fingerprint (sha256): 03:3f:fa:49:ac:f5:7c:33:8e:f2:d8:49:5b:48:7c:97:11:39:93:84:80:1b:5f:19:bc:76:9f:d2:c0:bc:66:29

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bnp09b.bnpparibas.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp09b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp09b.bnpparibas.com
diversipierre.opci.bnpparibas
espace-indemnisation.cardif.fr
edc-wave.cardif.de
comptes.cardif.fr
finagora.nl
connect.bnppre.com
wave.cardif.de
testweb.cardif.de
www.cardif-service.de
partenaires.cardif.fr
www.wavedemo.cardif.de
adviseurzoeker.bnpparibascardif.nl
test.cardif-service.de
www.preprod.t-mobile.cardif.at
produkte.cardif.de
liferaytest.cardif.de
geolocalisation-assurance.cardif.fr
mycardif.cardif.de
www.finagora.com
bnpparibascardif.de
testmycardif.cardif.de
www.bnpparibascardif.nl
finagora.cardif.fr
www.wavetest.cardif.de
www.app.mycardif.cardif.de
succession-assurance-vie.cardif.fr
digitallifeprotect.de
cardifservice.de
capri.cardif.de
www.wave.cardif.de
document-information-cle.cardif.fr
www.capri.cardif.de
cardif.de
api-services-uat.cardifnet.com
www.cardif.de
www.t-mobile.cardif.at
t-mobile.cardif.at
mobiconnect.bnppre.com
gae-valutazioni.bnppre.com
www.cardif.fr
auto.bnpparibascardif.cl
www.finagora.nl
staging.bnpparibascardif.nl
simulationcg-prod-assurance.cardif.fr
cardif.fr
votre-selection.bnppre.fr
testcapri.cardif.de
fastaccess.cardif.fr
www.digitallifeprotect.de
www.cardifservice.de
app.mycardif.cardif.de
finagora.com
www.websalaries.assurance.fr
wavetest.cardif.de
www.edc-wavedemo.cardif.de
mycardif.de
digital-applications-uat.cardifnet.com
edc-wavetest.cardif.de
edc-wavedemo.cardif.de
reim.bnpparibas.it
bnpparibascardif.nl
tma.cardif.at
consultationcomptes-prod-assurance.cardif.fr
app.mycardiftest.cardif.de
giant-prod-assurance.cardif.fr
websalaries.assurance.fr
www.tma.cardif.at
sfp-assurance.cardif.fr
simulationrentes-prod-assurance.cardif.fr
www.mycardif.cardif.de
espace-client.cardif.fr
bnlfi.it
www.edc-wave.cardif.de
adminportail.cardif.fr
www.produkte.cardif.de
propositionarbitrage.cardif.fr
espace-assurance.cardif.fr
www.mycardif.de
www.liferaytest.cardif.de
preprod.t-mobile.cardif.at
www.bnpparibascardif.de
www.testcapri.cardif.de
wavedemo.cardif.de
alfin-prod-assurance.cardif.fr
www.edc-wavetest.cardif.de
protocolesligne.cardif.fr
www.reim.bnpparibas.it
cardif-service.de

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp09b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1yKm2NavO643pVLQERH
IQARcBCKJbfDOLBDHLQOXP9D60W1or+Jwu+7SbdL400YeE8C5Hn/qwcXQY2sCHzl
wHQboj6s2ZHU0XP8A3IkdUFtthfR4lXA1Z3sk0gn0HmTlTvtX45B9E7uxKZs/TKQ
2UhNsht9U/NRWw013SXYK3d+csMBNYSQR04Cd1ZCIXWSyjYu/nMeQk1FwSz3haz3
3dDa0/CtLliJLQCluVHmuWwxBbqlDQbj8v1R/NJGh78IHN8ehpBkNvwew2BXjpOA
7KlDNxYtb1ItdWVZDuU7ftPVuJ58i2VExeufmjhHxxCJFHHpxbCrjVAvzlw39jdX
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6762478892623180590991686389735953252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp09b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24662103350055251988890881191341069329380192646463924133750492213208873765847696512496092563048261031570691157320024196086222667596598367760915376302345400121447036792990074582078278992720058102618727693827645876187108595169717354814747388262497410912998164298231677032020917962669538809850002481929857303126231616213061822930000441404108758339724424042910405424632299644059484297518928521714147656478263042921490411879779822816377913353569922476642869364682796030039460565186511841766297855126661320836203070334277743408170040959732692159774790272250211704948885202713784477980905874888612105622103629564797586462577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e3284f7f84b6d2735bc04fc34ccd68f2bd3b13b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp09b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversipierre.opci.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edc-wave.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.bnppre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wave.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testweb.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif-service.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavedemo.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adviseurzoeker.bnpparibascardif.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cardif-service.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.t-mobile.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produkte.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liferaytest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geolocalisation-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycardif.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finagora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testmycardif.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavetest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.mycardif.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitallifeprotect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardifservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capri.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wave.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'document-information-cle.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capri.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-services-uat.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t-mobile.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobile.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiconnect.bnppre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gae-valutazioni.bnppre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.bnpparibascardif.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finagora.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bnpparibascardif.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'votre-selection.bnppre.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcapri.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitallifeprotect.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardifservice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mycardif.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websalaries.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavetest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edc-wavedemo.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-applications-uat.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edc-wavetest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edc-wavedemo.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reim.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tma.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultationcomptes-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mycardiftest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giant-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websalaries.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tma.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycardif.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnlfi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edc-wave.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminportail.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.produkte.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propositionarbitrage.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liferaytest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.t-mobile.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testcapri.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavedemo.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfin-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edc-wavetest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocolesligne.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reim.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif-service.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016db4c206ff000004030047304502200ed66c7f1f02cf2c77b3c77213521b84c89c90c3459b0c337423339ee106a8f1022100c7e6d7809eb828fe59522087b8abed7f2127e8a5e7c588154164a77150b658960076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016db4c2076b0000040300473045022100a97e33623e3b708d9e88f43dac745da67b400cda790c17014497064f167171f10220321725490fb0fccfccace02852c79af7d33a030d48354c9039c95b36a2ae0547
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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