bnp19b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:d8:97:46:6b:ad:e7:fd:11:95:c1:80:c5:41:bb:a5 was issued on by DigiCert Inc.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:97:46:6b:ad:e7:fd:11:95:c1:80:c5:41:bb:a5
Serial Number (int): 6441516327729849412743641397574351781
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ed:bf:14:25:9a:d4:56:d3:6c:21:de:fa:05:03:6b:72:1e:fe:5b:40
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 4b:26:09:66:b0:e1:df:b0:e3:9a:da:57:5d:79:c7:91:8f:d3:55:45
Fingerprint (sha256): 04:7a:60:1e:f6:3d:fc:98:d0:6d:56:b3:58:60:73:3a:6d:13:83:09:f1:b4:0c:e2:7d:92:3a:7a:61:9a:ab:79

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp19b.bnpparibas.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp19b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp19b.bnpparibas.com
adobeconnector.pre.arval.com
apm.pre.arval.com
atweb.pre.arval.com
bemig.pre.arval.com
brmig.pre.arval.com
ca-idm.pre.arval.com
cas-mock.rcs.co.za
cas-qa.rcs.co.za
checkoutconnector.uat.arval.com
customer-reporting.pre.arval.com
diagprevoyance.bnpparibas.com
distrib-preprod.cetelem.fr
espace-contrats.bnpparibas-pf.com
espace-contrats.cetelem.fr
espace-contrats.cofinoga.fr
espace-contrats.creditclick.fr
espace-contrats.domofinance.com
espace-contrats.norrsken.fr
gateway-api.uat.arval.com
hom-2.credit-moderne.com
homol-icommerce.neuges.org
homol-inetgp.neuges.org
homologation.renovpret.fr
iam.dev.arval.com
m.frweb.uat.arval.com
m.uat.arval.fr
mamig.pre.arval.com
motortrade.uat.arval.es
motortrade.uat.arval.fr
noweb.pre.arval.com
omni-oim.int.arval.com
omni-oim.uat.arval.com
pf-partners.cetelem.fr
pre-prod-stock-auto.cetelem.fr
rec-moncontrat.renovpret.fr
recette-cmonbusiness.bnpparibas-pf.com
recette-espace-contrats-cafineo-fr.neuges.org
recette-espace-contrats-cetelem.neuges.org
recette-espace-contrats-credit-moderne.neuges.org
recette-espace-contrats-domofinance.neuges.org
recette-moncontrat.neuges.org
recette-partenariat-bnpparibas-pf-com.neuges.org
recette-ppewshop-restricted.neuges.org
recette-services-cetelem-fr.neuges.org
recette-simulateur-credit-domofinance.neuges.org
recette.auto.signature.neuges.org
recette.cetelem-esignrc.bnpparibas-pf.com
recette.courtier-sygma-esignrc.bnpparibas-pf.com
recette.dist-auto.signature.neuges.org
recette.emprunteur.signature.neuges.org
recette.espace-contrats.bnpparibas-pf.com
recette.espace-contrats.cofinoga.fr
recette.espace-contrats.emprunteur.neuges.org
recette.espace-contrats.prescripteur.neuges.org
recette.partinst-esignrc.bnpparibas-pf.com
recette.portaildeclassement.neuges.org
recette.prescripteur.signature.neuges.org
recette.signature-vad.domofinance.com
recette.sygma-esignrc.bnpparibas-pf.com
recette.vuevendeur.neuges.org
renovpret.fr
riskstudy.pre.arval.com
romig.pre.arval.com
simulationrentes-c1-assurance.staging.cardif.fr
simulationrentes-prod-tmp-assurance.cardif.fr
staging.rcs.co.za
staging.renovpret.fr
stock-auto.cetelem.fr
track-qa.rcs.co.za
track.rcs.co.za
uat.arval.fr
wm-rct2-speed.neuges.org
wm-rt-speed.neuges.org
www.renovpret.fr
www.simulationrentes-c1-assurance.staging.cardif.fr
www.simulationrentes-prod-tmp-assurance.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp19b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry5Ug4JtrcYQrwTif+06
Yq49Sfjk21DnJBJHlhL0k9YtcyMUqr8WjMnb/htqoceMMkMqrct0KBlPmbSfIeTR
8vL9aa34o+5cDYAMWakkPEbU9wOsKq809Pqp3MvTgz9cUESQgoIxhcFrMlPOyCOz
VZCuB3+OMzRfmJembsREAsJg2r83WPMeainHcYsAFW90KlZb/k02NnV7E0bRU4pW
dE1GvqZnILy70fN/GATJS1fd8ySJq5BlYZ91m7uX8EBDPi1L016Hm3SVvOt5x7cb
9HiPBYQu2/pvpAz/wRoo4fudPqmpa+c2FfY1P8uUEMILA/t8Qqhq/cuKE5d9yfv6
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6441516327729849412743641397574351781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp19b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22114549608480455694908330505239817297355816282010237596584106739994083736701876984274703421909058429977506063924755266305778842242334756099675730439917916514530885288400770280974647012713425409304800277365420433072305278561802586048422475056475834043953972225164898629763946390945864083177956457107191229027140800120111097205203920749684047017998132494295968867159640247919442905260215315709396440813332448876047087041128327624509568744114204240257096458338239753820049123740776866040391371210539477509928107193312876310050443057545119388597300691048805405509550372800404430434848263160407409455940808779842931391089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edbf14259ad456d36c21defa05036b721efe5b40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2434 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp19b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adobeconnector.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apm.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bemig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brmig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-idm.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-mock.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkoutconnector.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-reporting.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagprevoyance.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distrib-preprod.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway-api.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hom-2.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-icommerce.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-inetgp.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.dev.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.frweb.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.uat.arval.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mamig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motortrade.uat.arval.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motortrade.uat.arval.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omni-oim.int.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omni-oim.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pf-partners.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-prod-stock-auto.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec-moncontrat.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-cmonbusiness.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-cafineo-fr.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-cetelem.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-credit-moderne.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-domofinance.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-moncontrat.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-partenariat-bnpparibas-pf-com.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-ppewshop-restricted.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-services-cetelem-fr.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-simulateur-credit-domofinance.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.dist-auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.emprunteur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.prescripteur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.portaildeclassement.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.vuevendeur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskstudy.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-c1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-prod-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stock-auto.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.arval.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-rct2-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-rt-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationrentes-c1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationrentes-prod-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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