bnp06s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:c5:7f:09:76:b8:1d:18:bc:b4:01:d2:10:ec:7d:a7 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c5:7f:09:76:b8:1d:18:bc:b4:01:d2:10:ec:7d:a7
Serial Number (int): 6342371080085961839633781703874215335
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 42:4f:57:b9:6d:1b:13:8e:c7:26:fc:44:57:a9:54:c4:65:b6:77:03
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d1:39:13:29:70:e8:b6:d5:b5:01:22:e5:53:ba:7d:02:23:01:12:23
Fingerprint (sha256): 04:c3:9e:55:29:6c:c3:bd:75:18:c0:11:34:1b:8e:cb:1c:46:6e:0d:7a:2f:a3:e0:6c:3f:8f:35:47:b4:f0:10

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate bnp06s.bnpparibas.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp06s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dsecure.teb-kos.com
algerie.bnpparibas.net
antilles-guyane.bnpparibas.net
apistore.bnpparibas
authentication.bnpparibas.com
authentication.staging.bnpparibas-am.com
authentication.temp.bnpparibas.com
bankingaemcoll.bnl.it
bankingcollnew.hellobank.it
basic06.formation.akatest.pilax.com
biciabnet.net
bicicinet.net
bicignet.net
biciguinet.net
bicimnet.net
bnp06s.bnpparibas.com
cbg.uat2.bnpparibas.com
cdn-hermes.bnpparibas.com
central-hermes.bnpparibas.com
citrixlam.cardifnet.com
comercios.cetelem.es
contrib-hermes.bnpparibas.com
country1-hermes.bnpparibas.com
country10-hermes.bnpparibas.com
country2-hermes.bnpparibas.com
country3-hermes.bnpparibas.com
country4-hermes.bnpparibas.com
country5-hermes.bnpparibas.com
country6-hermes.bnpparibas.com
country7-hermes.bnpparibas.com
country8-hermes.bnpparibas.com
country9-hermes.bnpparibas.com
demo-entreprises-ere.bnpparibas.com
demo-oreo.staging.bnpparibas.com
denuncioonline-bancoestado-uat.cardifnet.com
denuncioonline-uat.cardifnet.com
ebiznes.teb-kos.com
entreprises-ere.bnpparibas.com
entreprises-ere.temp.bnpparibas.com
eretail.teb-kos.com
eware.centric.bnpparibas.com
expe-122-opf.bnpparibas.com
inquiro-trade-qual.staging.bnpparibas.com
inquiro-trade.bnpparibas.com
mdm.teb-kos.com
myhubcoll.bnl.it
nc.bnpparibas.net
oreo.staging.bnpparibas-am.com
oreo.temp.staging.bnpparibas-am.com
owa.teb-kos.com
privatebanking.bnl.it
recruitment.teb-kos.com
remote.teb-kos.com
remoteassist.teb-kos.com
std06-eu.formation.akatest.pilax.com
std06.formation.akatest.pilax.com
stgdanshin.cardif.co.jp
teb-kos.com
temporaire-antilles-guyane.bnpparibas.net
temporaire-guyane.bnpparibas.net
temporaire-nc.bnpparibas.net
temporaire-www.biciabnet.net
temporaire-www.bicicinet.net
temporaire-www.bicignet.net
temporaire-www.biciguinet.net
temporaire-www.bicimnet.net
webapp.teb-kos.com
webchat.teb-kos.com
welovecinema.bnpparibas
welovecinema.bnpparibas.com
welovecinema.fr
www.antilles-guyane.bnpparibas.net
www.biciabnet.net
www.bicicinet.net
www.bicignet.net
www.biciguinet.net
www.bicimnet.net
www.cdn-hermes.bnpparibas.com
www.central-hermes.bnpparibas.com
www.comercios.cetelem.es
www.contrib-hermes.bnpparibas.com
www.country1-hermes.bnpparibas.com
www.country10-hermes.bnpparibas.com
www.country2-hermes.bnpparibas.com
www.country3-hermes.bnpparibas.com
www.country4-hermes.bnpparibas.com
www.country5-hermes.bnpparibas.com
www.country6-hermes.bnpparibas.com
www.country7-hermes.bnpparibas.com
www.country8-hermes.bnpparibas.com
www.country9-hermes.bnpparibas.com
www.findomestic.it
www.nc.bnpparibas.net
www.privatebanking.bnl.it
www.teb-kos.com
www.welovecinema.bnpparibas
wwwcollnew.hellobank.it

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp06s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEAquLFOfCoDSaDOJiGT7ucqE46K9a
2/fTWSvsR3x6RgY4FWLaizL0QKpdRM/N052uQx1veLa8D+UtY4HdbdAyqA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6342371080085961839633781703874215335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp06s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000402ab8b14e7c2a0349a0ce262193eee72a138e8af5adbf7d3592bec477c7a4606381562da8b32f440aa5d44cfcdd39dae431d6f78b6bc0fe52d6381dd6dd032a8
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							424f57b96d1b138ec726fc4457a954c465b67703
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dsecure.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apistore.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.temp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingcollnew.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic06.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicimnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp06s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbg.uat2.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrixlam.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country1-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country10-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country2-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country3-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country4-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country5-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country6-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country7-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country8-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'country9-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-entreprises-ere.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oreo.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denuncioonline-bancoestado-uat.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denuncioonline-uat.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiznes.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.temp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eretail.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.centric.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe-122-opf.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade-qual.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhubcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreo.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreo.temp.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoteassist.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std06-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std06.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgdanshin.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicimnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchat.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicimnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.central-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contrib-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country1-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country10-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country2-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country3-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country4-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country5-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country6-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country7-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country8-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.country9-hermes.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findomestic.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebanking.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welovecinema.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcollnew.hellobank.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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