c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:6e:ac:22:06:54:97:ad:a7:83:2e:d0:54:93:24:ba was issued on by DigiCert Inc.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:6e:ac:22:06:54:97:ad:a7:83:2e:d0:54:93:24:ba
Serial Number (int): 19183835865596182940563930777648309434
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c5:d0:33:c9:c0:ef:a8:b2:94:84:e5:f9:67:47:a0:99:8f:27:76:eb
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 48:b5:ae:26:61:75:a7:05:5d:73:2c:09:c4:03:aa:da:f8:0a:63:52
Fingerprint (sha256): 05:2b:81:22:bb:9f:3d:05:93:e5:34:e5:0e:cf:48:49:cc:18:8f:26:0e:38:83:b9:41:34:01:aa:bd:38:55:05

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
1-cortexplus-pp.bnpparibas.com
1-cortexplus.bnpparibas.com
1-globalmarkets-pp.bnpparibas.com
1-globalmarkets.bnpparibas.com
1-markets360-pp.bnpparibas.com
1-markets360.bnpparibas.com
1-origin-cortexplus.bnpparibas.com
2-cortexplus-pp.bnpparibas.com
2-cortexplus.bnpparibas.com
2-globalmarkets-pp.bnpparibas.com
2-globalmarkets.bnpparibas.com
2-markets360-pp.bnpparibas.com
2-markets360.bnpparibas.com
2-origin-cortexplus.bnpparibas.com
aeat.cash-cib.bnpparibas.es
affaires-publiques.bnpparibas.com
alis.bnpparibas.com
apac.bnpparibas
apac.bnpparibas.com
bnpparibas.at
bnpparibas.be
bnpparibas.bg
bnpparibas.ca
bnpparibas.cn
bnpparibas.co.kr
bnpparibas.co.th
bnpparibas.com.au
bnpparibas.com.cn
bnpparibas.com.co
bnpparibas.com.my
bnpparibas.com.sg
bnpparibas.de
bnpparibas.dk
bnpparibas.es
cfd-support.bbva.bnpparibas.com
chile.bnpparibas.com
china.bnpparibas.com
china.bnpparibas.com.cn
compliance-notifications.bnpparibas.com
connexis-guarantee.bnpparibas.com
connexistrade-cust-temp.bnpparibas.com
connexistrade-cust.bnpparibas.com
cortexfx.bnpparibas.com
cxt-stg.bnpparibas.com
democfd-support.bbva.bnpparibas.com
economieetentreprise.bnpparibas
economieetentreprises.bnpparibas
eqdpo.bnpparibas.com
flexsimmo.imex.bnpparibas.fr
indices-globalmarkets.bnpparibas.com
invest.bnpparibas.com
neobonds.bnpparibas
neobonds.staging.bnpparibas
precfd-support.bbva.bnpparibas.com
quotetransparency-pp.bnpparibas.com
quotetransparency.bnpparibas.com
surveys.bnpparibas.com
tokenauth-cib-stg.bnpparibas.com
tokenauth-cib.bnpparibas.com
try-cfd.bnpparibas.com
vietnam.bnpparibas.com
warrants-pp.bnpparibas.com
www.aeat.cash-cib.bnpparibas.es
www.affaires-publiques.bnpparibas.com
www.apac.bnpparibas
www.apac.bnpparibas.com
www.bnpparibas.at
www.bnpparibas.be
www.bnpparibas.bg
www.bnpparibas.ca
www.bnpparibas.cn
www.bnpparibas.co.kr
www.bnpparibas.co.th
www.bnpparibas.com.au
www.bnpparibas.com.cn
www.bnpparibas.com.co
www.bnpparibas.com.my
www.bnpparibas.com.sg
www.bnpparibas.de
www.bnpparibas.dk
www.bnpparibas.es
www.chile.bnpparibas.com
www.china.bnpparibas.com
www.china.bnpparibas.com.cn
www.compliance-notifications.bnpparibas.com
www.economieetentreprise.bnpparibas
www.economieetentreprises.bnpparibas
www.eqdpo.bnpparibas.com
www.indices-globalmarkets.bnpparibas.com
www.invest.bnpparibas.com
www.quotetransparency-pp.bnpparibas.com
www.quotetransparency.bnpparibas.com
www.vietnam.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE2ZQGonrdPpVGFdj+TZtsFgWyde1/
21ORhD+8tpyfSJ965bVo07YTgJb9Km5LClkkHfnAKxoz7fi3NwQYft0rgA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19183835865596182940563930777648309434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d99406a27add3e954615d8fe4d9b6c1605b275ed7fdb5391843fbcb69c9f489f7ae5b568d3b6138096fd2a6e4b0a59241df9c02b1a33edf8b73704187edd2b80
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5d033c9c0efa8b29484e5f96747a0998f2776eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2550 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-cortexplus-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-globalmarkets-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-markets360-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-markets360.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-origin-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-cortexplus-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-globalmarkets-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-markets360-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-markets360.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-origin-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeat.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affaires-publiques.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chile.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance-notifications.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexis-guarantee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistrade-cust-temp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistrade-cust.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexfx.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxt-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'democfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economieetentreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economieetentreprises.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqdpo.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexsimmo.imex.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indices-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobonds.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobonds.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotetransparency-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotetransparency.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenauth-cib-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenauth-cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-cfd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warrants-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeat.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affaires-publiques.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chile.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance-notifications.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economieetentreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economieetentreprises.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eqdpo.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indices-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invest.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotetransparency-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotetransparency.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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