bnp10s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS Hybrid ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 09:ca:4a:d2:3a:93:41:19:46:97:db:f2:e5:c2:ac:f7 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ca:4a:d2:3a:93:41:19:46:97:db:f2:e5:c2:ac:f7
Serial Number (int): 13013413481841226341417819526668659959
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c9:4e:4d:cd:73:95:50:64:cf:df:9c:25:81:54:eb:06:a4:25:10:bd
AuthorityKeyId: 0a:bc:08:29:17:8c:a5:39:6d:7a:0e:ce:33:c7:2e:b3:ed:fb:c3:7a

Fingerprint (sha1): da:7e:ae:36:d7:5b:96:cf:66:1c:1f:57:ed:5c:41:04:1e:f6:8d:ee
Fingerprint (sha256): 05:fe:dd:e1:34:29:94:f3:b5:22:76:19:c5:66:0e:ad:69:d6:87:b1:71:5d:ea:f6:86:c3:60:af:37:c8:b2:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl

Check the revocation status for certificate bnp10s.bnpparibas.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp10s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp10s.bnpparibas.com
www.webdoc.staging.bicicinet.net
www.webdoc-sn.staging.bicisnet.net
www.webdoc-dz.staging.bnpparibas.net
www.staging.nickel.eu
www.qualif.domofinance.com
www.preprod.domofinance.com
www.pass-portal.staging.bnpparibascardif.it
www.accountx2ca.bnl.it
ws-ext-webapptibco.staging.nickel.eu
ws-ext-webapptibco.preprod.nickel.eu
ws-ext-pinsms.staging.nickel.eu
ws-ext-pinsms.preprod.nickel.eu
ws-ext-onfido.preprod.nickel.eu
ws-ext-onfido.nickel.eu
ws-ext-monext.staging.nickel.eu
ws-ext-monext.preprod.nickel.eu
ws-ext-monext-tokenizer.staging.nickel.eu
ws-ext-monext-tokenizer.preprod.nickel.eu
ws-ext-monext-tokenizer.nickel.eu
ws-ext-infobip.staging.nickel.eu
ws-ext-infobip.preprod.nickel.eu
ws-ext-esendex.staging.nickel.eu
ws-ext-esendex.preprod.nickel.eu
widgets.staging.compte-nickel.fr
widgets.preprod.compte-nickel.fr
webdoc.staging.bicicinet.net
webdoc-sn.staging.bicisnet.net
webdoc-dz.staging.bnpparibas.net
wealthmanagement.bnpparibas.com
wealthmanagement.bnpparibas.co.in
wealthmanagement.bnpparibas.asia
wealthmanagement.bnpparibas
wealth.bnpparibas.asia
voc.bnpparibas.asia
telepassxbiz.it
telepassxbiz.com
tabletnickel-service.abm-uid.com
tablet-nickel.staging.abm-uid.com
tablet-nickel.preprod.abm-uid.com
sygma-esignrc.bnpparibas-pf.com
signature.cetelem.fr
signature-vad.domofinance.com
s.wealth.bnpparibas.de
s.wealth.bnpparibas.asia
qualif.domofinance.com
professionalbanking-wealthmanagement.bnpparibas.com
privatebanking.bnpparibas.com
private-bank.bnpparibas.com
prescripteur.signature.neuges.org
preprod.domofinance.com
pass-portal.staging.bnpparibascardif.it
partinst-esignrc.bnpparibas-pf.com
partenaires.qualif.domofinance.com
partenaires.preprod.domofinance.com
mywealth.bnpparibas.de
myimpact.wealthmanagement.bnpparibas
mpad-prod.staging.abm-uid.com
mpad-prod.preprod.abm-uid.com
mon-alpha.compte-nickel.fr
mobileservices2.bgl.lu
mobile.preprod.domofinance.com
mig.wealthmanagement.bnpparibas
mig-s.wealth.bnpparibas.de
mig-mywealth.bnpparibas.de
m.wealthmanagement.bnpparibas.com
imrs-we-wm.bnpparibas.asia
ifa.bnpparibas.com
ifa-international.bnpparibas.com
fzw.bnpparibas.com
fzw-ppd.bnpparibas.com
fo-wealth-2.bnpparibas.asia
fo-mywealth.bnpparibas.de
fo-mig-mywealth.bnpparibas.de
filebox.smsps-coll.bnl.it
exclusiveproperty.bnpparibas.com
etranplus.staging.bnpparibas.com
etranplus.bnpparibas.com
emprunteur.signature.neuges.org
devenir-distributeur.staging.compte-nickel.fr
devenir-distributeur.preprod.compte-nickel.fr
customer-registration-control-bo.abm-uid.com
customer-registration-admin-api.abm-uid.com
customer-call-center-api.abm-uid.com
courtier-sygma-esignrc.bnpparibas-pf.com
cetelem-esignrc.bnpparibas-pf.com
cct-wm-europe.bnpparibas.com
borne-choix-service.staging.abm-uid.com
bo-nickel.preprod.abm-uid.com
bo-nickel-alpha.abm-uid.com
auto.signature.neuges.org
asia-wealthmanagement.bnpparibas.com
agw-services.staging.bnpparibascardif.it
agrifrance.fr
accountx2ca.bnl.it

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for bnp10s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/QMSCQJWfvnYFlvGbZIoTzThf4nw
KJYUamvIhut9QjzpeAeaYrZCOmmxl7x5EQG/vh6o4j1SegqZ0GkALNObig==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13013413481841226341417819526668659959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS Hybrid ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp10s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004fd03120902567ef9d8165bc66d92284f34e17f89f02896146a6bc886eb7d423ce978079a62b6423a69b197bc791101bfbe1ea8e23d527a0a99d069002cd39b8a
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0abc0829178ca5396d7a0ece33c72eb3edfbc37a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c94e4dcd73955064cfdf9c258154eb06a42510bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3041 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp10s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc.staging.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.staging.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc.staging.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.staging.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement.bnpparibas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealth.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletnickel-service.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.wealth.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.wealth.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalbanking-wealthmanagement.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-bank.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealth.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myimpact.wealthmanagement.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-alpha.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices2.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mig.wealthmanagement.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mig-s.wealth.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mig-mywealth.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.wealthmanagement.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imrs-we-wm.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifa.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifa-international.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fo-wealth-2.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fo-mywealth.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fo-mig-mywealth.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebox.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exclusiveproperty.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-control-bo.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-admin-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-call-center-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm-europe.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borne-choix-service.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel-alpha.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asia-wealthmanagement.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agw-services.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrifrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (832 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30396709765214988435011233162575421771780986230620136061101239975433906164978122235188045518775954872495713856236443
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 34372122243007918615260483422873544655893874402653830302800782570292483156929615501437949499517584870922851067792794