bnp07b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:f8:2f:43:6d:3b:b9:97:42:99:dd:7d:a6:ef:53:59 was issued on by DigiCert Inc.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f8:2f:43:6d:3b:b9:97:42:99:dd:7d:a6:ef:53:59
Serial Number (int): 2617876232045882330940586474678997849
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 92:8a:3e:7c:89:ce:de:6f:23:44:53:a6:48:32:6e:51:ba:ca:25:1d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ea:1f:32:99:0e:d2:e9:40:64:f8:ca:c3:ba:1c:a4:b7:b8:00:f8:55
Fingerprint (sha256): 06:22:43:4f:38:09:2c:fc:49:b4:f4:6e:5c:80:9d:46:ec:c2:4e:ec:2c:ce:16:de:5c:12:24:1f:7b:2d:de:98

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bnp07b.bnpparibas.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp07b.bnpparibas.com
infosync.bnl.it
websalaries-preprod.assurance.fr
giant-pp-assurance.cardif.fr
protocolesligne-pp.cardif.fr
finagora-c03-rec.cardif.fr
www.zonacliente.cetelem.es
roszczenia.cardif.pl
comptes-c01-rec.cardif.fr
pms.sharekhan.com
epicaste-fwk-pp-assurance.cardif.fr
fastaccess-pp.cardif.fr
espace-indemnisation-pp.cardif.fr
adminfundquest-pp.cardif.fr
espace-indemnisation-c01-rec.cardif.fr
simulationcg-pp-assurance.cardif.fr
espace-assurance-c01-rec.cardif.fr
www.websalaries-preprod.assurance.fr
www.cetelem.es
simulationrentes-pp-assurance.cardif.fr
www.dsa-manage.cardif.pl
www.comercios.cetelem.es
dsa-services.cardif.pl
www.pre-dsa-services.cardif.pl
espace-assurance-pp.cardif.fr
consultationcomptes-pp-assurance.cardif.fr
fastaccess-c01-rec.cardif.fr
www.dsa-sales.cardif.pl
cis.sharekhan.com
espace-indemnisation-c03-rec.cardif.fr
espace-indemnisation-c02-rec.cardif.fr
propositionarbitrage-pp-assurance.cardif.fr
ew-ppd.cardif.ro
ss-qa.rcs.co.za
ew.cardif.ro
dsa-sales.cardif.pl
succession-assurance-vie-c02-rec.cardif.fr
www.dsa-services.cardif.pl
espace-assurance-c02-rec.cardif.fr
sfp-pp-assurance.cardif.fr
finagora-c01-rec.cardif.fr
comptes-c02-rec.cardif.fr
pre-dsa-services.cardif.pl
fastaccess-c03-rec.cardif.fr
finagora-pp.cardif.fr
shaker-pp-assurance.cardif.fr
www.auto.cetelem.es
epicaste-pp-assurance.cardif.fr
epicaste-refpdt-pp-assurance.cardif.fr
succession-assurance-vie-c01-rec.cardif.fr
finagora-c02-rec.cardif.fr
www.roszczenia.cardif.pl
espace-client-pp.cardif.fr
dsa-manage.cardif.pl
espace-client-c03-rec.cardif.fr
ptp-pp-assurance.cardif.fr
alfin-pp-assurance.cardif.fr
suivigiant-pp-assurance.cardif.fr
comptes-pp.cardif.fr
shaker-pp-tmp-assurance.cardif.fr
espace-client-c02-rec.cardif.fr
espace-assurance-c03-rec.cardif.fr
comptes-c03-rec.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
bnp02tpc.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
apis.bcef.caledonie.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
bnp07s.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
entreprises.ere.bnpparibas
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com

Certificate

The complete raw certificate details for bnp07b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5P8aR18PARZnqhywhtL
7vytN3wHoH7i3eryOzwrS/K7QCf40GaO67aUUiK3WjXu+czJtFZ4RbEErlGnoE5e
2BtXi4PGD25trgcNedtun+YgUp0UOl9OLhhdNCQorFTMXxkeiHtv0Y5AmbZUv1HY
uWci9YqdcHVQDbDQ188P/mSmt5M7P3IOdra27HApCzblBidjnkMu60cDnWPk/NVa
bhmh4zUzPp6ulYIkjMvDO3l3Qp4iHUrW68RtKR+B39vAfCrsCEtBTMjh7B/g66k9
dhd97gNAmUTFq6p78bRhD/xVusxMAfQcpXtBZ63DgeABBKdlGrGOnzNn70x1hSfJ
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2617876232045882330940586474678997849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26204303733985484155431723718095984863093611238378656999121241974370614335776140171963758277299670688720429084510045694968311501569331892107003701438387379600691408837563232748704720632389319081055344430404218646530174279884564695573393519653316135077708710010645330337658971408330621557182769607241928681422182131586088178324930209252041148169059234080528315341455612443985009925369743851522966168775346282333927055271962588391468266350037941802311041328973329431101527663439819786843496382163936902017346327425193927405781196032489016199325999644978327545684543076082202981443820847686260558969451847483358733388039
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							928a3e7c89cede6f234453a648326e51baca251d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infosync.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocolesligne-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-fwk-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultationcomptes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propositionarbitrage-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew-ppd.cardif.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew.cardif.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-refpdt-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfin-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b651ab7b90000040300473045022100a3dda60fbbc3c8b7fb929c9cc15d3f0dd731888d0825f16b3fe0b4deab770d92022027538ae75e51e26865afe6c4c3d5bc32a1b17b6968fabb2d391e35d6091693950076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b651ab80800000403004730450220128ef3f7405badbd490a721f0e4bbe96615a0bae6848ed59c0eca410a78afbcb022100cd36eeacb6fa787920752b54e9ed20e47de650a1ed9644773e6b297b98026f47
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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