bnp19b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:0f:1e:5f:6f:a7:9c:0e:1d:5d:81:94:9a:c7:8c:f9 was issued on by DigiCert Inc.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:0f:1e:5f:6f:a7:9c:0e:1d:5d:81:94:9a:c7:8c:f9
Serial Number (int): 10712324452676361454469884003794521337
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4e:73:6a:b4:67:f1:22:cc:a8:74:b7:07:c9:eb:9b:8f:88:4a:da:3e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f3:b9:8f:3b:9e:a1:0d:1f:49:af:9b:ad:8b:34:d2:f1:91:b7:14:64
Fingerprint (sha256): 06:d4:8b:65:13:a8:cf:6d:ab:8c:4e:88:ed:79:3e:dd:88:0b:bf:89:f8:79:f2:91:8b:66:45:a1:56:dd:c8:d6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp19b.bnpparibas.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp19b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp19b.bnpparibas.com
cas-mock.rcs.co.za
cas-qa.rcs.co.za
cct-wm-europe.staging.bnpparibas.com
cct-wm.staging.bnpparibas.asia
creditmoderne-prod-speed.neuges.org
distrib-preprod.cetelem.fr
espace-contrats.bnpparibas-pf.com
espace-contrats.cetelem.fr
espace-contrats.cofinoga.fr
espace-contrats.creditclick.fr
espace-contrats.domofinance.com
espace-contrats.norrsken.fr
hom-2.credit-moderne.com
homol-icommerce.neuges.org
homol-inetgp.neuges.org
homologation.renovpret.fr
jlr.sandbox.creditclick.fr
jlr.staging.creditclick.fr
moncontrat-projeo.neuges.org
moncontrat.cafineo.fr
moncontrat.cetelem.fr
moncontrat.cofinoga.fr
moncontrat.domofinance.com
moncontrat.domofinance.fr
moncontrat.norrsken.fr
mywealth-staging.bnpparibas.de
partenariat.bnpparibas-pf.com
pegasus-wm-test.bnpparibas.com
pf-partners.cetelem.fr
pre-prod-stock-auto.cetelem.fr
prod.cofinoga.fr
prod.credit-moderne.com
professionalbanking-wealthmanagement-staging.bnpparibas.com
rec-moncontrat.renovpret.fr
recette-cmonbusiness.bnpparibas-pf.com
recette-espace-contrats-cafineo-fr.neuges.org
recette-espace-contrats-cetelem.neuges.org
recette-espace-contrats-credit-moderne.neuges.org
recette-espace-contrats-domofinance.neuges.org
recette-moncontrat.neuges.org
recette-partenariat-bnpparibas-pf-com.neuges.org
recette-ppewshop-restricted.neuges.org
recette-services-cetelem-fr.neuges.org
recette-simulateur-credit-domofinance.neuges.org
recette.auto.signature.neuges.org
recette.cetelem-esignrc.bnpparibas-pf.com
recette.courtier-sygma-esignrc.bnpparibas-pf.com
recette.dist-auto.signature.neuges.org
recette.emprunteur.signature.neuges.org
recette.espace-contrats.bnpparibas-pf.com
recette.espace-contrats.cofinoga.fr
recette.espace-contrats.emprunteur.neuges.org
recette.espace-contrats.prescripteur.neuges.org
recette.partinst-esignrc.bnpparibas-pf.com
recette.portaildeclassement.neuges.org
recette.prescripteur.signature.neuges.org
recette.signature-vad.domofinance.com
recette.sygma-esignrc.bnpparibas-pf.com
recette.vuevendeur.neuges.org
renovpret.fr
s.voiceofwealth.staging.bnpparibas
sec.neuges.org
secure.cetelem.fr
simulateur.credit.domofinance.com
staging.rcs.co.za
staging.renovpret.fr
stock-auto.cetelem.fr
track-qa.rcs.co.za
track.rcs.co.za
voc-staging.bnpparibas.asia
voiceofwealth.staging.bnpparibas
wealth-staging.bnpparibas.asia
wealthmanagement-staging.bnpparibas
wealthmanagement-staging.bnpparibas.asia
wealthmanagement-staging.bnpparibas.com
wm-prod-speed.neuges.org
wm-rct2-speed.neuges.org
wm-rt-speed.neuges.org
www.jlr.sandbox.creditclick.fr
www.jlr.staging.creditclick.fr
www.renovpret.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for bnp19b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfgWrTpWEz0vV/s+Nr5Ezj9W+2Y2G
sUtdslft1UB6+rZ50Iky3QWYXCarQudoVkVWo4gnlbFHUgr70B8+pHSR6Q==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10712324452676361454469884003794521337
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp19b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047e05ab4e9584cf4bd5fecf8daf91338fd5bed98d86b14b5db257edd5407afab679d08932dd05985c26ab42e768564556a3882795b147520afbd01f3ea47491e9
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e736ab467f122cca874b707c9eb9b8f884ada3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2669 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp19b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-mock.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm-europe.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm.staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditmoderne-prod-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distrib-preprod.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hom-2.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-icommerce.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-inetgp.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlr.sandbox.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jlr.staging.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat-projeo.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.domofinance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealth-staging.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenariat.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegasus-wm-test.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pf-partners.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-prod-stock-auto.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalbanking-wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec-moncontrat.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-cmonbusiness.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-cafineo-fr.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-cetelem.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-credit-moderne.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-domofinance.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-moncontrat.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-partenariat-bnpparibas-pf-com.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-ppewshop-restricted.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-services-cetelem-fr.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-simulateur-credit-domofinance.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.dist-auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.emprunteur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.prescripteur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.portaildeclassement.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.vuevendeur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.voiceofwealth.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulateur.credit.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stock-auto.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voiceofwealth.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealth-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-prod-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-rct2-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-rt-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlr.sandbox.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jlr.staging.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renovpret.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0029aaf41832f800b251a9e84b98c043d0ebc6f2cc596b4c8b2a5c2b45d728e064ec3a57f4a854d7d41cd08b196bc2c596101ce43b75d8dbf40e8297ce65a5e44b84bf9ed48123727b59b01f2a5123b0bbb8398b62c057d1afea9a5f87e035249be3e0ff05a712a892999d5715534af080220c555dc860bb64ada3d2df58c8933d42b707370f127b187724cb0d82f9b5b080b8943d5b7e382a739f671dde089ab3c2568ef752f16675aafd8018989d9c259bf80efdd42ecba41bf4057df65f125e86f7eb4f8068a3d4267b13393b2488f483af2ee0298d82ba4aa8cdd0f1e9372d4beba70ad8b76c34ba02fc6ef5d0ca0b61c606cd1dd9f6d92b18af88fcba3323