bnp12b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:a0:a8:e6:d6:63:cc:77:32:ce:e7:90:4e:3e:9b:27 was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:a0:a8:e6:d6:63:cc:77:32:ce:e7:90:4e:3e:9b:27
Serial Number (int): 10138789201501216611816259816494373671
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 87:c7:ba:55:80:b1:09:26:c9:08:a9:bc:a9:c8:86:e3:c9:ad:4a:c6
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 2c:4c:44:6a:49:c5:12:66:22:6e:d9:af:29:db:32:d4:11:7f:5c:0c
Fingerprint (sha256): 07:90:ce:81:57:09:c7:9d:05:38:64:5f:03:64:8f:b4:05:a3:d1:dc:2f:5a:5d:63:1b:0a:ea:d3:10:1d:50:47

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp12b.bnpparibas.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp12b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp12b.bnpparibas.com
accesspanel.echangeur.fr
api.ere.staging.bnpparibas.com
backend.domofinance.com
backend.preprod.domofinance.com
backend.qualif.domofinance.com
bnpparibascardif.be
bnpparibascardif.cl
bnpparibascardif.com
bnpparibascardif.com.ar
bnpparibascardif.com.co
bnpparibascardif.com.mx
bnpparibascardif.com.pe
bnpparibascardif.it
bo.preprod.cercle-actionnaires.bnpparibas
caplinkinvestor-ppd.bnpparibas.com
caplinkinvestor-uat.staging.bnpparibas.com
caplinkinvestor.bnpparibas.com
cardif.be
cardif.com.mx
cardif.cz
cardif.pl
cdn.bo.preprod.cercle-actionnaires.bnpparibas
cdn.preprod.cercle-actionnaires.bnpparibas
cloud.echangeur.fr
connexisguarantee-preprod.bnpparibas.com
connexisguarantee.bnpparibas.com
connexisguarantee.staging.bnpparibas.com
corporate.cardifluxvie.lu
cwextranet-simple.staging.bnpparibas-am.com
cwextranet-strong.staging.bnpparibas-am.com
demo-oreo.staging.bnpparibas.com
domofinance.com
ebroker-preprod.sygmabnpparibas-pf.com
echangeur.fr
epicaste.cardif.fr
espace-client.cetelem.fr
fem.icare-service.com
fem.staging.icare-service.com
front.preprod.cercle-actionnaires.bnpparibas
geode1.staging.bnpparibas.com
geoloc-centresagrees-pp-assurance.cardif.fr
geoloc-centresagrees.cardif.fr
groeivermogen.nl
hsp-uat.bnpparibas.com
investors-corner.staging.bnpparibas-am.com
map.transverseplatform.net
medias-epargne-retraite-entreprises-bnpparibas-com.is.bnpparibas-ip.com
mobile.domofinance.com
mobile.preprod.domofinance.com
mobile.qualif.domofinance.com
mytreasury1.staging.bnpparibas.com
observatoirecetelem.com
partenaires.domofinance.com
partenaires.preprod.domofinance.com
partenaires.qualif.domofinance.com
personal-finance.bnpparibas
portailsygma-preprod.sygmabnpparibas-pf.com
preprod.domofinance.com
project-ci.map.transverseplatform.net
qualif.domofinance.com
quelle-epargne-choisir.staging.bnpparibas.com
recette-cck.icare-service.com
sid.demo.icare-service.com
sid.demo.staging.icare-service.com
sid.icare-service.com
sid.staging.icare-service.com
simulationcg-1-tp-assurance.staging.cardif.fr
simulationcg-2-tp-assurance.staging.cardif.fr
simulationcg-c01-assurance.staging.cardif.fr
simulationcg-c02-assurance.staging.cardif.fr
webicare.icare-service.com
webicarepp.icare-service.com
ws.demo.icare-service.com
www.bnpparibascardif.be
www.bnpparibascardif.cl
www.bnpparibascardif.com
www.bnpparibascardif.com.ar
www.bnpparibascardif.com.co
www.bnpparibascardif.com.mx
www.bnpparibascardif.com.pe
www.bnpparibascardif.it
www.cardif.com.mx
www.cardif.cz
www.cardif.pl
www.corporate.cardifluxvie.lu
www.domofinance.com
www.echangeur.fr
www.groeivermogen.nl
www.observatoirecetelem.com
www.preprod.domofinance.com
www.qualif.domofinance.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp12b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolgAtDYpW38CIdMBX1gc
qP3BbKbB0lTOaKCYTsrLMioGVjT1OYIF8d846jzm2yd61Qs2qoggutUJCXTxeCym
Voho41OraQ0eCxucA40haCLK1qAYbA6jzklO71A1eFR9tD5BnK4VUDqhboq+n9Xy
y+eN98y5FPRP+yekGoYSUK/sllby9zon+dby6AkO6TZCAhTSiVjO0xzGAaV5E1h2
E5QOSxeXyGgwYIAiaLsGtQlBSO+0u0kmqFrubaDTOmQBCCTH5e4krA+Sif/x9R5n
IEIFBSptDZ738+V1XdkMQhow8KAG2sp108bQOQqtJVsy5NE5gXKj4//ZAmoWCNuu
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10138789201501216611816259816494373671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp12b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20494001177815582121735223878076272064413959837418894576396157063589250262155849802734999948606963740437696502998352831211477937077962874073696700001778761824021674738854069219260737010375992381922229911545893896755703740030440086769343875516212566741826884880331039891298728083743137438721348770175796511586999556764836747852582970115831657682534880900978131651593824178070477733081256349128343756134509687910828058781931356663708919891976496369763024952564500843861246559219404377135558396600135331902831901884872274840445134515376574635448918704999484910978378922907886840732459943778271184452550265778406787100327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87c7ba5580b10926c908a9bca9c886e3c9ad4ac6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2778 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp12b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accesspanel.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ere.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor-uat.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bo.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloud.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee-preprod.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.cardifluxvie.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-simple.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-strong.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oreo.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-preprod.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fem.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fem.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode1.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoloc-centresagrees-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoloc-centresagrees.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groeivermogen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsp-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors-corner.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'map.transverseplatform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medias-epargne-retraite-entreprises-bnpparibas-com.is.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytreasury1.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'observatoirecetelem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal-finance.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portailsygma-preprod.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project-ci.map.transverseplatform.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quelle-epargne-choisir.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-cck.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.demo.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.demo.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-1-tp-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-2-tp-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-c01-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-c02-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webicare.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webicarepp.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.demo.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporate.cardifluxvie.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groeivermogen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.observatoirecetelem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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