bnp12b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:d5:61:02:51:47:2f:f8:24:ec:d4:10:41:ca:a5:1e was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:d5:61:02:51:47:2f:f8:24:ec:d4:10:41:ca:a5:1e
Serial Number (int): 17058662757629134057682027549513393438
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:1d:63:d5:dd:87:2a:07:e4:b0:6c:19:67:d3:02:a2:b5:4a:6b:66
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 3b:fe:ac:16:f8:a9:c5:66:98:b3:4d:42:5d:06:ea:e1:13:da:73:f8
Fingerprint (sha256): 09:82:36:b1:ce:fd:5b:a0:d8:af:88:3d:b1:5a:fa:d4:9a:84:76:16:10:60:a4:e2:f0:47:ec:b2:cf:78:a9:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp12b.bnpparibas.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp12b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp12b.bnpparibas.com
accesspanel.echangeur.fr
arvalpartners.pre.arval.co.uk
assistanceconnector.qua.arval.com
assistanceconnector.uat.arval.com
backend.domofinance.com
backend.preprod.domofinance.com
backend.qualif.domofinance.com
bnpparibas-pf.com
bnpparibascardif.be
bnpparibascardif.com
bo.preprod.cercle-actionnaires.bnpparibas
brictweb.pre.arval.com
caplinkinvestor-ppd.bnpparibas.com
caplinkinvestor-uat.staging.bnpparibas.com
caplinkinvestor.bnpparibas.com
cardif.be
cardif.com
cardif.cz
cdn.bo.preprod.cercle-actionnaires.bnpparibas
cdn.preprod.cercle-actionnaires.bnpparibas
cnweb.pre.arval.com
collections.pre.arval.com
connexisguarantee-preprod.bnpparibas.com
connexisguarantee.bnpparibas.com
connexisguarantee.staging.bnpparibas.com
cwextranet-simple.staging.bnpparibas-am.com
cwextranet-strong.staging.bnpparibas-am.com
demoweb.pre.arval.com
dkweb.pre.arval.com
domofinance.com
ebizuk.uat.arval.com
ebroker-preprod.sygmabnpparibas-pf.com
echangeur.fr
epicaste.cardif.fr
esmig.pre.arval.com
espace-client.cetelem.fr
expertws-remktg.qua.arval.com
fem.icare-service.com
fem.staging.icare-service.com
front-prod.bnpparibascardif.com
front.preprod.cercle-actionnaires.bnpparibas
geoloc-centresagrees-pp-assurance.cardif.fr
geoloc-centresagrees.cardif.fr
groeivermogen.nl
hsp-uat.bnpparibas.com
iam.uat.arval.com
itmig.pre.arval.com
m.itweb.uat.arval.com
m.ukweb.uat.arval.com
mobile.domofinance.com
mobile.preprod.domofinance.com
mobile.qualif.domofinance.com
my.uat.arval.com
mytreasury1.staging.bnpparibas.com
observatoirecetelem.com
partenaires.domofinance.com
partenaires.preprod.domofinance.com
partenaires.qualif.domofinance.com
personal-finance.bnpparibas
portailsygma-preprod.sygmabnpparibas-pf.com
preprod.domofinance.com
qualif.domofinance.com
quelle-epargne-choisir.staging.bnpparibas.com
recette-cck.icare-service.com
remktg-rest.qua.arval.com
riskstudy.uat.arval.com
roweb.pre.arval.com
rumig.pre.arval.com
seweb.pre.arval.com
sfdcconnector.pre.arval.fr
sid.demo.icare-service.com
sid.icare-service.com
sid.staging.icare-service.com
simulationcg-1-assurance.staging.cardif.fr
simulationcg-2-assurance.staging.cardif.fr
simulationcg-c01-assurance.staging.cardif.fr
simulationcg-c02-assurance.staging.cardif.fr
trmig.pre.arval.com
trweb.pre.arval.com
webicare.icare-service.com
webicarepp.icare-service.com
ws.demo.icare-service.com
www.accesspanel.echangeur.fr
www.bnpparibas-pf.com
www.bnpparibascardif.be
www.bnpparibascardif.com
www.cardif.cz
www.domofinance.com
www.echangeur.fr
www.groeivermogen.nl
www.observatoirecetelem.com
www.personal-finance.bnpparibas
www.preprod.domofinance.com
www.qualif.domofinance.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp12b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiG6TVwACmBOqeJRxqmn
cIw0rhnoClfjcHnRO9tnfJkwJ6DoLEaY8VP4HXSDbIwI+2qyEVO7m/qbeNkd60O6
hSEzLktb/EMRB9mSCMu9x8j4RKUXuPzm+dlw+EqW/zc26f3KJDnAm9d7mNav+c7t
ybsrQAHiKXuTtqM09f8v2/CiLx12N6l5TT5Rviphdo8wB9btG9ZpxABdZxXRvooE
Z11FhHnN1rwrh6QaokNImModR8b9MGugGC99c81xmlGsTZyBKXVLrtxpltMPdY/x
b9fhwGI1vo2ZeZgZ2vlTDKTlkR+fim9e6VZBmHqd+7Ccm3XiPAWzl+nyyASK+B4O
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17058662757629134057682027549513393438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp12b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22487050053862103557533871246174620255474056856545058853321729315591698165457492248683111143796640916996899789795653279564474310057795316466784642192630449350947661350680475500290594266777267780987339356987155035638945655129344162521637084753707388606638872818774303567627846660823879336868581775191830333068920995735950307731120929807670151748724411858608605874824256963622104270361139999742200950224649748542246808678846269683120539878808282324360952404946222312888863774806270662450142518771341797482265801966615068603780010713429985758801033439448206327975537363010029042820356005263040116435320203075904216108561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a1d63d5dd872a07e4b06c1967d302a2b54a6b66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2739 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp12b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accesspanel.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvalpartners.pre.arval.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistanceconnector.qua.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistanceconnector.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brictweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor-uat.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bo.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee-preprod.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-simple.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-strong.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebizuk.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-preprod.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esmig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertws-remktg.qua.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fem.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fem.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front-prod.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoloc-centresagrees-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoloc-centresagrees.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groeivermogen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsp-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itmig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.itweb.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ukweb.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytreasury1.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'observatoirecetelem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal-finance.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portailsygma-preprod.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quelle-epargne-choisir.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-cck.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remktg-rest.qua.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskstudy.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfdcconnector.pre.arval.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.demo.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-2-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-c01-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-c02-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trmig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webicare.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webicarepp.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.demo.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accesspanel.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groeivermogen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.observatoirecetelem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personal-finance.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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