tpc-login.mabanque.staging.bnpparibas.net

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 11:e6:ae:0f:ca:87:de:d2:96:7c:0e:47:a6:6f:70:86 was issued on by Entrust, Inc..

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 11:e6:ae:0f:ca:87:de:d2:96:7c:0e:47:a6:6f:70:86
Serial Number (int): 23794634596180282518124253970302988422
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: bb:8b:d8:ca:4b:46:27:79:b0:1b:b8:90:34:14:21:19:76:09:cf:12
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): bc:bd:6e:4d:e2:d5:c6:2f:ca:8f:c0:ed:8d:07:d8:71:fe:aa:1d:83
Fingerprint (sha256): 09:a8:0b:9a:70:c8:81:77:0a:8f:f4:e5:58:7c:b2:26:5a:24:d0:93:97:4d:10:f3:1d:da:77:dd:22:a1:2c:e3

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tpc-login.mabanque.staging.bnpparibas.net

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tpc-login.mabanque.staging.bnpparibas.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tpc-login.mabanque.staging.bnpparibas.net
sandbox.login.mabanque.staging.bnpparibas.net
sandbox.login.mabanque-s1.staging.bnpparibas.net
sandbox.login.mabanque-s2.staging.bnpparibas.net
sandbox.login.mabanque-s3.staging.bnpparibas.net
sandbox.login.mabanque-s4.staging.bnpparibas.net
sandbox.login.hellobankpro.staging.bnpparibas.net
sandbox.login.hellobankpro-s1.staging.bnpparibas.net
sandbox.login.hellobankpro-s2.staging.bnpparibas.net
sandbox.login.hellobankpro-s3.staging.bnpparibas.net
sandbox.login.hellobankpro-s4.staging.bnpparibas.net
sandbox.login.hellobank.staging.bnpparibas.net
sandbox.login.hellobank-s1.staging.bnpparibas.net
sandbox.login.hellobank-s2.staging.bnpparibas.net
sandbox.login.hellobank-s3.staging.bnpparibas.net
sandbox.login.hellobank-s4.staging.bnpparibas.net
login.mabanque.staging.bnpparibas.net
login.mabanque-s1.staging.bnpparibas.net
login.mabanque-s2.staging.bnpparibas.net
login.mabanque-s3.staging.bnpparibas.net
login.mabanque-s4.staging.bnpparibas.net
login.hellobankpro.staging.bnpparibas.net
login.hellobankpro-s1.staging.bnpparibas.net
login.hellobankpro-s2.staging.bnpparibas.net
login.hellobankpro-s3.staging.bnpparibas.net
login.hellobankpro-s4.staging.bnpparibas.net
login.hellobank.staging.bnpparibas.net
login.hellobank-s1.staging.bnpparibas.net
login.hellobank-s2.staging.bnpparibas.net
login.hellobank-s3.staging.bnpparibas.net
login.hellobank-s4.staging.bnpparibas.net
cledigitale.login.mabanque.staging.bnpparibas.net
cledigitale.login.mabanque-s1.staging.bnpparibas.net
cledigitale.login.mabanque-s2.staging.bnpparibas.net
cledigitale.login.hellobank.staging.bnpparibas.net
cledigitale.login.hellobank-s1.staging.bnpparibas.net
cledigitale.login.hellobank-s2.staging.bnpparibas.net

Other certificates including the domain name bnpparibas.net

(limited to 100 certificates)
exp1.mobile.entreprises.bnpparibas.net
bourses.bnpparibas.net
testsassuranceauto.bnpparibas.net
nc.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
prod-m-wea1s1-apa1s1.canalnet-pro.bnpparibas.net
bnp07s.bnpparibas.com
m-service-qual-we1-ap1-q.bnpparibas.net
mobile-waf-v2p2-secure.bnpparibas.net
bnp05b.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
bnpnetexp0.bnpparibas.net
protectionsante.bnpparibas.net
bnp06s.bnpparibas.com
automatesdcckms39.bnpparibas.net
tpc-login.mabanque.staging.bnpparibas.net
mabanque.bnpparibas
algerie.bnpparibas.net
mobo.bnpparibas.net
protectionsante.bnpparibas.net
bnp09s.bnpparibas.com
change.bnpparibas.net
bnp03s.bnpparibas.com
qua04-mutuelle-entreprises-bddf.bnpparibas.net
www.netcash2.bnpparibas.net
lesbonscomptes.bnpparibas.net
bnp06s.bnpparibas.com
bnp03s.bnpparibas.com
bnp06s.bnpparibas.com
m-service-qual-we1-ap1-q.bnpparibas.net
bnp09s.bnpparibas.com
bnp10s.bnpparibas.com
content.mabanque.bnpparibas
tpc-m-service.bnpparibas.net
bnp06s.bnpparibas.com
bnp07s.bnpparibas.com
algerie.bnpparibas.net
planification-retraite.bnpparibas.net
bnp07s.bnpparibas.com
mercanet3.bnpparibas.net
shopmobile.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp03s.bnpparibas.com
bourses.bnpparibas.net
bnp09s.bnpparibas.com
bnp10s.bnpparibas.com
secure1.entreprises.bnpparibas.net
bnp06s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
www.secure.bnpparibas.net
bnp09s.bnpparibas.com
secure1ms.entreprises.bnpparibas.net
tpc-login.mabanque.staging.bnpparibas.net
entrepartenairespros.bnpparibas.net
dsir-assurance.cardif.fr
prod-m-wea1s1-apa1s1.canalnet-part.bnpparibas.net
arval.com
qlf-grapheur.bnpparibas.net
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09s.bnpparibas.com
animation.bnpparibas.net
app-mobile.entreprises.bnpparibas.net
automatesdcckms39.bnpparibas.net
bnp10s.bnpparibas.com
www.pse-qual.netcash.bnpparibas.net
bnp18b.bnpparibas.com
bnp09s.bnpparibas.com
mailingbmmstaging.bnpparibas.net
arval.com
bnp03s.bnpparibas.com
bnp06s.bnpparibas.com
bnp10s.bnpparibas.com
offres.bnpparibas.net
arval.fr
m.lanetagence.bnpparibas.net
arval.fr
bnp05b.bnpparibas.com
simple.qua02.entreprises.bnpparibas.net
bnp11s.bnpparibas.com
bnp06s.bnpparibas.com
WWW.EUROPEANCARDACQUIRING.BNPPARIBAS.NET
www.netcash2.bnpparibas.net
bnp05b.bnpparibas.com
bnp09s.bnpparibas.com
mailingbmmstaging.bnpparibas.net
bnp10s.bnpparibas.com
*.canalnet-pro.bnpparibas.net
bnp07s.bnpparibas.com
bnp06s.bnpparibas.com
simulateur-retraite.bnpparibas.net
automatesdccAP05568prod.bnpparibas.net
bnp05b.bnpparibas.com
bnp10s.bnpparibas.com
mabanqueprivee.bnpparibas.net
bnp09s.bnpparibas.com
WWW.EUROPEANCARDACQUIRING.BNPPARIBAS.NET
bnp09s.bnpparibas.com
bnp03s.bnpparibas.com

Certificate

The complete raw certificate details for tpc-login.mabanque.staging.bnpparibas.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaAv1rpCIIx/IEohdSt5
+ltSNL54KsMxiIA1A1cM2z7K9y0jXHTOVFUjvMWlp1zA8jJQo6ctfeXPbxkwY3tH
8UfPEvBIL1TdymARMwj8esbuSMes3ROnXSkc1LM0v3V8vraEfbtKqE2qL1VZ0pN6
onZcMCRbxwe3nkFhgxum0mmssS+efZac+qHxexkrJlL8lTBQdFtJh7f9Bsz3Vnzk
hxGsxuSWMadA4ifAdeuhA//tvDr7F9aVy5Umh3yM3epgRd+ka46oGlPkAw/oyJRZ
UFvSOT/rACTz102T/t5oxHRmhF26pKkjv+213k8VNHB1fBkGXxGrN0UKAcA5J6GY
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23794634596180282518124253970302988422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 14:09:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-11 14:09:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tpc-login.mabanque.staging.bnpparibas.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22423171068742362590799793653779346399405616942398734727192782447985971338635372064762860514212998983028989145594778994121049060673995314502390724328231281785346953175662102751727466164117584479914351041730372784851050725127121246829784857060893110566434889735419153340512883381946309233331239195128944945497728424561445811651424305752677534656455956482680197909056963644071469621597998706415177297894621911564409784642783062454387858908560471864067557590209717656142759427511394865035922183679239118024601928168684648877867148062427958765412302587973548082946972297482334082003311571456190852621802120405154820888727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb8bd8ca4b462779b01bb890341421197609cf12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1780 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpc-login.mabanque.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.mabanque.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.mabanque-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.mabanque-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.mabanque-s3.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.mabanque-s4.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobankpro.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobankpro-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobankpro-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobankpro-s3.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobankpro-s4.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobank.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobank-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobank-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobank-s3.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.login.hellobank-s4.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mabanque.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mabanque-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mabanque-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mabanque-s3.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mabanque-s4.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobankpro.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobankpro-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobankpro-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobankpro-s3.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobankpro-s4.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobank.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobank-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobank-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobank-s3.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hellobank-s4.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.mabanque.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.mabanque-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.mabanque-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.hellobank.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.hellobank-s1.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cledigitale.login.hellobank-s2.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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