tmp.cardif.fr

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3f:dd:76:0c:d2:33:c7:f9:3f:a2:7d:19:69:2f:20:97 was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3f:dd:76:0c:d2:33:c7:f9:3f:a2:7d:19:69:2f:20:97
Serial Number (int): 84891255680311529595164702236497354903
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: eb:e6:c2:88:75:c6:ac:6b:f9:d4:83:c2:47:64:dd:66:25:d5:02:f0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 7d:d1:3a:f1:87:26:e0:21:9b:45:59:af:bb:f7:c3:60:5c:b5:e9:55
Fingerprint (sha256): 09:b9:7e:44:4b:d4:13:b4:6d:52:a7:53:e9:a5:38:2c:80:fe:69:de:3a:5d:5c:a1:28:4c:19:4e:ca:1d:88:c3

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tmp.cardif.fr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tmp.cardif.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tmp.cardif.fr
www.tmp.cardif.fr
cardif.fr
www.cardif.fr

Other certificates including the domain name cardif.fr

(limited to 100 certificates)
simulationrentes-prod-assurance.cardif.fr
opportunitedecontact-pp-assurance.cardif.fr
bnp12b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09b.bnpparibas.com
prevoyance-patrimoniale.cardif.fr
suivigiant-pp-assurance.cardif.fr
dsir-assurance.cardif.fr
assurance-credit.cardif.fr
pops-souscription-pp2-assurance.cardif.fr
plsir-pp-temp-assurance.cardif.fr
bnp07b.bnpparibas.com
bnp07b.bnpparibas.com
temp.cardif.fr
bnp09b.bnpparibas.com
beneficiaire-run.staging.cardif.fr
bnp09s.bnpparibas.com
iespub-assurance.cardif.fr
sfp-pp-temp-assurance.cardif.fr
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
opportunitedecontact-pp-assurance.cardif.fr
bnp19b.bnpparibas.com
bnp19b.bnpparibas.com
bnp23b.bnpparibas.com
bnp07b.bnpparibas.com
simulationrentes-pp-assurance.cardif.fr
www.cardif.fr
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
nowcl-temp-assurance.cardif.fr
bnp07b.bnpparibas.com
assurance-sante.cardif.fr
portail-relation-client-c01-rec.cardif.fr
portail-relation-client.cardif.fr
bnp09s.bnpparibas.com
bnp12b.bnpparibas.com
bnp09b.bnpparibas.com
bnp07b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09b.bnpparibas.com
bnp15b.bnpparibas.com
alfin-prod-assurance.cardif.fr
finagora-pp.cardif.fr
bnp07b.bnpparibas.com
bnp09s.bnpparibas.com
cardif.fr
bnp09s.bnpparibas.com
simulationcapitalisationrppfrance-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
opportunitedecontact-pp-assurance.cardif.fr
bnp09b.bnpparibas.com
espace-indemnisation-c02-rec.cardif.fr
suivigiant-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
propositionarbitrage.cardif.fr
bnp12b.bnpparibas.com
tmp.cardif.fr
dsir-assurance.cardif.fr
bnp06b.bnpparibas.com
bnp09s.bnpparibas.com
alui-images-assurance.cardif.fr
document-information-cle-pp.cardif.fr
espace-client-c01-rec.cardif.fr
portail-relation-client.cardif.fr
bnp18b.bnpparibas.com
bnp07b.bnpparibas.com
demo-portail-c01.staging.cardif.fr
simulationcapitalisationrppfrance-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
bnp04b.bnpparibas.com
bnp12b.bnpparibas.com
giant-prod-assurance.cardif.fr
sfp-pp-assurance.cardif.fr
bnp07b.bnpparibas.com
bnp12b.bnpparibas.com
bnp09b.bnpparibas.com
bnp09b.bnpparibas.com
alfin-pp-assurance.cardif.fr
finagora.cardif.fr
bnp12b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
iespub-assurance.cardif.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09s.bnpparibas.com
bnp19b.bnpparibas.com
bnp09s.bnpparibas.com
bnp04b.bnpparibas.com
shaker-pp-tmp-assurance.cardif.fr
bnp04b.bnpparibas.com
bnp04b.bnpparibas.com
portail-relation-client.cardif.fr
bnp07b.bnpparibas.com
canaldigital-assurance.cardif.fr
bnp07b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp12b.bnpparibas.com
comptes-run.staging.cardif.fr
bo-run-n2-client-portail.staging.cardif.fr
shaker.cardif.fr

Certificate

The complete raw certificate details for tmp.cardif.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4E1bEBPINY7EelubylP
qAW9VvGoGxX5lXLMNwGotcz4s0bi3FYpXKdcsUSsJY4JNqeI+Kh9uazikV3mbkk3
sr4aDNRv+nl+NvXCQlUg5+a6OuqHpbFW/NfhfVU59+2d/+NDuLk1zbJPG5GxPT12
KyBy0QtQskkOkZoG79iBrnLiuIL9q6rMMZjDKewmTdUosZoVYBEbepp6mIPNRCYE
MwZirrlM4ZwnYGnM4WwNA3SidzNwPxo3gVotb2vKq7UYzVF2pRQ0YUUFS8FLGP2A
4ZfY51YSkVoK3Cp/y+rhFA4E+m315njhmT+UbKGz0DCsoNIEraFaxYoYU9yI2rRP
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84891255680311529595164702236497354903
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 17:32:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 17:32:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tmp.cardif.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22155418545360646702148298106883646876348540714617715355827295502260115396474821436849053043926552542280669392267738944010914114936663232295116084076722535215513233162686840454094245213994414377271786651350597254566087404263473188310327295311967814246780453796224062719914724405151475055097554248203705059245303807661048601435772616123957629530205579827092504783864066610243510243108310414638634623033960949025951673096316475251657489106003001289475163471598392275965174131960998141586822331257359137577731405967304743028513879326622270277565967748646302211465250066872572219274059519537845175273522995637886825811813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ebe6c28875c6ac6bf9d483c24764dd6625d502f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tmp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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