bnp18b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:2d:c0:3f:94:84:3d:01:f6:f5:dc:0a:ab:9e:ad:f0 was issued on by DigiCert Inc.

With 76 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:2d:c0:3f:94:84:3d:01:f6:f5:dc:0a:ab:9e:ad:f0
Serial Number (int): 2896008610185686270811924506299248112
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2c:fb:13:ae:88:51:79:38:6c:c7:a9:48:2c:9c:5f:0d:9e:b1:4b:1a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 8a:18:1e:2a:22:ce:1c:c0:13:c8:aa:d4:d3:8a:60:43:8a:5c:1a:00
Fingerprint (sha256): 0c:15:cd:25:11:f9:50:b8:b3:d2:81:5a:94:59:78:96:c8:c9:9f:fb:26:d9:17:e1:53:4e:dc:30:66:92:f9:82

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp18b.bnpparibas.com

76

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp18b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp18b.bnpparibas.com
www.staging.boxauto.bnpparibas-pf.com
www.preprod.piecesjustificatives.credit-moderne.com
www.preprod.piecesjustificatives.cofinoga.fr
www.preprod.piecesjustificatives.cetelem.fr
www.preprod.piecesjustificatives.cafineo.fr
www.preprod.piecesjustificatives.bnpparibas-pf.com
www.piecesjustificatives.credit-moderne.com
www.piecesjustificatives.cofinoga.fr
www.piecesjustificatives.cetelem.fr
www.piecesjustificatives.cafineo.fr
www.piecesjustificatives.bnpparibas-pf.com
www.norrsken.fr
www.indemnisation.cardif.fr
www.icare-service.fr
www.icare-service.com
www.homol.piecesjustificatives.credit-moderne.com
www.homol.piecesjustificatives.cofinoga.fr
www.homol.piecesjustificatives.cetelem.fr
www.homol.piecesjustificatives.cafineo.fr
www.homol.piecesjustificatives.bnpparibas-pf.com
www.espaceclient.cofinoga.fr
www.espaceclient-rct.cofinoga.fr
www.espace-client.cofinoga.fr
www.clients.assurance-vie.fr
www.boxauto.bnpparibas-pf.com
www.beneficiaire.cardif.fr
staging.mondemain.bnpparibas
staging.boxauto.bnpparibas-pf.com
staging-c01.mondemain.bnpparibas
simulationrentes-prod-assurance.cardif.fr
recette.signature.cetelem.fr
prevoyance-individuelle.staging.cardif.fr
prevoyance-individuelle-pp.bnpparibas.net
prev-ind.staging.bnpparibas.net
preprod.piecesjustificatives.credit-moderne.com
preprod.piecesjustificatives.cofinoga.fr
preprod.piecesjustificatives.cetelem.fr
preprod.piecesjustificatives.cafineo.fr
preprod.piecesjustificatives.bnpparibas-pf.com
piecesjustificatives.credit-moderne.com
piecesjustificatives.cofinoga.fr
piecesjustificatives.cetelem.fr
piecesjustificatives.cafineo.fr
piecesjustificatives.bnpparibas-pf.com
norrsken.fr
mondemain.bnpparibas
indemnisation.cardif.fr
indemnisation-pp.cardif.fr
icare-service.fr
icare-service.com
homol.piecesjustificatives.credit-moderne.com
homol.piecesjustificatives.cofinoga.fr
homol.piecesjustificatives.cetelem.fr
homol.piecesjustificatives.cafineo.fr
homol.piecesjustificatives.bnpparibas-pf.com
fr-mfa-cardif-api.staging.bnpparibas
europe-sesame-websso.bnpparibascardif.com
europe-sesame-websso-pp.bnpparibascardif.com
europe-sesame-webdemo-pp.bnpparibascardif.com
europe-sesame-idp.bnpparibascardif.com
europe-sesame-idp-pp.bnpparibascardif.com
europe-sesame-gateway-pp.bnpparibascardif.com
espaceclient.cofinoga.fr
espaceclient-rct.cofinoga.fr
espaceclient-hom.cofinoga.fr
espace-client.cofinoga.fr
clients.assurance-vie.fr
cetelem-prod2-speed.neuges.org
cetelem-prod-speed.neuges.org
boxauto.bnpparibas-pf.com
beneficiaire.cardif.fr
beneficiaire-pp.cardif.fr
app.mondemain.bnpparibas
app-staging.mondemain.bnpparibas
app-staging-c01.mondemain.bnpparibas

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp18b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswKTSVRGEtbqmfdgtrFy
ak+TegrY0SgmLViZ36+mWC7S3JlJ5PwXBgpnzn3O5T24rWs6BLGn/62SDHNhsZNT
zJphw5YVP5eYQj0EIPYQXUKATvmYb8UgmleShwXKZiKYE9KFRen07UciU2/0kco1
HhQna2wVrSIYJ+UqdvfHl2YCJHh8DZIP34+Y4KnulpnJdIIRBNee9DOKRi+RKvfR
PjKjXsx0GRwAXR4+OlmxKIA1B/Gj1LqjDsj5Xqpk0hbs2BGARuoa+EGpV2UK/3Hl
IcASc4Zj6XBkCYDYWQ5+g1nSb0JnWu9Gg+tHmqDO6aT/zbTGikW6kvyXqDRtDaQN
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2896008610185686270811924506299248112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp18b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22597926535258508463735237016890090300301048248163880313328631780501814126840589495591986767193563839906570361516686570558989960305683167998943759280252970408240199938452640227879935166785525620898890317490315997141598241269263380217661701400992882111584327090282533458668516526063005245819343461118370089911004302400787019615185540604243528811365714728206154635051579681677158971273208706835424795767507797672435913810705075897363017277394794289433304140088784814883261271275979849218708301238664746580217867473790842928288096326510386787005333130004404890054687691827268705648316365278380417590056618044532147359151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cfb13ae885179386cc7a9482c9c5f0d9eb14b1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2725 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp18b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.boxauto.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.piecesjustificatives.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.piecesjustificatives.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.piecesjustificatives.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.piecesjustificatives.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.piecesjustificatives.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piecesjustificatives.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piecesjustificatives.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piecesjustificatives.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piecesjustificatives.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piecesjustificatives.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indemnisation.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icare-service.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homol.piecesjustificatives.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homol.piecesjustificatives.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homol.piecesjustificatives.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homol.piecesjustificatives.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homol.piecesjustificatives.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espaceclient.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espaceclient-rct.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-client.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clients.assurance-vie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxauto.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beneficiaire.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mondemain.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.boxauto.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-c01.mondemain.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.signature.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevoyance-individuelle.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevoyance-individuelle-pp.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prev-ind.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.piecesjustificatives.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.piecesjustificatives.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.piecesjustificatives.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.piecesjustificatives.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.piecesjustificatives.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piecesjustificatives.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piecesjustificatives.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piecesjustificatives.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piecesjustificatives.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piecesjustificatives.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mondemain.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indemnisation.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indemnisation-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icare-service.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol.piecesjustificatives.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol.piecesjustificatives.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol.piecesjustificatives.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol.piecesjustificatives.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol.piecesjustificatives.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mfa-cardif-api.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe-sesame-websso.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe-sesame-websso-pp.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe-sesame-webdemo-pp.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe-sesame-idp.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe-sesame-idp-pp.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europe-sesame-gateway-pp.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaceclient.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaceclient-rct.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaceclient-hom.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.assurance-vie.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-prod2-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-prod-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxauto.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneficiaire.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beneficiaire-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.mondemain.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-staging.mondemain.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-staging-c01.mondemain.bnpparibas'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003c5c0700c227add306ea0ab5e3f99d7859bdadd655c70e389885955f7f2962c589e2c28d96df05e25429b445176a080ed2a178793dd55aaee42941c4bad63debd30e4d4f8112f9271e46ac505007847741f8edcc2fad31d8af34a5563155b1ad4b0a727dfa1789349f7ae8e51db5f3be277e94b200c6cededa3724aa8214b91c6098b88695c8ef59c6e344a323c92947b248cb052bf1f00851ae77068fab719d968a4cee4e8046a91f84a9c07cc0be2228b328b4611d7677a4c9699577711d16df7a51946e8e3e2aa44b7656d58b678c56624fcb8b1f3d6e8cc41e52310effb97bd805e138923e57fc0d42b83b462a22e586a20ed4ece2d9a813bbae549e30a3