indexing-octopus.int.arval.com

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 7a:98:80:c6:fe:39:e2:73:88:1a:df:f3:16:a6:92:04 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 7a:98:80:c6:fe:39:e2:73:88:1a:df:f3:16:a6:92:04
Serial Number (int): 162957656522541646184301981275282379268
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 65:88:69:56:ad:68:d5:3e:b3:20:42:04:91:34:31:1c:53:50:99:1f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 3f:a9:f1:52:71:ba:21:bc:a3:ba:f1:0b:cd:7d:30:96:6e:d9:dd:4f
Fingerprint (sha256): 0c:ae:78:77:f7:55:c6:61:f6:bc:73:20:3a:cc:1e:5c:18:e2:9b:e0:0e:19:4f:e4:24:bd:ab:fc:49:12:84:98

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate indexing-octopus.int.arval.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for indexing-octopus.int.arval.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

indexing-octopus.int.arval.com

Other certificates including the domain name arval.com

(limited to 100 certificates)
ebizxx.uat.arval.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
expertws-remktg.uat.arval.com
bnp05b.bnpparibas.com
filetransfer.arval.com
broker.trn.arval.it
bnp19b.bnpparibas.com
services.arval.fr
ebizfr.uat.arval.com
privatelease-media.arval.com
bnp01tpc.bnpparibas.com
bnp04s.bnpparibas.com
mediaservices.arval.com
bnp04s.bnpparibas.com
my.uat.arval.com
api.uat.arval.com
huweb.pre.arval.com
wifiguest.arval.com
remktg1.int.arval.com
bnp12b.bnpparibas.com
bnp04s.bnpparibas.com
fte.arval.com
arval.com
bnp12b.bnpparibas.com
arval.com
indexing-octopus.int.arval.com
arval.fr
bnp12b.bnpparibas.com
demoweb.pre.arval.com
bnp05b.bnpparibas.com
motortrade.arval.com
bnp11s.bnpparibas.com
bnp04s.bnpparibas.com
apc-drp.arval.com
bnp12b.bnpparibas.com
customer-reporting.uat.arval.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
services.arval.fr
remktg.pre.arval.com
e-services-it.arval.com
bnp19b.bnpparibas.com
skypeservices.arval.com
services.arval.fr
gep.arval.com
demoweb.pre.arval.com
apps.arval.com
reporting.arval.com
bnp04s.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp17b.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
demoweb.pre.arval.com
bnp04s.bnpparibas.com
bnp04s.bnpparibas.com
arvalreferrals.uat.arval.com
Sharefile.arval.com
services.arval.fr
my.arval.com
arval.com
sharefile.arval.com
arvalreferrals.uat.arval.com
motortrade.arval.com
bnp22b.bnpparibas.com
reman.arval.com
e-services-it.arval.com
fleetview.pre.arval.com
bnp04s.bnpparibas.com
bnp01tpc.bnpparibas.com
omni-oim.int.arval.com
demoweb.pre.arval.com
remktg.arval.com
arval.com
api.uat.arval.com
bnp04s.bnpparibas.com
bnp04s.bnpparibas.com
demoweb.pre.arval.com
remktg.arval.com
demoweb.pre.arval.com
access.arval.com
bnp11s.bnpparibas.com
m.remktg.pre.arval.com
indexing-octopus.arval.com
qc-pre.arval.com
bnp01tpc.bnpparibas.com
bnp19b.bnpparibas.com
deweb.pre.arval.com
cms.int.arval.com
bnp05b.bnpparibas.com
expertws-remktg.uat.arval.com
demoweb.pre.arval.com
remktg.dev.arval.com
bnp04s.bnpparibas.com
demoweb.pre.arval.com
fte.arval.com
bnp04s.bnpparibas.com
apps.pre.arval.com
bnp05b.bnpparibas.com

Certificate

The complete raw certificate details for indexing-octopus.int.arval.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEpIi66N8FZBn6YQTm/m
hQtkLZ16PN08xwxXeouzZNofT7niTPEz7c6qcB8CWL0y2ZP3iSxq3AgcjCZLzlKW
mfZGDuIOXTATXuPeeN7Gih6PwTX/E/fhRZ5Hv85JTzeuiLdhftxi9BMHhtg+WI/5
sGP45hgTkBOHOAjhiES1krRTG4z19zF4Xp6HVcWhyWjfqwNRz1LJV8dmnCByGJAc
Evq7rg0D/lbFL8C2WMhel0KOdMcaZtvanBYa5kVpiGNUQ2TWupCVjlUanNMbuNpn
2IDG6g6F1mxjNpMjguGo4ae6QUecpAciXRUH/Sliv/mUe9pOh3XlVizGiOl+wLuP
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162957656522541646184301981275282379268
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 15:11:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-14 15:11:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indexing-octopus.int.arval.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21244665734891775867853993181658422271065856065653952756882047436115900462527831404622254361488310064072366066276861484697198287087283610931093177867483797821387202617046911532879765409520068627084031145623337273234652337139374506492098508206701410078006491445762698420672406567405572827504590221014195905501515559667951811166226483067245931192044691398733555713672968713711487513899538422841819013062680046663963758286221877237978442961334205131946057544176371804709642189991552586289001722735686582602953174990834431520848940674848506534375194262154632902891997422277418845159099660559781888980918034107659282255723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65886956ad68d53eb32042049134311c5350991f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indexing-octopus.int.arval.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a98a3d3d3f851c711c5f2d0e2554317d725c77d9836325e065abd0b8660d4a40add5ed2ce36e77e99645da5b3e758de250fbbfc099460102733fef43306c0e5292a8f2698d5b47421ba68914e94506163f5f30f002bfb0bc6570837141a7a5857082b9b1dc67c21da8a24664549efd05fef30882a795899a150de57baec9ef6efc4b13fa73db4333908318f0fc33de6f2a51268c6f38ffee2bf81bacfca40398e8e88b418af45f32e133833a637b348daa14896dde4841873aee51613b2f4505971347ae0d948ddd72d956595adf0867ea6e784cc5824f0788bfe42308cfb16ee866784f373da33f3508b56b949300c5cf7aa63d64779e5e92caef837b857e5e