bnp10s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:1e:ac:c4:a1:9b:af:77:31:87:bf:18:59:1d:19:69 was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:1e:ac:c4:a1:9b:af:77:31:87:bf:18:59:1d:19:69
Serial Number (int): 6805413037867603772640939340241639785
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e9:46:cc:f0:54:30:9b:ba:8e:00:0d:14:ce:de:5b:94:37:e5:93:f7
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 70:1d:dd:dc:dd:92:be:f8:54:e3:7e:98:07:6d:55:20:35:61:72:10
Fingerprint (sha256): 0d:08:b8:3b:78:ae:29:fe:72:c3:9f:c6:36:94:32:0e:f0:14:92:66:d0:76:33:fd:f0:3d:36:f8:46:f6:d7:7f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp10s.bnpparibas.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp10s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp10s.bnpparibas.com
accountx2ca.bnl.it
agw-services.staging.bnpparibascardif.it
api-gtw.dev.nickel.eu
api-gtw.nickel.eu
api-gtw.staging.nickel.eu
api.irb.algeria.staging.bnpparibas.com
artigianonline.artigiancassa.it
auto.signature.neuges.org
bo-nickel-alpha.abm-uid.com
careers.apac.bnpparibas
cdc-archive.portail-investisseur.com
cetelem-esignrc.bnpparibas-pf.com
courtier-sygma-esignrc.bnpparibas-pf.com
customer-call-center-api.abm-uid.com
customer-registration-admin-api.abm-uid.com
customer-registration-control-bo.abm-uid.com
devenir-distributeur.preprod.compte-nickel.fr
devenir-distributeur.staging.compte-nickel.fr
ecnycn.asia.bnpparibas.com
edraft.uat1.bnpparibas.com
emprunteur.signature.neuges.org
etranplus.bnpparibas.com
filebox.smsps-coll.bnl.it
financ.it
financit.it
fzw-ppd.bnpparibas.com
fzw.bnpparibas.com
gm-graduate-careers.apac.bnpparibas
mobile.preprod.domofinance.com
mobileservices2.bgl.lu
mon-alpha.compte-nickel.fr
mpad-prod.preprod.abm-uid.com
mpad-prod.staging.abm-uid.com
partenaires.preprod.domofinance.com
partenaires.qualif.domofinance.com
partinst-esignrc.bnpparibas-pf.com
partnerbiz.it
pass-portal.staging.bnpparibascardif.it
prescripteur.signature.neuges.org
qualif.domofinance.com
signature-vad.domofinance.com
signature.cetelem.fr
sygma-esignrc.bnpparibas-pf.com
tablet-nickel.preprod.abm-uid.com
tablet-nickel.staging.abm-uid.com
tabletnickel-service.abm-uid.com
telepassxbiz.com
telepassxbiz.it
webdoc-ci.bicicinet.net
webdoc-ci.bnpparibas.com
webdoc-dz.staging.bnpparibas.net
webdoc-sn.bicisnet.net
webdoc-sn.bnpparibas.com
widgets.preprod.compte-nickel.fr
widgets.staging.compte-nickel.fr
ws-ext-esendex.preprod.nickel.eu
ws-ext-esendex.staging.nickel.eu
ws-ext-infobip.preprod.nickel.eu
ws-ext-infobip.staging.nickel.eu
ws-ext-monext-tokenizer.nickel.eu
ws-ext-monext-tokenizer.preprod.nickel.eu
ws-ext-monext-tokenizer.staging.nickel.eu
ws-ext-monext.preprod.nickel.eu
ws-ext-onfido.nickel.eu
ws-ext-onfido.preprod.nickel.eu
ws-ext-pinsms.preprod.nickel.eu
ws-ext-pinsms.staging.nickel.eu
ws-ext-webapptibco.preprod.nickel.eu
ws-ext-webapptibco.staging.nickel.eu
www.accountx2ca.bnl.it
www.api.irb.algeria.staging.bnpparibas.com
www.artigianonline.artigiancassa.it
www.financ.it
www.financit.it
www.partnerbiz.it
www.pass-portal.staging.bnpparibascardif.it
www.qualif.domofinance.com
www.staging.nickel.eu
www.telepassxbiz.it
www.webdoc-ci.bicicinet.net
www.webdoc-ci.bnpparibas.com
www.webdoc-dz.staging.bnpparibas.net
www.webdoc-sn.bicisnet.net
www.webdoc-sn.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp10s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25GEjrTYRa5oajausuuJ
56K5MQkKL1Su37v1jYdBBFBIxGlWoWa+dOiNa76QezxjAhL0v9F6IHPw8sZLtIZd
6iYm4ArbjZ6du0g157o+pHATOPdn43xXEiYvM7kGf2YLmV61ms11jAlCgPZau31Y
ckf1ICaDdroYscQ4Kmyj2H9FpEElptxVeWweXwXNfxUW1aLpP8GLmRtjWyQeA1K4
m1S8LJxjE00Dn6URF/ksAISW2BgHm9bkQpGmv0TMmCszEdFSSCMRCv53JbXsf1CU
xFRmRWRGEsMwPg5ceHlpu3ryAxuKO2hrOaOLx20sFC5+LE9YRDl3O8gjCBA9FHeB
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6805413037867603772640939340241639785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp10s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27717946290431776294195007389033742278485963914364432278821841604895946987311319400218259303780671859964060015192701444978515601668932775231167601648388256075951351399225995969221619645584856339656767210169260462209626573690290316282339211870541740809963574693080971623792632351764412700852482317321633691409585888741661734547112121554260836058727055045964219077192499914515604231763032630742498767400005741106255329208650501391004753571540429183187495070135382528385204028984210296768537757095482609278587416993287298513537294945082695779302463464638277004927418011779523901390913219947329812745109765720514957377971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e946ccf054309bba8e000d14cede5b9437e593f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2613 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp10s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agw-services.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.dev.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.irb.algeria.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artigianonline.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel-alpha.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-archive.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-call-center-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-admin-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-control-bo.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnycn.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edraft.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebox.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financ.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm-graduate-careers.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices2.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-alpha.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletnickel-service.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.irb.algeria.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artigianonline.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financ.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnerbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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