apc-drp.arval.com

- BNP PARIBAS SA -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 13:f1:17:dd:bd:ad:45:a8:1c:03:28:b5:b5:42:9a:22 was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Organization unit: ARVAL
State / Province: Ile de France
Locality: Paris
Country: FR

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:f1:17:dd:bd:ad:45:a8:1c:03:28:b5:b5:42:9a:22
Serial Number (int): 26507159526367234651872915764480743970
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): 56:0c:78:fd:f5:06:f8:20:a0:10:46:06:12:1d:9e:89:c9:db:d0:c4
Fingerprint (sha256): 0e:64:16:fc:c2:c1:35:bc:95:60:cc:e4:b2:a1:fb:c2:ea:6d:c8:30:ae:a6:37:32:84:cf:07:33:67:33:1a:2d

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate apc-drp.arval.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apc-drp.arval.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apc-drp.arval.com

Other certificates including the domain name arval.com

(limited to 100 certificates)
ebizxx.uat.arval.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
expertws-remktg.uat.arval.com
bnp05b.bnpparibas.com
filetransfer.arval.com
broker.trn.arval.it
bnp19b.bnpparibas.com
services.arval.fr
ebizfr.uat.arval.com
privatelease-media.arval.com
bnp01tpc.bnpparibas.com
bnp04s.bnpparibas.com
mediaservices.arval.com
bnp04s.bnpparibas.com
my.uat.arval.com
api.uat.arval.com
huweb.pre.arval.com
wifiguest.arval.com
remktg1.int.arval.com
bnp12b.bnpparibas.com
bnp04s.bnpparibas.com
fte.arval.com
arval.com
bnp12b.bnpparibas.com
arval.com
indexing-octopus.int.arval.com
arval.fr
bnp12b.bnpparibas.com
demoweb.pre.arval.com
bnp05b.bnpparibas.com
motortrade.arval.com
bnp11s.bnpparibas.com
bnp04s.bnpparibas.com
apc-drp.arval.com
bnp12b.bnpparibas.com
customer-reporting.uat.arval.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
services.arval.fr
remktg.pre.arval.com
e-services-it.arval.com
bnp19b.bnpparibas.com
skypeservices.arval.com
services.arval.fr
gep.arval.com
demoweb.pre.arval.com
apps.arval.com
reporting.arval.com
bnp04s.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp17b.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
demoweb.pre.arval.com
bnp04s.bnpparibas.com
bnp04s.bnpparibas.com
arvalreferrals.uat.arval.com
Sharefile.arval.com
services.arval.fr
my.arval.com
arval.com
sharefile.arval.com
arvalreferrals.uat.arval.com
motortrade.arval.com
bnp22b.bnpparibas.com
reman.arval.com
e-services-it.arval.com
fleetview.pre.arval.com
bnp04s.bnpparibas.com
bnp01tpc.bnpparibas.com
omni-oim.int.arval.com
demoweb.pre.arval.com
remktg.arval.com
arval.com
api.uat.arval.com
bnp04s.bnpparibas.com
bnp04s.bnpparibas.com
demoweb.pre.arval.com
remktg.arval.com
demoweb.pre.arval.com
access.arval.com
bnp11s.bnpparibas.com
m.remktg.pre.arval.com
indexing-octopus.arval.com
qc-pre.arval.com
bnp01tpc.bnpparibas.com
bnp19b.bnpparibas.com
deweb.pre.arval.com
cms.int.arval.com
bnp05b.bnpparibas.com
expertws-remktg.uat.arval.com
demoweb.pre.arval.com
remktg.dev.arval.com
bnp04s.bnpparibas.com
demoweb.pre.arval.com
fte.arval.com
bnp04s.bnpparibas.com
apps.pre.arval.com
bnp05b.bnpparibas.com

Certificate

The complete raw certificate details for apc-drp.arval.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FCpbhzTuBDwiN6DBuGl
5Vup8yC0kihjYVtVESAT4V8IuJeaD2e6Fz3rHRtVjeFGc8UX3E4AeUxrqCuwpA2m
+t+mkcQi+lZeKlqeQpNr1DKvkDt1wRxbTjoWUToF8FhU3g1F/LaFx6cfGB1Oc3pU
yntUeW73kS1osUIVOYcJBh0mplKncdAd8rpiVOhOkQv9ax4+A6Bxh0jWVY+qe66A
SlM/TCyu0NKV13AdYr32JSRvcQWjY53/9s2R3TdX2Y+j4cN2JGho0TmeOckzm1SM
PKmdlJeH7k1Dqcc3Ytk4+yhNRkfJL+OSXQa+N6qro1ZK2PAr6NNn/NhxgHWYJUjZ
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26507159526367234651872915764480743970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ARVAL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'apc-drp.arval.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28317156146408875902897515124838839858267923575401842215830034323549443482173503393451657891639273763557184231854985839605909103876217830816218263939838159626690077436060462198650291235054739853502306384282484538972922744485629267833297108801845080982938714287995569637449052231226627740013768777631914572663312513294634677092379226671669802921868782852070867217483351742825792923058822732723283469439079034944113035288885162467999031041420346144372575365272267519735316481338295265386010463982361697952150608858205051386819473496657164805922710058253078355750556805591067525679744196751338197795969149587424092412351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-drp.arval.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0049d1bcefefbe2f3f67dda512c52bdd5f8726ce830edb24ab45187135261e7c1ae8c235c762e56dfad5f5dbebde1807e5e0edd121862c0861502a4724f4afcd51e92d2933762392c2a2a8fe1f2e5e694998bb81d667c6d353581ab39e323feda4da3b840090ed5eeb4760a874c7911d35941950ea81d2b18a3e07cb5abc5697f2299a35523da6f15ea6c40d021b0ea457d7c70151c5d74332f06f1c5193e8d188f5109ea07c1a5059486f79a3d1b7671ba45bccbb13467c65ca9ae78bb59c325775a2698b3d25ff86e0e804e167ee728c4e6f35852d5a63e1ac33029e6a9ac7bcc05baa324c7b1914d32de4dd6aa62465aa7ed7d0fcf0630838a409b1b3e69068