f17aaabc20bfe045075927934fed52d21.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:f8:98:6c:89:63:b9:f2:59:00:f9:b3:ad:60:6c:ce was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:f8:98:6c:89:63:b9:f2:59:00:f9:b3:ad:60:6c:ce
Serial Number (int): 15912289099972026558261260682818251982
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 53:95:de:1c:93:2a:59:da:0e:c5:40:3c:05:71:f3:59:62:e3:16:8c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d1:97:2d:f8:b0:99:ea:bb:41:cf:7a:82:dc:64:0f:3f:69:48:07:62
Fingerprint (sha256): 0e:cb:5d:3c:4a:8c:85:42:d8:b5:d5:5a:b0:74:9a:73:4c:39:b4:d7:32:3b:0f:52:ad:30:51:9c:e9:c6:b7:49

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate f17aaabc20bfe045075927934fed52d21.bnpparibas.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitrage.bnpparibas.com
arval.cn
arvaljiutong.cn
cib.bnpparibas
cib.bnpparibas.com
cm-continuity.qual.bnpparibas.com
connexistradebg.uat1.bnpparibas.com
contrib.cib.bnpparibas
cortexfx-pp.bnpparibas.com
cortexsecondary-pp.bnpparibas.com
custexfactory.bnpparibascardif.com
depuis100ans.lu
e2c.bnpparibasfortis.be
easy2cash.bnpparibasfortis.be
ebroker-rechm.staging.sygmabnpparibas-pf.com
ebroker-recrf.staging.sygmabnpparibas-pf.com
economic-research.bnpparibas.com
edraft.uat1.bnpparibas.com
ereceipt2centric.asia.bnpparibas.com
erelio-epargne-retraite-entreprises-bnpparibas-com.staging.bnpparibas-ip.com
ereporting.asia.bnpparibas.com
eware.uat1.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
factor.bnpparibas.de
factor.bnpparibas.dk
factor.bnpparibas.nl
factor.bnpparibas.pt
factor.bnpparibas.se
factor.bnpparibasfortis.be
factoring.bnpparibas.com
fastaccess-c02-rec.cardif.fr
fundquestadvisor-com.staging.bnpparibas-ip.com
ifitalia.it
immersion360.realestate.bnpparibas
indemnisation-c01.staging.cardif.fr
india-netpay.bnpparibas.com
limmobilierdunmondequichange.fr
lp-master.realestate.bnpparibas
ma-retraite.bnpparibas
navesylogistica.es
netpaycentric-india.bnpparibas.com
oficinas.bnpparibas.es
optimisermon.epargne-retraite-entreprises.bnpparibas.com
pewee-uat.bnpparibas.com
pewee.bnpparibas.com
phonebook.bnlmobile.it
preprod.cofinoga.fr
preprod.espace-client.cdgp.fr
preprod.espace-client.cofinoga.fr
property-management.realestate.bnpparibas
psyg-rechm.staging.sygmabnpparibas-pf.com
psyg-recrf.staging.sygmabnpparibas-pf.com
qabnpparibasfortis.com
ratama-dz.bnpparibas.dz
ratama-pp-pos.bnpparibas.dz
reim.bnpparibas.de
research.bnpparibas.com
scpi.immo
secondary-smartderivatives-pp.bnpparibas.com
stream01-cortexfx-pp.bnpparibas.com
stream02-cortexfx-pp.bnpparibas.com
webprive.epargne-entreprise.staging.bnpparibas.com
www.arval.cn
www.arvaljiutong.cn
www.cm-continuity.qual.bnpparibas.com
www.cofinoga.fr
www.custexfactory.bnpparibascardif.com
www.e2c.bnpparibasfortis.be
www.easy2cash.bnpparibasfortis.be
www.economic-research.bnpparibas.com
www.espace-client.cdgp.fr
www.factor.bnpparibas.de
www.factor.bnpparibas.dk
www.factor.bnpparibas.nl
www.factor.bnpparibas.se
www.factor.bnpparibasfortis.be
www.i-cliential.com
www.ifitalia.it
www.immersion360.realestate.bnpparibas
www.limmobilierdunmondequichange.fr
www.navesylogistica.es
www.oficinas.bnpparibas.es
www.property-management.realestate.bnpparibas
www.qabnpparibasfortis.com
www.ratama-dz.bnpparibas.dz
www.ratama-pp-pos.bnpparibas.dz
www.reim.bnpparibas.de
www.scpi.immo
wwwcoll.hellobank.it

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpDHEM5ZMMIfp3mwej/509MsVwgNX
q8XDkS3xt4wTcuIMTwEGmGos+vWYI7IkBvklJaQqH0tPg6zX3aFOQs98AQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15912289099972026558261260682818251982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a431c433964c3087e9de6c1e8ffe74f4cb15c20357abc5c3912df1b78c1372e20c4f0106986a2cfaf59823b22406f92525a42a1f4b4f83acd7dda14e42cf7c01
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5395de1c932a59da0ec5403c0571f35962e3168c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2680 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm-continuity.qual.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistradebg.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib.cib.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexsecondary-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custexfactory.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depuis100ans.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2c.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy2cash.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-rechm.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-recrf.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edraft.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erelio-epargne-retraite-entreprises-bnpparibas-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereporting.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoring.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquestadvisor-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersion360.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indemnisation-c01.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-netpay.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limmobilierdunmondequichange.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-master.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma-retraite.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navesylogistica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpaycentric-india.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oficinas.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimisermon.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewee-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonebook.bnlmobile.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.espace-client.cdgp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.espace-client.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property-management.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyg-rechm.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyg-recrf.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-dz.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-pp-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reim.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondary-smartderivatives-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream01-cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream02-cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webprive.epargne-entreprise.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cm-continuity.qual.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custexfactory.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e2c.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy2cash.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-client.cdgp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-cliential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immersion360.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limmobilierdunmondequichange.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navesylogistica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oficinas.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.property-management.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-dz.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-pp-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reim.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcoll.hellobank.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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