bnp09s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:bb:4a:27:28:99:49:ee:e1:ce:04:6b:2b:79:87:c0 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:bb:4a:27:28:99:49:ee:e1:ce:04:6b:2b:79:87:c0
Serial Number (int): 10277059483814147339386517882104547264
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2e:4f:7a:96:4e:f9:d4:1d:29:70:f2:06:9a:42:02:c6:ea:9b:d4:27
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 16:37:6d:ea:6f:86:d8:62:a2:57:1d:5b:e6:ae:03:40:18:c9:7d:94
Fingerprint (sha256): 0f:48:5f:69:bb:07:9a:aa:56:80:a6:d5:75:16:db:0d:94:48:64:af:35:a0:6b:fc:8e:59:59:8f:f2:4c:7d:d0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp09s.bnpparibas.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp09s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp09s.bnpparibas.com
acm.bgl.lu
alis.v16.staging.bnpparibas
area-personale.staging.bnpparibascardif.it
asesoresbancaseguros.cardif.com.co
asesoresdaviplata.cardif.com.co
asesorestuya.cardif.com.co
auto.bnpparibascardif.cl
bnppcardif-indicadores.com.mx
cardifonline.com.mx
cetelem.fr
cflow-staging.bnpparibas-am.it
cib-lon-efetnet.bnpparibas.com
claims.cardif.com.co
claimsbancolombia.cardif.com.co
claimsbogota.cardif.com.co
clientmanager.bnpparibasfortisfactor.com
clientmgr-dk.bnpparibasfactoring.com
clubleonisa.cardif.com.co
cmonbusiness.bnpparibas-pf.com
comitescardif.com.mx
credit-cetelem.fr
dealernet.bnpparibasfortisfactor.com
definicionmedica.cardif.com.co
easyaccess.life.cardif.com.tw
easyaccess.nonlife.cardif.com.tw
eportfolio-ewm.bgl.lu
esign.bgl.lu
esignatures.bnpparibasfortisfactor.com
formation-buraliste-web-es.nickel.eu
fxclearer.bnpparibas.com
hdplusindex.bnpparibas.com
hdplusindex.com
hm-staging.cetelem.fr
incentivosbrilla.cardif.com.co
incentivosfinandina.cardif.com.co
incentivosla14.cardif.com.co
incentivossufi.cardif.com.co
inquiro-trade-preprod.bnpparibas.com
link2portal-tst.bnpparibas.com
mesadeayuda.cardif.com.co
misegurocardif.com.mx
miseguroleonisa.cardif.com.co
mobileservices1.bgl.lu
mybusinessbanking.bgl.lu
myleasingsolutions.bgl.lu
mywealth.bnpparibas.lu
oneproctool.bnpparibas.com
onetrust.cardif.com.tw
partenaire.domofinance.com
prescripteur.souscription-vat.neuges.org
prescripteur.souscription.neuges.org
proctechtool.bnpparibas.com
recette.prescripteur.souscription.neuges.org
repatriaciongrupobancoppel.com.mx
sadad.bnpparibas.com
seguroganas.cardif.com.co
segurosagrario.cardif.com.co
segurosclaro.cardif.com.co
segurosfinandina.cardif.com.co
segurosla14.cardif.com.co
segurosleonisa.cardif.com.co
segurosnequi.cardif.com.co
segurossufi.cardif.com.co
services.cetelem.fr
sig.cardif.com.co
simulationcg-prod-assurance.cardif.fr
sit1-olb.consorsfinanz.de
spainsbe.cib.bnpparibas.com
staging.mycardif.it
sub-uat.primebroker.com
sub.primebroker.com
vivetusegurooccidente.cardif.com.co
webbanking.bgl.lu
webcomponents.cardif.com.co
ws-ext-webappsvi.nickel.eu
ws-ext-zendesk.nickel.eu
ws.demo.staging.icare-service.com
www.area-personale.staging.bnpparibascardif.it
www.bnpparibasfactoring.com
www.bnppcardif-indicadores.com.mx
www.cardifonline.com.mx
www.cetelem.fr
www.cflow-staging.bnpparibas-am.it
www.comitescardif.com.mx
www.credit-cetelem.fr
www.hdplusindex.bnpparibas.com
www.hdplusindex.com
www.hm-staging.cetelem.fr
www.misegurocardif.com.mx
www.repatriaciongrupobancoppel.com.mx
www.simulationcg-prod-assurance.cardif.fr
www.spainsbe.cib.bnpparibas.com
www.speedata.com
www.staging.mycardif.it

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp09s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEhr6BdifXJPtqT7RLyIbGhZ8rEJqy
JsvQATurN4ulCYySTZkKfZK2R7ulBBQX8CFxNHmoCk+Tdfbo5sGU6V4JGg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10277059483814147339386517882104547264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp09s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000486be817627d724fb6a4fb44bc886c6859f2b109ab226cbd0013bab378ba5098c924d990a7d92b647bba5041417f021713479a80a4f9375f6e8e6c194e95e091a
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e4f7a964ef9d41d2970f2069a4202c6ea9bd427
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2749 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp09s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acm.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.v16.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area-personale.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesoresbancaseguros.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesoresdaviplata.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesorestuya.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.bnpparibascardif.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppcardif-indicadores.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardifonline.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cflow-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib-lon-efetnet.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsbancolombia.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsbogota.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientmanager.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientmgr-dk.bnpparibasfactoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmonbusiness.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comitescardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit-cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealernet.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'definicionmedica.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyaccess.life.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyaccess.nonlife.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportfolio-ewm.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esignatures.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation-buraliste-web-es.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxclearer.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdplusindex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdplusindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm-staging.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosbrilla.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosfinandina.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosla14.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivossufi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade-preprod.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link2portal-tst.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesadeayuda.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misegurocardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miseguroleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices1.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusinessbanking.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myleasingsolutions.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealth.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneproctool.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetrust.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaire.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.souscription-vat.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.souscription.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proctechtool.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.prescripteur.souscription.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repatriaciongrupobancoppel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadad.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroganas.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosagrario.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosclaro.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosfinandina.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosla14.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosnequi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurossufi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit1-olb.consorsfinanz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spainsbe.cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mycardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub-uat.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivetusegurooccidente.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webbanking.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcomponents.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webappsvi.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-zendesk.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.demo.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.area-personale.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasfactoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppcardif-indicadores.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardifonline.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cflow-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comitescardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.credit-cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdplusindex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdplusindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hm-staging.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.misegurocardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repatriaciongrupobancoppel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spainsbe.cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.mycardif.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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