bnp06s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:ba:97:5e:df:8d:bb:15:86:32:df:de:a5:29:d2:20 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:ba:97:5e:df:8d:bb:15:86:32:df:de:a5:29:d2:20
Serial Number (int): 8944205350880900129720837215072408096
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b0:3a:24:8d:08:fa:84:86:fd:da:9c:e9:ac:ca:56:d1:24:c9:bd:68
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ec:9c:be:5c:d9:b1:d1:cc:77:f1:63:9f:d0:e3:f7:58:5c:0b:08:29
Fingerprint (sha256): 10:a6:d6:f3:38:ed:6e:a2:94:56:c6:33:c4:d3:75:0f:16:8c:5b:93:de:26:ad:3a:38:81:a1:61:b0:7a:c9:22

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6-1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6-1.crl

Check the revocation status for certificate bnp06s.bnpparibas.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp06s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwwcollnew.hellobank.it
www.welovecinema.bnpparibas
www.teb-kos.com
www.privatebanking.bnl.it
www.nc.bnpparibas.net
www.findomestic.it
www.comercios.cetelem.es
www.cajamarconsumo.es
www.cajamarconsumo.com
www.biciguinet.net
www.bicignet.net
www.bicicinet.net
www.biciabnet.net
www.artigiancassa.it
www.antilles-guyane.bnpparibas.net
ws.cetelem.es
welovecinema.fr
welovecinema.bnpparibas.com
welovecinema.bnpparibas
webchat.teb-kos.com
webapp.teb-kos.com
webaccess.ecredit.it
testwebaccess.ecredit.it
testincommerce.ecredit.it
temporaire-www.biciguinet.net
temporaire-www.bicignet.net
temporaire-www.bicicinet.net
temporaire-www.biciabnet.net
temporaire-nc.bnpparibas.net
temporaire-guyane.bnpparibas.net
temporaire-antilles-guyane.bnpparibas.net
telemarketing.cardif.es
telemarketing-pprod.cardif.es
teb-kos.com
stgdanshin.cardif.co.jp
simuladoresauto.cetelem.es
scorekyi.cetelem.es
remoteassist.teb-kos.com
remote.teb-kos.com
recruitment.teb-kos.com
privatebanking.bnl.it
prestamos.moneygo.es
owa.teb-kos.com
oreo.temp.staging.bnpparibas-am.com
oreo.staging.bnpparibas-am.com
oauth2.cetelem.es
oauth.bcc.cetelem.es
nc.bnpparibas.net
myhubcoll.bnl.it
mdm.teb-kos.com
inquiro-trade.bnpparibas.com
inquiro-trade-qual.staging.bnpparibas.com
incommerce.ecredit.it
expe-122-opf.bnpparibas.com
eware.centric.bnpparibas.com
europagode.bnpparibas.com
eretail.teb-kos.com
entreprises-ere.temp.bnpparibas.com
entreprises-ere.bnpparibas.com
ebiznes.teb-kos.com
denuncioonline-uat.cardifnet.com
denuncioonline-bancoestado-uat.cardifnet.com
demo-oreo.staging.bnpparibas.com
demo-entreprises-ere.bnpparibas.com
comercios.cetelem.es
cbg.uat2.bnpparibas.com
cajamarconsumo.es
cajamarconsumo.com
bnp06s.bnpparibas.com
biciguinet.net
bicignet.net
bicicinet.net
biciabnet.net
bankingcollnew.hellobank.it
bankingaemcoll.bnl.it
b2btest.ecredit.it
b2b.ecredit.it
authentication.temp.bnpparibas.com
authentication.staging.bnpparibas-am.com
authentication.bnpparibas.com
artigiancassa.it
apixferacf.cetelem.es
apitest.ecredit.it
apistore.bnpparibas
api2.cetelem.es
api.ecredit.it
api.bcc.cetelem.es
antilles-guyane.bnpparibas.net
algerie.bnpparibas.net
accesocitrix.cetelem.es
3dsecure.teb-kos.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
bnp02tpc.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
apis.bcef.caledonie.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
bnp07s.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
entreprises.ere.bnpparibas
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com

Certificate

The complete raw certificate details for bnp06s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLAPxoMvnpEsH6Y1osFD
8u6Rfk6vOOmBQlnG2PapFCDaRdb7p0oHntZixWpi0n3hUy0xilLuNOUQN4eyOeXr
zLfTQ0unf9Hfc2LxYUE4cPOGPJgn0HGxM518fAW7u564PWlLKXa1VAPHcN2sv98Q
ZL1cp5qTY4gs4EiVoMKNrvscWxxB5dAlf+efeAfAUc8XsTiqJhIfhkWcEbtFzN8d
fBFKxVe2jJQ7QC5J8drZRBGS7aM8KdX86jyuBpFQaNMtcZn/GJB16TvG9EoB1Fnt
dBAeDIwHU6d2RNmjpAgbR2YvcdBdW6vUhql1t0W8ydoTPBoT3g1e65hDIQgpz7Kk
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8944205350880900129720837215072408096
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp06s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22304760896030413781803836510805526319055940508753993070894041798541861890095850144875642347249156585405011218197696127976048105800133377484396938490138533790025307864525607184928137722593759261709969706963706608095661903275327090534272823388627613610224937483157597117777913616344604917490550980318935925216475374898279485394207964124272506632777005615558926770092229640575057135329461454818109219732534126470642695539362080984784563819621573633086461076302365292347314335141760778277036560062835520600249813108756734465686667569070239586956542279743947764798159678729838989790200867855564571008495730432697944941679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b03a248d08fa8486fdda9ce9acca56d124c9bd68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2269 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcollnew.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welovecinema.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebanking.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findomestic.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cajamarconsumo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cajamarconsumo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchat.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccess.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testwebaccess.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testincommerce.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemarketing.cardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemarketing-pprod.cardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgdanshin.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simuladoresauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorekyi.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoteassist.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestamos.moneygo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreo.temp.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreo.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth2.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.bcc.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhubcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade-qual.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incommerce.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe-122-opf.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.centric.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europagode.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eretail.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.temp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiznes.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denuncioonline-uat.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denuncioonline-bancoestado-uat.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oreo.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-entreprises-ere.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbg.uat2.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cajamarconsumo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cajamarconsumo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp06s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingcollnew.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2btest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.temp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apixferacf.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apitest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apistore.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bcc.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accesocitrix.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dsecure.teb-kos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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