bnp07b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:ae:60:63:77:fc:a3:e7:82:2e:ae:d1:ee:c5:08:50 was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:ae:60:63:77:fc:a3:e7:82:2e:ae:d1:ee:c5:08:50
Serial Number (int): 8880782620138734208915435219828672592
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b0:a1:38:6e:16:86:47:81:4e:c2:81:50:f4:00:bc:2a:7e:7e:a7:35
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): d7:5e:f2:a3:c0:6a:ce:93:73:80:47:6c:89:4e:45:d3:aa:d5:47:0a
Fingerprint (sha256): 10:f1:59:21:a4:f2:55:c0:f6:b5:bc:ea:32:ee:ab:ea:0b:c3:bc:27:77:29:31:32:4f:7f:9a:b5:e7:9c:eb:25

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate bnp07b.bnpparibas.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zonacliente.cetelem.es
www.websalaries-preprod.assurance.fr
www.sharekhanfinance.com
www.sharekhan.com
www.roszczenia.cardif.pl
www.pre-dsa-services.cardif.pl
www.moneycredit.co.za
www.investment-city.bnpparibas-am.fr
www.dsa-services.cardif.pl
www.dsa-sales.cardif.pl
www.dsa-manage.cardif.pl
www.comercios.cetelem.es
www.cetelem.es
www.auto.cetelem.es
www.assurance-credit.cardif.fr
websalaries-preprod.assurance.fr
tradetiger.sharekhan.com
trade.sharekhan.com
theamquant.bnpparibas-am.com
suivigiant-prod-assurance.cardif.fr
suivigiant-pp-assurance.cardif.fr
succession-assurance-vie-c02-rec.cardif.fr
succession-assurance-vie-c01-rec.cardif.fr
strade.sharekhan.com
ss-qa.rcs.co.za
slow-qa.rcs.co.za
skweb.sharekhan.com
simulationrentes-pp-assurance.cardif.fr
simulationcg-pp-assurance.cardif.fr
sharekonnect.sharekhan.com
sharekhanfinance.com
shaker-pp-tmp-assurance.cardif.fr
shaker-pp-assurance.cardif.fr
sfp-pp-assurance.cardif.fr
roszczenia.cardif.pl
rcs.co.za
rcs.co.bw
ptp-pp-assurance.cardif.fr
protocolesligne-pp.cardif.fr
propositionarbitrage-pp-assurance.cardif.fr
pre-dsa-services.cardif.pl
pms.sharekhan.com
newtrade.sharekhan.com
mypms.sharekhan.com
investment-city.bnpparibas-am.fr
instamf.sharekhan.com
infosync.bnl.it
giant-pp-assurance.cardif.fr
geolocalisation-pp-assurance.cardif.fr
finagora-pp.cardif.fr
finagora-c03-rec.cardif.fr
finagora-c02-rec.cardif.fr
finagora-c01-rec.cardif.fr
fastaccess-pp.cardif.fr
fastaccess-c03-rec.cardif.fr
fastaccess-c01-rec.cardif.fr
espace-indemnisation-pp.cardif.fr
espace-indemnisation-c03-rec.cardif.fr
espace-indemnisation-c02-rec.cardif.fr
espace-indemnisation-c01-rec.cardif.fr
espace-client-pp.cardif.fr
espace-client-c03-rec.cardif.fr
espace-client-c02-rec.cardif.fr
espace-assurance-pp.cardif.fr
espace-assurance-c03-rec.cardif.fr
espace-assurance-c02-rec.cardif.fr
espace-assurance-c01-rec.cardif.fr
epicaste-refpdt-pp-assurance.cardif.fr
epicaste-pp-assurance.cardif.fr
epicaste-fwk-pp-assurance.cardif.fr
dsa-services.cardif.pl
dsa-sales.cardif.pl
dsa-manage.cardif.pl
dft.sharekhan.com
consultationcomptes-pp-assurance.cardif.fr
comptes-pp.cardif.fr
comptes-c03-rec.cardif.fr
comptes-c02-rec.cardif.fr
comptes-c01-rec.cardif.fr
comercios.cetelem.es
cis.sharekhan.com
china.bnpparibas-am.com
bnp07b.bnpparibas.com
assurance-credit.cardif.fr
alfin-pp-assurance.cardif.fr
adminfundquest.cardif.fr
adminfundquest-tmp.cardif.fr
adminfundquest-pp.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
bnp02tpc.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
apis.bcef.caledonie.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
bnp07s.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
entreprises.ere.bnpparibas
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com

Certificate

The complete raw certificate details for bnp07b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5cmlukFAGpXX0ml862i
+cl3GGY7v1O/g4kps4v/HcyltgSnxYyGbg9iL0e2bECznZqs0OS0ZN37AycI+Tfk
oT4ur5UJfwV2vVSoRfCKKUES7mKiab3V2aZr5dO/J8V+yx3HubC2t9NPusNbVD4Q
k25zIuUjZAvFOdIyDY0UxlZMcgiBJw604SzkHOvYVzzmxZxsXVwbFqecsmvmfR92
66CVzRoY07CTuOA1ZpPbsKHuOHN4M+/U8UyvrHLXz523wI9VQYfs6iOj+XFRLBmV
M1ayBOgHqiOQ1dZ2S3lCv6BiHvEeiSu5hs4sAXpnI3KMOTScWb38SAdW+GEN68h8
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8880782620138734208915435219828672592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18631566037972133235278988975632521704111630248884556923107860225217610496883263787291824197059885281169714667695390564171586904192995378083974270794730706694693175532544774591209501988971088567646422016146097967980663260725941909999077769006152955796030162270712243878020669495900687148372112840544662799966679478320282252513877874823732857646006593364212505410528214972435594915102921590935481523225634852511808909744708655331048572225952335112172043731004099353774079755622650513272180760490390473625916102081241736672530534383894656251421712969540664555143361508238188903489679187704559025477023469929726755765407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0a1386e168647814ec28150f400bc2a7e7ea735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2518 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharekhanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneycredit.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investment-city.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurance-credit.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradetiger.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theamquant.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slow-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skweb.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharekonnect.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharekhanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcs.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocolesligne-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propositionarbitrage-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtrade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-city.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instamf.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infosync.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geolocalisation-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-refpdt-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-fwk-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dft.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultationcomptes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurance-credit.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfin-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-tmp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-pp.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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