f17aaabc20bfe045075927934fed52d21.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:bf:b5:d9:77:c2:47:35:b1:13:4a:7c:fe:1f:c3:85 was issued on by DigiCert Inc.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:bf:b5:d9:77:c2:47:35:b1:13:4a:7c:fe:1f:c3:85
Serial Number (int): 6312329028832926172575190251051402117
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a4:52:2e:d1:13:dc:70:5a:16:20:88:19:2b:c5:a7:da:d3:6a:37:00
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 8f:42:de:8c:0d:b3:83:73:f1:67:82:36:ce:db:f6:24:e1:84:7c:b2
Fingerprint (sha256): 11:44:a6:9a:1b:bf:92:ed:b9:57:4f:09:9c:1c:7d:33:07:5c:68:10:09:43:f6:f7:b9:93:fd:b3:eb:b5:42:d9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate f17aaabc20bfe045075927934fed52d21.bnpparibas.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f17aaabc20bfe045075927934fed52d21.bnpparibas.com
arbitrage.bnpparibas.com
arval.cn
arvaljiutong.cn
bnppf-dgi-collection.bnpparibas.com
bnppf-dgi-collection.staging.bnpparibas
cib.bnpparibas
cib.bnpparibas.com
clientmanager-sp.factor.bnpparibas.com
contrib.cib.bnpparibas
corefactoring-sp.factor.bnpparibas.com
cortexsecondary-pp.bnpparibas.com
e2c.bnpparibasfortis.be
easy2cash.bnpparibasfortis.be
ebroker-rechm.staging.sygmabnpparibas-pf.com
ebroker-recrf.staging.sygmabnpparibas-pf.com
economic-research.bnpparibas.com
editodistribution-assurance.cardif.fr
edraft.uat1.bnpparibas.com
eware.uat1.bnpparibas.com
factor.bnpparibas.de
factor.bnpparibas.dk
factor.bnpparibas.nl
factor.bnpparibas.pt
factor.bnpparibas.se
factor.bnpparibasfortis.be
factoring.bnpparibas.com
fastaccess-c02-rec.cardif.fr
halo-sp-staging.factor.bnpparibas.com
ifitalia.it
indemnisation-c01.staging.cardif.fr
india-netpay.bnpparibas.com
limmobilierdunmondequichange.fr
lmd-partners.arval.com
lmd-partners.uat.arval.com
lmd-ugap.arval.com
lmd-ugap.uat.arval.com
navesylogistica.es
netpaycentric-india.bnpparibas.com
oficinas.bnpparibas.es
preprod.espace-client.cofinoga.fr
property-management.realestate.bnpparibas
psyg-rechm.staging.sygmabnpparibas-pf.com
psyg-recrf.staging.sygmabnpparibas-pf.com
qabnpparibasfortis.com
ratama-dz.bnpparibas.dz
ratama-pp-pos.bnpparibas.dz
reim.bnpparibas.de
scpi.immo
stream01-cortexfx-pp.bnpparibas.com
stream02-cortexfx-pp.bnpparibas.com
www.arval.cn
www.arvaljiutong.cn
www.compliance-notifications.bnpparibas.com
www.e2c.bnpparibasfortis.be
www.easy2cash.bnpparibasfortis.be
www.economic-research.bnpparibas.com
www.espace-client.cdgp.fr
www.factor.bnpparibas.de
www.factor.bnpparibas.dk
www.factor.bnpparibas.nl
www.factor.bnpparibas.se
www.factor.bnpparibasfortis.be
www.halo-sp-staging.factor.bnpparibas.com
www.i-cliential.com
www.ifitalia.it
www.limmobilierdunmondequichange.fr
www.lmd-partners.arval.com
www.lmd-partners.uat.arval.com
www.lmd-ugap.arval.com
www.lmd-ugap.uat.arval.com
www.navesylogistica.es
www.oficinas.bnpparibas.es
www.property-management.realestate.bnpparibas
www.qabnpparibasfortis.com
www.ratama-dz.bnpparibas.dz
www.ratama-pp-pos.bnpparibas.dz
www.reim.bnpparibas.de
www.scpi.immo

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com

Certificate

The complete raw certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEzecWQ0ZgGXxI76PXVSvNHGQrWzaF
62l0xdzQetLh9SxltJGUCmBo63GA6gd1VDliWhZGtSzFUqe4VZleVujnsA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6312329028832926172575190251051402117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004cde716434660197c48efa3d7552bcd1c642b5b3685eb6974c5dcd07ad2e1f52c65b491940a6068eb7180ea07755439625a1646b52cc552a7b855995e56e8e7b0
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4522ed113dc705a162088192bc5a7dad36a3700
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2307 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppf-dgi-collection.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppf-dgi-collection.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientmanager-sp.factor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib.cib.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corefactoring-sp.factor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexsecondary-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2c.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy2cash.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-rechm.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-recrf.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editodistribution-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edraft.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoring.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halo-sp-staging.factor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indemnisation-c01.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-netpay.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limmobilierdunmondequichange.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmd-partners.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmd-partners.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmd-ugap.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmd-ugap.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navesylogistica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpaycentric-india.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oficinas.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.espace-client.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property-management.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyg-rechm.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyg-recrf.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-dz.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-pp-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reim.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream01-cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream02-cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance-notifications.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e2c.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy2cash.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-client.cdgp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halo-sp-staging.factor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-cliential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limmobilierdunmondequichange.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmd-partners.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmd-partners.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmd-ugap.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmd-ugap.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navesylogistica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oficinas.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.property-management.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-dz.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-pp-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reim.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpi.immo'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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