bnp09s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:c3:0d:a2:3d:15:09:bc:ae:4c:8b:df:82:a9:fd:3b was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:c3:0d:a2:3d:15:09:bc:ae:4c:8b:df:82:a9:fd:3b
Serial Number (int): 14305054370454643922299474197386755387
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2a:65:8e:fb:8c:b8:97:ba:9d:e1:7a:db:11:d2:4d:db:4d:f0:ac:1f
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 57:06:cc:21:03:84:5f:ee:4a:c7:4b:34:19:b7:40:54:19:3f:c0:23
Fingerprint (sha256): 12:00:62:23:08:27:16:aa:ef:76:d9:7b:f5:c9:d0:3f:50:74:c0:f2:1b:4d:e2:2d:a1:e9:5e:f9:29:c1:2d:0a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp09s.bnpparibas.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp09s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp09s.bnpparibas.com
acm.bgl.lu
alis.v16.staging.bnpparibas
analyticscom.bnpparibas
area-personale.staging.bnpparibascardif.it
asesoresbancaseguros.cardif.com.co
asesoresdaviplata.cardif.com.co
asesorestuya.cardif.com.co
auto.bnpparibascardif.cl
bnppcardif-indicadores.com.mx
cardifonline.com.mx
cetelem.fr
cflow-staging.bnpparibas-am.it
claims.cardif.com.co
claimsbancolombia.cardif.com.co
claimsbogota.cardif.com.co
clientmanager.bnpparibasfortisfactor.com
clientmgr-dk.bnpparibasfactoring.com
clubleonisa.cardif.com.co
cmonbusiness.bnpparibas-pf.com
comitescardif.com.mx
credit-cetelem.fr
dealernet.bnpparibasfortisfactor.com
definicionmedica.cardif.com.co
easyaccess.life.cardif.com.tw
easyaccess.nonlife.cardif.com.tw
eportfolio-ewm.bgl.lu
esign.bgl.lu
esignatures.bnpparibasfortisfactor.com
formation-buraliste-web-es.nickel.eu
fxclearer.bnpparibas.com
hdplusindex.bnpparibas.com
hdplusindex.com
hm-staging.cetelem.fr
incentivosbrilla.cardif.com.co
incentivosfinandina.cardif.com.co
incentivosla14.cardif.com.co
incentivossufi.cardif.com.co
inquiro-trade-preprod.bnpparibas.com
link2portal-tst.bnpparibas.com
mesadeayuda.cardif.com.co
misegurocardif.com.mx
miseguroleonisa.cardif.com.co
mobileservices1.bgl.lu
mybusinessbanking.bgl.lu
myleasingsolutions.bgl.lu
mywealth.bnpparibas.lu
oneproctool.bnpparibas.com
onetrust.cardif.com.tw
partenaire.domofinance.com
prescripteur.souscription-vat.neuges.org
prescripteur.souscription.neuges.org
proctechtool.bnpparibas.com
recette.prescripteur.souscription.neuges.org
repatriaciongrupobancoppel.com.mx
sadad.bnpparibas.com
seguroganas.cardif.com.co
segurosagrario.cardif.com.co
segurosclaro.cardif.com.co
segurosfinandina.cardif.com.co
segurosla14.cardif.com.co
segurosleonisa.cardif.com.co
segurosnequi.cardif.com.co
segurossufi.cardif.com.co
services.cetelem.fr
sig.cardif.com.co
simulationcg-prod-assurance.cardif.fr
sit1-olb.consorsfinanz.de
staging.mycardif.it
sub-uat.primebroker.com
sub.primebroker.com
vivetusegurooccidente.cardif.com.co
webbanking.bgl.lu
webcomponents.cardif.com.co
webdoc-algerie.bnpparibas.net
ws-ext-webappsvi.nickel.eu
ws-ext-zendesk.nickel.eu
ws.demo.staging.icare-service.com
www.area-personale.staging.bnpparibascardif.it
www.bnpparibasfactoring.com
www.bnppcardif-indicadores.com.mx
www.cardifonline.com.mx
www.cetelem.fr
www.cflow-staging.bnpparibas-am.it
www.comitescardif.com.mx
www.credit-cetelem.fr
www.hdplusindex.bnpparibas.com
www.hdplusindex.com
www.hm-staging.cetelem.fr
www.misegurocardif.com.mx
www.repatriaciongrupobancoppel.com.mx
www.simulationcg-prod-assurance.cardif.fr
www.speedata.com
www.staging.mycardif.it
www.webdoc-algerie.bnpparibas.net

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp09s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcJ+rJUx10He6iPhvd0h
HfQaEpZZsH+AOn4l0y9E+AMqvfReyeURQoQltnG8OVeNncN607yVrcAjMCkXAB4I
15ZKTx/uy43LGMM03L83M8F0KBUeu7978z3Kg55pnSBya8DjuzF+tFJYSbLWhrZd
o8IsasV7RXNS7uEXhkMiaOG+AnqArWpbk8EQSS9kEsEHwg7EnwFDUK1lxkNOVxLG
pBHyJf6MNKfrGFhuiD3JKTbzOGCSe9Ms9cbZJcU1AW5iJ2Ixq4jqktN5AzbhgKF0
6rVXrKnctC7GbQfxrFQYWpBR154x5Ib0M2gtTZTh+UUT2VRJXJazvIrKkLZcpjMJ
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14305054370454643922299474197386755387
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp09s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23954948609349339499784155137929589719907030338808336633037139482650222470760940612731989272152276931921086165440610041218754285387419516174426606399026258469939819659648472677334326676378750377710610553248510530478258483103426261710865201775361917867648330968896400430161477635321387046502443435125065127177071477069045038270506520652191694707546444809124358665768386111757000125878818640520096602666357917040044781938449254072521880111962112155315483447788181785059340271199936085260092774130689061231611163394001621463318461965004150383540234379213711904373021850018866198496756525943368599499848777137413780867451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a658efb8cb897ba9de17adb11d24ddb4df0ac1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2746 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp09s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acm.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.v16.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analyticscom.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area-personale.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesoresbancaseguros.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesoresdaviplata.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesorestuya.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.bnpparibascardif.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppcardif-indicadores.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardifonline.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cflow-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsbancolombia.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsbogota.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientmanager.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientmgr-dk.bnpparibasfactoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmonbusiness.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comitescardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit-cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealernet.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'definicionmedica.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyaccess.life.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyaccess.nonlife.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportfolio-ewm.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esignatures.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation-buraliste-web-es.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxclearer.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdplusindex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdplusindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm-staging.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosbrilla.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosfinandina.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosla14.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivossufi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade-preprod.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link2portal-tst.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesadeayuda.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misegurocardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miseguroleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices1.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusinessbanking.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myleasingsolutions.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealth.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneproctool.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetrust.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaire.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.souscription-vat.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.souscription.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proctechtool.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.prescripteur.souscription.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repatriaciongrupobancoppel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadad.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroganas.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosagrario.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosclaro.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosfinandina.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosla14.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosnequi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurossufi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit1-olb.consorsfinanz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mycardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub-uat.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivetusegurooccidente.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webbanking.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcomponents.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webappsvi.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-zendesk.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.demo.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.area-personale.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasfactoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppcardif-indicadores.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardifonline.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cflow-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comitescardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.credit-cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdplusindex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdplusindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hm-staging.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.misegurocardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repatriaciongrupobancoppel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.mycardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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