bnp09s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:39:89:1e:77:3a:23:ed:e1:6d:ba:93:a8:b8:bd:16 was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:39:89:1e:77:3a:23:ed:e1:6d:ba:93:a8:b8:bd:16
Serial Number (int): 10932565991075391402061705504229997846
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 05:65:52:b6:fd:38:95:64:9e:9a:d8:d3:18:1f:e2:dd:81:80:ee:3b
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b3:55:8f:bc:a3:72:e0:58:dc:e8:b8:29:1e:8b:1f:8e:16:d0:c0:e1
Fingerprint (sha256): 12:f3:dd:61:18:f8:40:1e:14:e4:d3:63:7b:ec:81:1b:52:08:d9:09:b3:b4:29:7c:a2:3d:35:9c:15:23:6a:a1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp09s.bnpparibas.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp09s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp09s.bnpparibas.com
www.webdoc-expe-bicici.bnpparibas.com
www.webdoc-algerie.bnpparibas.net
www.simulationcg-prod-assurance.cardif.fr
www.simulationcg-pp-assurance.cardif.fr
www.nickel.eu
www.hdplusindex.com
www.hdplusindex.bnpparibas.com
www.cetelem.fr
www.area-personale.staging.bnpparibascardif.it
ws.demo.staging.icare-service.com
ws-ext-zendesk.nickel.eu
ws-ext-webapptibco.nickel.eu
ws-ext-webappsvi.nickel.eu
ws-ext-pinsms.nickel.eu
ws-ext-onfido.staging.nickel.eu
ws-ext-monext.nickel.eu
ws-ext-infobip.nickel.eu
ws-ext-esendex.nickel.eu
ws-ext-bimedia.nickel.eu
widgets.compte-nickel.fr
welcome.nickel.eu
webdoc-expe-bicici.bnpparibas.com
webdoc-algerie.bnpparibas.net
training.nickel.eu
terminal-portal.nickel.eu
terminal-portal.alpha.nickel.eu
tabletnickel-service.staging.abm-uid.com
tablet-nickel.abm-uid.com
sub.primebroker.com
sub-uat.primebroker.com
storelocator.nickel.eu
static-resources.nickel.eu
souscription.nickel.eu
souscription-totem.nickel.eu
simulationcg-prod-temp-assurance.cardif.fr
simulationcg-prod-assurance.cardif.fr
simulationcg-pp-assurance.cardif.fr
sfs.nickel.eu
services.cetelem.fr
sell.nickel.eu
sadad.bnpparibas.com
recette.prescripteur.souscription.neuges.org
proctechtool.bnpparibas.com
pro.nickel.eu
prescripteur.souscription.neuges.org
prescripteur.souscription-vat.neuges.org
pos-management.abm-uid.com
partner-training.nickel.eu
partenaire.domofinance.com
onetrust.cardif.com.tw
oneproctool.bnpparibas.com
nickel.eu
mpad-prod.abm-uid.com
mon.compte-nickel.fr
mon-compte-nickel.staging.abm-uid.com
inquiro-trade-preprod.bnpparibas.com
hdplusindex.com
hdplusindex.bnpparibas.com
fxclearer.bnpparibas.com
front-bo.alpha.abm-uid.com
front-bo.abm-uid.com
formation-buraliste-web-fr.nickel.eu
formation-buraliste-web-es.nickel.eu
formation-buraliste-terminal-fr.nickel.eu
formation-buraliste-bo-fr.nickel.eu
formation-buraliste-bo-es.nickel.eu
esign.bgl.lu
eportfolio-ewm.bgl.lu
employee-auth.abm-uid.com
easyaccess.nonlife.cardif.com.tw
easyaccess.life.cardif.com.tw
devenir-distributeur.compte-nickel.fr
customer-forms.nickel.eu
customer-calls-bo.abm-uid.com
customer-auth.abm-uid.com
cmonbusiness.bnpparibas-pf.com
cetelem.fr
borne-choix-service.abm-uid.com
bo-nickel.abm-uid.com
bo-menu.nickel.eu
back-bo.alpha.abm-uid.com
back-bo.abm-uid.com
area-personale.staging.bnpparibascardif.it
app.nickel.eu
api.nickel.eu
api-psd2.abm-uid.com
acm.bgl.lu

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp09s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMVck3qsV5KO8ih3F3R0
NeIqOIxsKhbmLD5p8fpJxBBLahPM5lE0dKx2CRJZyxm/Nq/adeGexEQhsnGRfJgQ
0Qa7cn44vYTxcHJpdLDnB91qidAGHkldyy4H6NsLRqqiWoMhEj6fE2s6vGP9HMIM
cFIe55/nD+L3SE93n8MTc2O9+CAVmBZO9ob1gHqN2HO3mYOnU7NYtV/cQN4QBeZO
Muac4nFeLBb+AVdOxAllRthRbVjyMV4pihFSLsah4rKTGgleZqVcNIaxvvlNx/PE
7FJ9xDEpmx4cw0Imf4RFxMsA+ldvK6UxT8SX9sC9NDUsDMmTIHb/WR9vgcAg8HEr
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10932565991075391402061705504229997846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp09s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25849936857802602647776000323917512391841248493755020547458345678693584516591310769433706567214351481314459410054702640907842932973178093059023482599072081563813972953146896957135700466229849979155235043081106586629117927234074172440556297939362594007911992129027193049825664265027373038235316088368913908255654780487170842514080144626674247608620901952463539115458679301896954587253193624172989524368845991120194100997125497691396092365934697435694979752138761403063126926602071305465665886521308044968625080359469474563114433572756857029173368675151605675099903698373191609673009225353314326764755170638269137366013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							056552b6fd3895649e9ad8d3181fe2dd8180ee3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp09s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-expe-bicici.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationcg-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdplusindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdplusindex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.area-personale.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.demo.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-zendesk.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webappsvi.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-bimedia.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-expe-bicici.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminal-portal.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terminal-portal.alpha.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletnickel-service.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub-uat.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storelocator.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-resources.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'souscription.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'souscription-totem.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-prod-temp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfs.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sell.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadad.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.prescripteur.souscription.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proctechtool.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pro.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.souscription.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.souscription-vat.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pos-management.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-training.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaire.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetrust.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneproctool.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-compte-nickel.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade-preprod.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdplusindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdplusindex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxclearer.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front-bo.alpha.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front-bo.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation-buraliste-web-fr.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation-buraliste-web-es.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation-buraliste-terminal-fr.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation-buraliste-bo-fr.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation-buraliste-bo-es.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportfolio-ewm.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employee-auth.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyaccess.nonlife.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyaccess.life.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-forms.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-calls-bo.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-auth.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmonbusiness.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borne-choix-service.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-menu.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'back-bo.alpha.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'back-bo.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area-personale.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-psd2.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acm.bgl.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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