bnp07b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert Secure Site ECC CA-1

About this certificate

This digital certificate with serial number 0b:82:7f:51:1b:e0:3e:2b:73:36:b2:49:a3:6e:de:32 was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:82:7f:51:1b:e0:3e:2b:73:36:b2:49:a3:6e:de:32
Serial Number (int): 15299088837371617848209974434521341490
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:c9:a1:58:c8:6d:81:c0:cc:c2:ca:11:15:ff:1f:54:26:82:f5:66
AuthorityKeyId: db:35:44:5d:2b:eb:53:af:9e:0b:f5:71:3d:a3:99:73:ae:fb:5c:53

Fingerprint (sha1): 9c:0b:86:b1:25:29:8d:83:38:d9:0f:8c:8e:25:2a:b4:1e:e5:b0:8d
Fingerprint (sha256): 13:cb:10:fc:d8:5d:8a:5c:f2:08:a9:46:bc:1a:52:84:17:dc:dd:86:8a:2b:b8:59:29:32:89:b6:45:f0:5b:d1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSecureSiteECCCA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertSecureSiteECCCA-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertSecureSiteECCCA-1.crl

Check the revocation status for certificate bnp07b.bnpparibas.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA256

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp07b.bnpparibas.com
epicaste-pp-assurance.cardif.fr
espace-indemnisation-c01-rec.cardif.fr
www.investment-city.bnpparibas-am.fr
www.dsa-sales.cardif.pl
www.roszczenia.cardif.pl
finagora-c01-rec.cardif.fr
espace-client-c02-rec.cardif.fr
espace-assurance-c02-rec.cardif.fr
strade.sharekhan.com
china.bnpparibas-am.com
confirmation.sharekhan.com
theamquant.bnpparibas-am.com
espace-indemnisation-c02-rec.cardif.fr
dsa-sales.cardif.pl
suivigiant-pp-assurance.cardif.fr
dsa-services.cardif.pl
fastaccess-pp.cardif.fr
www.zonacliente.cetelem.es
ptp-pp-assurance.cardif.fr
comptes-c01-rec.cardif.fr
adminfundquest.cardif.fr
comercios.cetelem.es
www.comercios.cetelem.es
geolocalisation-pp-assurance.cardif.fr
succession-assurance-vie-c02-rec.cardif.fr
epicaste-fwk-pp-assurance.cardif.fr
infosync.bnl.it
espace-assurance-c01-rec.cardif.fr
dsa-manage.cardif.pl
www.wealthtiger.com
tradetiger.sharekhan.com
espace-client-pp.cardif.fr
www.dsa-manage.cardif.pl
fastaccess-c01-rec.cardif.fr
ss-qa.rcs.co.za
investment-city.bnpparibas-am.de
www.cetelem.es
consultationcomptes-pp-assurance.cardif.fr
trade.sharekhan.com
www.pre-dsa-services.cardif.pl
instamf.sharekhan.com
cis.sharekhan.com
www.sharekhan.com
alfin-pp-assurance.cardif.fr
assurance-credit.cardif.fr
propositionarbitrage-pp-assurance.cardif.fr
simulationcg-pp-assurance.cardif.fr
www.sharekhanfinance.com
succession-assurance-vie-c01-rec.cardif.fr
finagora-c03-rec.cardif.fr
comptes-c03-rec.cardif.fr
espace-assurance-c03-rec.cardif.fr
www.auto.cetelem.es
fastaccess-c03-rec.cardif.fr
www.websalaries-preprod.assurance.fr
protocolesligne-pp.cardif.fr
espace-assurance-pp.cardif.fr
dft.sharekhan.com
pre-dsa-services.cardif.pl
adminfundquest-pp.cardif.fr
roszczenia.cardif.pl
skweb.sharekhan.com
shaker-pp-assurance.cardif.fr
finagora-c02-rec.cardif.fr
websalaries-preprod.assurance.fr
finagora-pp.cardif.fr
comptes-c02-rec.cardif.fr
espace-indemnisation-pp.cardif.fr
www.dsa-services.cardif.pl
sharekhanfinance.com
newtrade.sharekhan.com
suivigiant-prod-assurance.cardif.fr
sfp-pp-assurance.cardif.fr
mypms.sharekhan.com
shaker-pp-tmp-assurance.cardif.fr
simulationrentes-pp-assurance.cardif.fr
adminfundquest-tmp.cardif.fr
espace-indemnisation-c03-rec.cardif.fr
epicaste-refpdt-pp-assurance.cardif.fr
investment-city.bnpparibas-am.fr
espace-client-c03-rec.cardif.fr
comptes-pp.cardif.fr
pms.sharekhan.com
giant-pp-assurance.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECJX1t8BBTGOv7p962F7AVwY8jY1c
Rl4CupbAQXZ/xNL67iPwrA1zsIn0zvYTGzQV3CwD5alMcO7ZFshqoVSHww==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15299088837371617848209974434521341490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Secure Site ECC CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00040895f5b7c0414c63afee9f7ad85ec057063c8d8d5c465e02ba96c041767fc4d2faee23f0ac0d73b089f4cef6131b3415dc2c03e5a94c70eed916c86aa15487c3
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db35445d2beb53af9e0bf5713da39973aefb5c53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bc9a158c86d81c0ccc2ca1115ff1f542682f566
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2477 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investment-city.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confirmation.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theamquant.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geolocalisation-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-fwk-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infosync.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wealthtiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradetiger.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-city.bnpparibas-am.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultationcomptes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instamf.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfin-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurance-credit.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propositionarbitrage-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharekhanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocolesligne-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dft.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skweb.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharekhanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtrade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-tmp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-refpdt-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-city.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertSecureSiteECCCA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertSecureSiteECCCA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSecureSiteECCCA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174739cf8760000040300483046022100cd2b6c30f4a5da1cffec8195d60961efcc7b4498540c0c4c5ec2139489fa0116022100d647fb624114952de630dffb97704a188854bea28d2556d0ad74693ed6972b0b0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174739cf8760000040300473045022100d312fea1c64e60f7c0fb05ac3ceb571f638813750da4d87d7e060918d157a703022027fd33e1b847be331b6e19a725cfff3c6b47e594b2d75859a6d3b89042c21607
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . [c:0|t:3|false] BIT STRING (568 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27676339099014875306850234735059735144078234997209138444219283146464529814064
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 78053021361703736007253845099302703254546892195770483805777029154074440301832