c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:c4:d1:50:f5:c8:83:87:3a:3d:60:b7:74:6d:bb:e8 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:c4:d1:50:f5:c8:83:87:3a:3d:60:b7:74:6d:bb:e8
Serial Number (int): 10326531592693635360453029477177211880
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9c:5f:19:3f:4f:ba:92:d2:81:7c:8d:27:c0:85:5a:bf:6f:70:6b:5f
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b7:b2:c0:c9:2c:e5:92:ad:41:13:08:92:fc:83:88:f9:9e:1f:90:ea
Fingerprint (sha256): 13:f4:58:06:dd:b8:d3:6e:bc:54:fd:36:d2:52:b4:6a:3e:ce:62:58:b7:e9:71:be:dc:47:a4:04:8b:91:01:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
1-cortexplus-pp.bnpparibas.com
1-cortexplus.bnpparibas.com
1-globalmarkets-pp.bnpparibas.com
1-globalmarkets.bnpparibas.com
1-markets360-pp.bnpparibas.com
1-markets360.bnpparibas.com
1-origin-cortexplus.bnpparibas.com
2-cortexplus-pp.bnpparibas.com
2-cortexplus.bnpparibas.com
2-globalmarkets-pp.bnpparibas.com
2-globalmarkets.bnpparibas.com
2-markets360-pp.bnpparibas.com
2-markets360.bnpparibas.com
2-origin-cortexplus.bnpparibas.com
aeat.cash-cib.bnpparibas.es
affaires-publiques.bnpparibas
affaires-publiques.bnpparibas.com
alis.bnpparibas.com
apac.bnpparibas
apac.bnpparibas.com
bnpparibas.at
bnpparibas.be
bnpparibas.bg
bnpparibas.ca
bnpparibas.cn
bnpparibas.co.kr
bnpparibas.co.th
bnpparibas.com.au
bnpparibas.com.cn
bnpparibas.com.co
bnpparibas.com.my
bnpparibas.com.sg
bnpparibas.de
bnpparibas.dk
bnpparibas.es
bnpparibas.org.cn
cfd-support.bbva.bnpparibas.com
chile.bnpparibas.com
china.bnpparibas.com
china.bnpparibas.com.cn
compliance-notifications.bnpparibas.com
cortexfx.bnpparibas.com
dam.bnpparibas.com
democfd-support.bbva.bnpparibas.com
economieetentreprise.bnpparibas
economieetentreprises.bnpparibas
eqdpo.bnpparibas.com
flexsimmo.imex.bnpparibas.fr
indices-globalmarkets.bnpparibas.com
invest.bnpparibas.com
neobonds.bnpparibas
neobonds.staging.bnpparibas
precfd-support.bbva.bnpparibas.com
quotetransparency-pp.bnpparibas.com
quotetransparency.bnpparibas.com
surveys.bnpparibas.com
tokenauth-cib-stg.bnpparibas.com
try-cfd.bnpparibas.com
vietnam.bnpparibas.com
www.aeat.cash-cib.bnpparibas.es
www.affaires-publiques.bnpparibas.com
www.apac.bnpparibas
www.apac.bnpparibas.com
www.bnpparibas.at
www.bnpparibas.be
www.bnpparibas.bg
www.bnpparibas.ca
www.bnpparibas.cn
www.bnpparibas.co.kr
www.bnpparibas.co.th
www.bnpparibas.com.au
www.bnpparibas.com.cn
www.bnpparibas.com.co
www.bnpparibas.com.my
www.bnpparibas.com.sg
www.bnpparibas.de
www.bnpparibas.dk
www.bnpparibas.es
www.bnpparibas.org.cn
www.chile.bnpparibas.com
www.china.bnpparibas.com
www.china.bnpparibas.com.cn
www.economieetentreprise.bnpparibas
www.economieetentreprises.bnpparibas
www.eqdpo.bnpparibas.com
www.indices-globalmarkets.bnpparibas.com
www.invest.bnpparibas.com
www.quotetransparency-pp.bnpparibas.com
www.quotetransparency.bnpparibas.com
www.vietnam.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com

Certificate

The complete raw certificate details for c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEs1N80Gjr4EE8P/7R/bcA0dvfu6qC
gnaSYjsE30ZJ2TDCMe+ftl/MAm1cvZ9dTebL5HAKeZ8AFN04wih5hVsNhA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10326531592693635360453029477177211880
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b3537cd068ebe0413c3ffed1fdb700d1dbdfbbaa82827692623b04df4649d930c231ef9fb65fcc026d5cbd9f5d4de6cbe4700a799f0014dd38c22879855b0d84
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c5f193f4fba92d2817c8d27c0855abf6f706b5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-cortexplus-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-globalmarkets-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-markets360-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-markets360.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-origin-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-cortexplus-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-globalmarkets-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-markets360-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-markets360.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-origin-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeat.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affaires-publiques.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affaires-publiques.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chile.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance-notifications.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexfx.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'democfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economieetentreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economieetentreprises.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqdpo.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexsimmo.imex.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indices-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobonds.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobonds.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotetransparency-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotetransparency.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenauth-cib-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-cfd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeat.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affaires-publiques.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chile.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economieetentreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economieetentreprises.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eqdpo.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indices-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invest.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotetransparency-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotetransparency.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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