bnp10s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:21:61:61:3b:0f:43:0f:50:a6:f1:2b:b7:e3:9c:e5 was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:21:61:61:3b:0f:43:0f:50:a6:f1:2b:b7:e3:9c:e5
Serial Number (int): 10807144859752360538464521721739451621
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 61:e2:2f:82:6c:2d:5a:19:d0:b0:4e:67:72:71:2f:51:eb:b7:7d:c9
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c5:2a:10:df:79:44:d0:65:78:68:8e:6a:df:37:74:3a:8e:1c:0a:c9
Fingerprint (sha256): 15:09:44:a7:ae:23:79:24:0c:43:81:95:21:8c:01:40:43:b9:2c:e1:6b:a8:f0:d2:a7:54:38:2b:47:24:fb:d2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp10s.bnpparibas.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp10s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp10s.bnpparibas.com
accountx2ca.bnl.it
agw-services.staging.bnpparibascardif.it
api-gtw.dev.nickel.eu
api-gtw.nickel.eu
api-gtw.staging.nickel.eu
api.irb.algeria.staging.bnpparibas.com
artigianonline.artigiancassa.it
auto.signature.neuges.org
bo-nickel-alpha.abm-uid.com
careers.apac.bnpparibas
cdc-archive.portail-investisseur.com
cetelem-esignrc.bnpparibas-pf.com
courtier-sygma-esignrc.bnpparibas-pf.com
customer-call-center-api.abm-uid.com
customer-registration-admin-api.abm-uid.com
customer-registration-control-bo.abm-uid.com
devenir-distributeur.preprod.compte-nickel.fr
devenir-distributeur.staging.compte-nickel.fr
ecnycn.asia.bnpparibas.com
emprunteur.signature.neuges.org
etranplus.bnpparibas.com
filebox.smsps-coll.bnl.it
financ.it
financit.it
fzw-ppd.bnpparibas.com
fzw.bnpparibas.com
gm-graduate-careers.apac.bnpparibas
mobile.preprod.domofinance.com
mobileservices2.bgl.lu
mon-alpha.compte-nickel.fr
mpad-prod.preprod.abm-uid.com
mpad-prod.staging.abm-uid.com
partenaires.preprod.domofinance.com
partenaires.qualif.domofinance.com
partinst-esignrc.bnpparibas-pf.com
pass-portal.staging.bnpparibascardif.it
preprod.domofinance.com
prescripteur.signature.neuges.org
qualif.domofinance.com
signature-vad.domofinance.com
signature.cetelem.fr
sygma-esignrc.bnpparibas-pf.com
tablet-nickel.preprod.abm-uid.com
tablet-nickel.staging.abm-uid.com
tabletnickel-service.abm-uid.com
telepassxbiz.com
telepassxbiz.it
webdoc-ci.bicicinet.net
webdoc-ci.bnpparibas.com
webdoc-dz.staging.bnpparibas.net
webdoc-sn.bicisnet.net
webdoc-sn.bnpparibas.com
widgets.preprod.compte-nickel.fr
widgets.staging.compte-nickel.fr
ws-ext-esendex.preprod.nickel.eu
ws-ext-esendex.staging.nickel.eu
ws-ext-infobip.preprod.nickel.eu
ws-ext-infobip.staging.nickel.eu
ws-ext-monext-tokenizer.nickel.eu
ws-ext-monext-tokenizer.preprod.nickel.eu
ws-ext-monext-tokenizer.staging.nickel.eu
ws-ext-monext.preprod.nickel.eu
ws-ext-onfido.nickel.eu
ws-ext-onfido.preprod.nickel.eu
ws-ext-pinsms.preprod.nickel.eu
ws-ext-pinsms.staging.nickel.eu
ws-ext-webapptibco.preprod.nickel.eu
ws-ext-webapptibco.staging.nickel.eu
www.accountx2ca.bnl.it
www.api.irb.algeria.staging.bnpparibas.com
www.artigianonline.artigiancassa.it
www.financ.it
www.financit.it
www.pass-portal.staging.bnpparibascardif.it
www.preprod.domofinance.com
www.qualif.domofinance.com
www.staging.nickel.eu
www.telepassxbiz.it
www.webdoc-ci.bicicinet.net
www.webdoc-ci.bnpparibas.com
www.webdoc-dz.staging.bnpparibas.net
www.webdoc-sn.bicisnet.net
www.webdoc-sn.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp10s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskNMvp6VQAhxHc+C/THR
2ntTLYED2iqrTdelXJCCqxfxnLcdU7BVaCV8PrNz8EGKhmceBzmSn/ptgoxE2Z+g
aGfo7cRIYClLgBlJBh/h23q580loFHSK1JEQlE2FHutkmzOVwx2ydFHuYzIXaijh
abAP3ftCiOAwreoC3jIMDJ570KsxSszBmkoXln6odg6hBeqq2oxqedNzJCip2icZ
poRDG/Ms/oLqwU9A8Ov0f3NSRwzWVQMVaFGp1/QxFCaUui9aCdGpssQZQSm8nVWI
WUa5X8bsng+jIK7DGWNz4vLo97kqC0FdTPeC5NWI/0D0hvbYlKCuVNXwpfgqWGN5
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10807144859752360538464521721739451621
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp10s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22503605044150035417104290471214227146085914412045317060689040382637835301815533303822570346298372804094627187587658195029353516105067043837763509990120172604243282547739883651372954611994836300376942182435524545150669715571652368320128979990298560289879195080405458410718340936684679824750554897999916077682114056239673825052008976505152663645532649214636610498692567685738151962351874481308913106934026724973257385386222728521471945837555053882584041148453939596357233841158759297548736335186757123799433579154195010990584515801107801353967999018474985468483826886039066896412881980512602680774573650640989472389623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61e22f826c2d5a19d0b04e6772712f51ebb77dc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp10s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agw-services.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.dev.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.irb.algeria.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artigianonline.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel-alpha.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-archive.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-call-center-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-admin-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-control-bo.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnycn.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebox.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financ.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm-graduate-careers.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices2.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-alpha.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletnickel-service.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.irb.algeria.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artigianonline.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financ.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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