bnp03s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:3d:e2:f3:3e:9c:0b:7a:07:a1:2e:f8:82:bd:4a:12 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:3d:e2:f3:3e:9c:0b:7a:07:a1:2e:f8:82:bd:4a:12
Serial Number (int): 14942841158395332564899222494386145810
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c5:e0:d9:f6:90:31:21:ee:8b:1e:04:e2:34:9a:cc:f4:b2:bd:70:ae
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 39:37:f5:31:71:44:f7:48:c1:72:90:94:25:19:c6:7b:5b:49:31:89
Fingerprint (sha256): 16:49:5a:16:55:de:04:a2:99:50:35:13:69:ec:da:74:ea:68:74:04:44:ba:36:e1:de:bf:7a:b4:ff:56:10:12

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp03s.bnpparibas.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp03s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp03s.bnpparibas.com
balifipqualif.bnpparibas.com
bic-bnpparibas.sa
bnpparibas.ch
bnpparibas.co.id
bnpparibas.co.th
bnpparibas.com.sg
bnpparibas.com.tr
bnpparibas.com.tw
bnpparibas.se
bnpparibas.sk
bnpparibas.ua
bo.wearetennis.bnpparibas
bourseenligne-dev.bicibourse.com
bourseenligne-qualif.bicibourse.com
bourseenligne.bicibourse.com
brasil.bnpparibas
cdn-bo.wearetennis.bnpparibas
cdn-pays.bnpparibas.com
cdn.wearetennis.bnpparibas
channelislands.bnpparibas.com
epargne-retraite-entreprises.bnpparibas.com
fact-qual.bnpparibas.com
fc-matisse-compta.staging.bnpparibas.com
flexsimmo.staging.bnpparibas.fr
me.bnpparibas.com
mea.bnpparibas.com
nic.bnpparibas.com
onetrust.cardif.com.tw
preprod.bnpp.lk
preprod.urlshortener.bnpparibas
preview.wearetennis.bnpparibas
slovakia.bnpparibas.com
southafrica.bnpparibas.com
sso.wearetennis.bnpparibas
taiwan.bnpparibas.com
taiwan.bnpparibas.com.tw
turkey.bnpparibas.com
ukraine.bnpparibas.com
vietnam.bnpparibas.com
we-are-tennis.com
wearetennis.be
wearetennis.bnpparibas
wearetennis.bnpparibas.com
wearetennis.com
wearetennis.eu
wearetennis.fr
wearetennis.it
wearetennis.nl
www.bic-bnpparibas.sa
www.bnpparibas.ch
www.bnpparibas.co.id
www.bnpparibas.co.th
www.bnpparibas.com.sg
www.bnpparibas.com.tr
www.bnpparibas.com.tw
www.bnpparibas.se
www.bnpparibas.sk
www.bnpparibas.ua
www.bourseenligne-dev.bicibourse.com
www.bourseenligne-qualif.bicibourse.com
www.bourseenligne.bicibourse.com
www.brasil.bnpparibas
www.cdn.wearetennis.bnpparibas
www.channelislands.bnpparibas.com
www.epargne-retraite-entreprises.bnpparibas.com
www.me.bnpparibas.com
www.mea.bnpparibas.com
www.nic.bnpparibas.com
www.preprod.bnpp.lk
www.preprod.urlshortener.bnpparibas
www.slovakia.bnpparibas.com
www.southafrica.bnpparibas.com
www.taiwan.bnpparibas.com
www.taiwan.bnpparibas.com.tw
www.turkey.bnpparibas.com
www.ukraine.bnpparibas.com
www.vietnam.bnpparibas.com
www.we-are-tennis.com
www.wearetennis.be
www.wearetennis.bnpparibas
www.wearetennis.bnpparibas.com
www.wearetennis.com
www.wearetennis.eu
www.wearetennis.fr
www.wearetennis.it
www.wearetennis.nl
www.zao.bnpparibas.com
zao.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp03s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/nG2ysQyfIvaOBmxn0T9IkDcfVYO
vi7ik/GQ9LZvtCG1lwMETvblkFT86UwE8snB6okanCFVQgDUIIGY0A6ZHw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14942841158395332564899222494386145810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp03s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004fe71b6cac4327c8bda3819b19f44fd2240dc7d560ebe2ee293f190f4b66fb421b59703044ef6e59054fce94c04f2c9c1ea891a9c21554200d4208198d00e991f
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5e0d9f6903121ee8b1e04e2349accf4b2bd70ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2213 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp03s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balifipqualif.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bic-bnpparibas.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourseenligne-dev.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourseenligne-qualif.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bourseenligne.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brasil.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-pays.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'channelislands.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fact-qual.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fc-matisse-compta.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexsimmo.staging.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mea.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nic.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetrust.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.bnpp.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.urlshortener.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slovakia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southafrica.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taiwan.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taiwan.bnpparibas.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turkey.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukraine.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'we-are-tennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetennis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetennis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetennis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetennis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetennis.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wearetennis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bic-bnpparibas.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bourseenligne-dev.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bourseenligne-qualif.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bourseenligne.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brasil.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.channelislands.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.me.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mea.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nic.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.bnpp.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.urlshortener.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slovakia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southafrica.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taiwan.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taiwan.bnpparibas.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turkey.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukraine.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.we-are-tennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearetennis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearetennis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearetennis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearetennis.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearetennis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearetennis.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wearetennis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zao.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zao.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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