bnp02b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:3e:c1:42:30:82:6f:d4:f9:31:ac:0d:93:da:ae:47 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:3e:c1:42:30:82:6f:d4:f9:31:ac:0d:93:da:ae:47
Serial Number (int): 2984298145924190711934737498534227527
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e9:d2:96:a5:0b:e9:7d:d1:62:e6:ff:a3:4c:3a:0d:8d:99:1b:09:94
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c9:55:1e:bc:7b:dc:9b:14:09:1a:7f:23:4c:e9:3b:e3:4d:3f:19:a3
Fingerprint (sha256): 1a:11:50:e5:d1:93:d8:2d:07:b9:f8:35:d6:71:29:1b:c3:37:f0:fb:eb:e8:8d:a9:f7:c0:55:57:8a:2a:11:4d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bnp02b.bnpparibas.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp02b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp02b.bnpparibas.com
www.easy.bnpparibas.de
homologation.lfd2.bnpparibas-pf.com
contract.one2fin.factor.bnpparibas
homologation.international-buyers.bnpparibas.fr
www.bnpparibascardif.co.uk
clients.fundquestadvisor.com
easy.bnpparibas-ip.fr
bop.one2fin.factor.bnpparibas
lfd2.bnpparibas-pf.com
staging.international-buyers.bnpparibas.com
staging.easyikea.fr
easy.bnpparibas.de
correspondant-assurance-fr.staging.bnpparibas-ip.com
homologation.international-buyers.bnpparibas.com
erelio.epargne-retraite-entreprises.bnpparibas.com
easy.bnpparibas.ch
funds-api.bnpparibas.com
collect-bnl.bnpparibas.fr
staging.easyconfo.fr
homologation.easyikea.fr
easy.bnpparibas-am.fr
staging.lfd2.bnpparibas-pf.com
www.i-assurial.fr
institutionnels-ip.bnpparibas.fr
www.institutionnels.bnpparibas-am.fr
www.boite-outils-business.fr
noasis.bnpparibas.com
homologation.boite-outils-business.fr
www.correspondant-assurance.fr
bnpplink-staging.bnpparibas.co.in
bnpparibas-ip.at
www.bnpparibas-am.at
docfinder.staging.bnpparibas-am.com
www.easyikea.fr
test-securities-query.bnpparibas.com
easy.bnpparibas.co.uk
docfinder.bnpparibas-am.com
bnpparibas-am.at
report.one2fin.factor.bnpparibas
institutionnels.bnpparibas-am.fr
bnpparibascardif.co.uk
homologation.international-buyers.bnpparibas.nl
easy.bnpparibas.fr
core.one2fin.factor.bnpparibas
ofr.one2fin.factor.bnpparibas
international-buyers.bnpparibas.nl
collect-bnppf.bnpparibas.fr
correspondant-epargne.fr
www.correspondant-epargne.fr
international-buyers.bnpparibas.fr
www.fundquestadvisor.com
www.easy.bnpparibas.com
betet.bnpparibas.hu
easy.bnpparibas.lu
corporatecard.bnl.bnpparibas.com
staging.boite-outils-business.fr
easy.bnpparibas.com
www.easy.bnpparibas.lu
www.easy.bnpparibas.it
funds-api.staging.bnpparibas.com
www.easy.bnpparibas-am.fr
www.betet.bnpparibas.hu
collect.dcrm.bnpparibas.fr
www.i-assurial.com
preprod.finagora.nl
www.institutionnels-ip.bnpparibas.fr
www.easy.bnpparibas.co.uk
docfinder.staging.bnpparibas-ip.com
www.easy.bnpparibas.ch
staging.international-buyers.bnpparibas.nl
organization.one2fin.factor.bnpparibas
www.clients.fundquestadvisor.com
correspondant-epargne-fr.staging.bnpparibas-ip.com
staging.international-buyers.bnpparibas.fr
bnpplink-uat2.bnpparibas.co.in
www.bnpparibas-ip.at
fundquestadvisor.com
clients-fundquestadvisor-com.staging.bnpparibas-ip.com
homologation.easyconfo.fr
collect-pprod.dcrm.bnpparibas.fr
collect-emib.staging.bnpparibas.fr
www.easy.bnpparibas.fr
www.easyconfo.fr
docfinder.is.bnpparibas-ip.com
www.easy.bnpparibas-ip.fr
easy.bnpparibas.it
correspondant-assurance.fr
profile.one2fin.factor.bnpparibas

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for bnp02b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDfhn6YT2ecXbLnn+L01
Z4zrIRVG+o5CijZ4YuiqHSjY1B0TqUskD7gfOKmLgmV2oF9dxcDtpjYAgaLOlohQ
fUyS/bMn6huHLWzXhV5845diXf1ZZ01tjXZqAiK7mOzU3Q5uEtNAIugF3DET69xA
e46q3cGwjQBmyE3f+VTz7CWYv2+OSdq8cEUers76U6tvJTAd92DSOaUdzo+p9DbJ
qN8hqgS/c36wh9x44urEIuuE0PyQjy8kKcb6/Uy9Gn4JRXHkj2iYwFXXjNdsafpk
/t7GZLXD0u/OS9S8DDTKYzoXKBH/Q9kwzWC4Poa2ZX7D/O0e6cXXkidumQ1OZcyh
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2984298145924190711934737498534227527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp02b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23760357450535944667579752957430954872426323630930997651109143064183260157987383297985371995258894343873970739516751339537217854321359727257418591206794664188922149127376994266540912702738191436443977944166546864506142536017789298825914420150322611588996916762628804570269681680529671228219163709967469598594356028522476949232693224784946862347296124684191860246308022571300386511573541684676429303390786520141801587521721872624881025180801632518162293361951874310550690053064291437667956698200892022279828435758139682064171294395323082814754711120243816788800035489416162480811884434663821805029294067929627482693953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9d296a50be97dd162e6ffa34c3a0d8d991b0994
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2697 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp02b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.lfd2.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contract.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas-ip.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bop.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfd2.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.easyikea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-assurance-fr.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erelio.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds-api.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-bnl.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.easyconfo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.easyikea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lfd2.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-assurial.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutionnels-ip.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutionnels.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noasis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspondant-assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpplink-staging.bnpparibas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-ip.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyikea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-securities-query.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutionnels.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofr.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-bnppf.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-epargne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspondant-epargne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betet.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatecard.bnl.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds-api.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betet.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect.dcrm.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-assurial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.finagora.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutionnels-ip.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organization.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clients.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-epargne-fr.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpplink-uat2.bnpparibas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-ip.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-fundquestadvisor-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.easyconfo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-pprod.dcrm.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-emib.staging.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyconfo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.is.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas-ip.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016ad5ef32b80000040300483046022100aa60256c2c6c1a3625b37e2b2bafe84d0b3e29ceabce0dcb3140b40133ddbf37022100d778773d285f9b57fd8f9d4e41db8d72eb598e5e83317f52bf087879eed22aef0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ad5ef33880000040300473045022077f436ff57d5e409f7d844dc44e47fca89fa7c1541ed403c351e372396cf974c022100d1b7d4585647840c52b91f5227bd474924954fee44bed67cd1b4c7c303def2f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0008edb9141fea187e4a0037ab533d2734ee1b7998257b6cba65f38b173fde20ac61e818e29fd8d79049c989fa0a8527f005ac7ba9dfbdcca0237011e68243ec302e6751c01f68976bb9a96d58c45684c7ce3f9c4d1b914428cc6070bf85fe449563fa3e06c79bfe4cb6f095cf1907bbe6940afeac54f4a8a2f5cd674b7d859c6bbaccaffe25a0d823fd088507244a118bd7d130cdd53af14d6308567c1b592d572967b0b3cc920e1279651d03815fdb37d1df916b76cb9677fe973dc367e971d2280e471107cbb57cb6eeedaef5eb8dcd5c09844053807aff43e553e01b0dd3bcbcd22826cf167e98bfff4a1749b5fa68e829c7f88e45d0ad6c6162ff4f42d256