bnp11s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:3c:ee:07:2c:94:fd:d2:89:70:bf:ea:a0:17:b8:e5 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3c:ee:07:2c:94:fd:d2:89:70:bf:ea:a0:17:b8:e5
Serial Number (int): 10950189559671683434235745098618353893
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 06:35:60:9c:44:d3:ad:3b:ac:41:26:a3:1e:4e:39:17:df:ce:b3:1a
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 1a:68:26:8d:e4:1b:3b:33:75:1c:a9:cb:97:90:ad:bc:9b:cd:1d:8a
Fingerprint (sha256): 1b:b4:c3:8f:40:ec:01:9d:42:14:e7:33:33:11:ad:80:4b:59:6e:c3:41:7c:17:0e:c5:59:71:53:ed:a5:6b:ba

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp11s.bnpparibas.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp11s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp11s.bnpparibas.com
acquista-online-coll.bnl.it
acquista-online.bnl.it
agcbe.isf.bnpparibas-pf.com
agcde.isf.bnpparibas-pf.com
agces.isf.bnpparibas-pf.com
agcit.isf.bnpparibas-pf.com
agcmx.isf.bnpparibas-pf.com
agcnl.isf.bnpparibas-pf.com
agcpl.isf.bnpparibas-pf.com
agcpt.isf.bnpparibas-pf.com
arvalreferrals.arval.com
arvalreferrals.pre.arval.com
arvalreferrals.uat.arval.com
authservices.smsps-coll.bnl.it
autoselect.arval.be
autoselect.arval.fi
autoselect.arval.pl
autoselect.arval.pt
be.isf.bnpparibas-pf.com
cct-wm-twn.bnpparibas.asia
cct-wm-twn.staging.bnpparibas.asia
cct-wm.bnpparibas.asia
cct-wm.staging.bnpparibas.asia
cms.bnpparibas.asia
cofinoga.fr
compliance.group.api.bnpparibas
cts-lra-rec.bnpparibas.com
de.isf.bnpparibas-pf.com
dotaznik.cardif.sk
es.isf.bnpparibas-pf.com
etranplus.bnpparibas.com
etsservices-pp.bnpparibas.com
hfsadmin-kpt.bnpparibas.com
hm.agcbe.isf.staging.bnpparibas-pf.com
hm.agcde.isf.staging.bnpparibas-pf.com
hm.agces.isf.staging.bnpparibas-pf.com
hm.agcit.isf.staging.bnpparibas-pf.com
hm.agcmx.isf.staging.bnpparibas-pf.com
hm.agcnl.isf.staging.bnpparibas-pf.com
hm.agcpl.isf.staging.bnpparibas-pf.com
hm.agcpt.isf.staging.bnpparibas-pf.com
hm.be.isf.staging.bnpparibas-pf.com
hm.de.isf.staging.bnpparibas-pf.com
hm.es.isf.staging.bnpparibas-pf.com
hm.it.isf.staging.bnpparibas-pf.com
hm.mx.isf.staging.bnpparibas-pf.com
hm.nl.isf.staging.bnpparibas-pf.com
hm.pl.isf.staging.bnpparibas-pf.com
hm.pt.isf.staging.bnpparibas-pf.com
hm.uk.isf.staging.bnpparibas-pf.com
it.isf.bnpparibas-pf.com
mindthegap.cardif.com.tw
moncontrat.renovpret.fr
mx.isf.bnpparibas-pf.com
my.bicici.com
mybicis.sn
myimpact.wealthmanagement-staging.bnpparibas
myimpact.wealthmanagement.bnpparibas
nl.isf.bnpparibas-pf.com
noa-ctc.bnpparibas.com
noa-nlk.bnpparibas.com
noa-pls.bnpparibas.com
noa.bnpparibas.com
obbligazioni.bnpparibas.com
oneproctool-supplier.bnpparibas.com
partnermutui-coll.bnl.it
pl.isf.bnpparibas-pf.com
portail.preprod.assurance-epargne-pension.fr
prevoyance-individuelle.mabanque.bnpparibas
pt.isf.bnpparibas-pf.com
recette.portail-aep.fr
securesharing.bnpparibas.com
securesharing.staging.bnpparibas.com
securities-crisisweb.bnpparibas.com
securitiesrec-crisisweb.bnpparibas.com
selfticketing.smsps-coll.bnl.it
staging.financit.it
staging.my.bicici.com
staging.my.bicis.sn
staging.portail-aep.fr
uk.isf.bnpparibas-pf.com
voc-staging.bnpparibas.asia
voc-staging.bnpparibas.ch
waa2api.artigiancassa.it
webdoc-dz.bnpparibas.com
webdoc-dz.bnpparibas.net
wow.bnpparibas.com
www.cofinoga.fr
www.compliance.group.api.bnpparibas
www.cts-lra-rec.bnpparibas.com
www.my.bicici.com
www.mybicis.sn
www.staging.my.bicici.com
www.staging.my.bicis.sn
www.webdoc-dz.bnpparibas.com
www.webdoc-dz.bnpparibas.net

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
bnp02tpc.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
apis.bcef.caledonie.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
bnp07s.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
entreprises.ere.bnpparibas
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com

Certificate

The complete raw certificate details for bnp11s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE9rwqClOx/mrPdzywmyDoDpeprdhm
Cm/YzHn9Vl9dKJncjdawwSP51jo5XaDWCZuR52yyW6ceC9KycngzYVYCEg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10950189559671683434235745098618353893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp11s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004f6bc2a0a53b1fe6acf773cb09b20e80e97a9add8660a6fd8cc79fd565f5d2899dc8dd6b0c123f9d63a395da0d6099b91e76cb25ba71e0bd2b272783361560212
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0635609c44d3ad3bac4126a31e4e3917dfceb31a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2837 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp11s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquista-online-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquista-online.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcbe.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcde.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agces.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcit.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcmx.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcnl.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcpl.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcpt.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvalreferrals.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvalreferrals.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvalreferrals.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authservices.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoselect.arval.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoselect.arval.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoselect.arval.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoselect.arval.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm-twn.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm-twn.staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm.staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.group.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-lra-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotaznik.cardif.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsservices-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfsadmin-kpt.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcbe.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcde.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agces.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcit.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcmx.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcnl.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcpl.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcpt.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.be.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.de.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.es.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.it.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.mx.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.nl.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.pl.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.pt.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.uk.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mindthegap.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.bicici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybicis.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myimpact.wealthmanagement-staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myimpact.wealthmanagement.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa-ctc.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa-nlk.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa-pls.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obbligazioni.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneproctool-supplier.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnermutui-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.preprod.assurance-epargne-pension.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prevoyance-individuelle.mabanque.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.portail-aep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesharing.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesharing.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securities-crisisweb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesrec-crisisweb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfticketing.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.my.bicici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.my.bicis.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.portail-aep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc-staging.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waa2api.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wow.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance.group.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cts-lra-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my.bicici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mybicis.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.my.bicici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.my.bicis.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.bnpparibas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d7b00e6e131d032ef4253c594f85a4bb10474b00ba5a63dd10578e38f70e8e0a2c694d6d07e65636a5ba0bb297119ab2d5b3ea363b4cddca4d1e735d3f2b25e5b502dbee849ce232738b698cd67a2475d7dafe8bb2e3795fa887aee9bb7e3ae4eafdd46569c344495c95cbb0ab15c38132879bd1583c8fcbb63e16d3dadd7ce7ea519d86a67f6ea2a2157bcd31d81d47ace4b6a8fc77349ca7bcf7e5783e1b13c968ab7e26a293f30e4bb2adb83e874d5ee36a04d358f445c359d61fad0267547970f504938ec366a5cc3041f3d51052c1b3af1adddfcf421638aa0d861afdca3b0ada4297e299e8e172f4b916a3b9c8b63064977458c35c23c5d8493e53a34