derivate.bnpparibas.com

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 5d:72:c6:32:af:91:0a:3e:2d:a8:79:4c:67:68:23:04 was issued on by Entrust, Inc..

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5d:72:c6:32:af:91:0a:3e:2d:a8:79:4c:67:68:23:04
Serial Number (int): 124214145382715014606899836841022202628
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b0:f4:35:9a:81:e4:3c:bc:8d:03:67:9c:76:2a:16:4b:1d:36:1d:9f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ce:bf:72:46:fc:3f:7e:3b:fa:19:be:8f:fb:83:fc:4c:8e:99:56:74
Fingerprint (sha256): 1f:85:c7:61:a5:39:3b:e1:f3:5d:2d:e1:34:9f:15:5e:9c:6f:7a:a1:39:40:67:6d:2e:fa:d6:51:de:fa:d0:3c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate derivate.bnpparibas.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for derivate.bnpparibas.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

derivate.bnpparibas.com
etn.bnpparibas.com
www.etn.bnpparibas.com
etc.bnpparibas.com
www.etc.bnpparibas.com
derivate.bnpparibas.at
www.derivate.bnpparibas.at
zertifikatederwoche.bnpparibas.de
www.zertifikatederwoche.bnpparibas.de
derivate.bnpparibas.mobi
www.derivate.bnpparibas.mobi
bnp.de
www.bnp.de
etp.bnpparibas.com
www.etp.bnpparibas.com
www.derivate.bnpparibas.com
www.cms.derivate.bnpparibas.com
cms.derivate.bnpparibas.com
www.archiv.derivate.bnpparibas.com
archiv.derivate.bnpparibas.com
www.beta.derivate.bnpparibas.com
beta.derivate.bnpparibas.com
www.m.derivate.bnpparibas.com
m.derivate.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for derivate.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAppiQhjU36TQNutlNT/pg
HSsk7Su1JT4LVXejabnDnFCPyZhorTLkLDkZjC1LaJHopaA04+L3FdCBiRW6fz7g
Icj6zo9MyirpkNqnQc7AmFvAe0X8EgJwswUQJEQVahabphPTDfcwisjHBoQpVeH+
vthmSX+s6XKytDDMivkFgGdTQapVqXqY+XEJObt1rmkTbsVkZQjS+AAeyhBs5IPa
fG7eJczwNGbindJGuJZSCVC1MaMpLMmaUAXMzHMqfjY4cKPMxZwInEXZrkQMdBBT
3Y7qeJ3GH5Qh4reuuO8bPe95Rb//QEI3Gq/mW2R5DJk9PQC/9JGscTWZuhj7xk+t
HvktAcupburlZyjlN4SyeQnuoY+hVsvCzNjxN+ujTe+vfOl/nVSvalrnwxIPV5Fu
6h38yuZutpgPJHUyk7lVr3Y2iAvHRmrCL3BMlGhDnbv/KFlfr9mkaFSsW2j98s0D
msBmWEU4k25KwPxNIeNA2bnAvrHTGM9sk/+y0PHFPwXZptfncWgKF2VWOvpsyldV
RVtmLzoN7+XjmrpHrgFKSRAwHNOa9MjRrZWGFNAsovobRfWblhQFGLLQAnyiFwZu
UMYLdBzbltIFXtPzS/VvuXUvFowpRfBGYzYbgWT1zLL2asE1dktnyu+Y7cxIg9iO
BgiiI8E3A+4g0RHeQwb4+WECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 124214145382715014606899836841022202628
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-05 12:50:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 12:50:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'derivate.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 679652200653159838629427475056796569027243236636560688810190622593265250672444476337320933652010670171610443333705404262787174860401242835669108963241520525238926809370041596688025857200818698052840539919875672931596720225415631314292307557619920456928261140252996329434030183137412065282127756633974596655008286324700449077652342074227038104149984553741919743549299889103430138136872238706711346517389931533729480971525429575086098295860949959867140428746844173773025944174009064616987606121764714793819221945524047830625394535144088076461564455706068363302398781814370320635280520624384862485372564155983419185380782668311858744891266608472092667318357179644468788012897127706933702323584027708091528241424148737857364399651863762831615947451391600335952833251849447142618422281133094539551398945487456803372528916761636451983112444730378175085695913062424777409583405382663637016000149691598867483205029958765825444117555130828573567160465160938757133745705179702984049073728407421133985477439575798222779468761551096592375789261692576172401203725361154777925262236188038087938681959302069829656094341387897857568363718828773225756365436989623956989792208363180490793494626314243612046571419079601655598136882613259194004821047649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0f4359a81e43cbc8d03679c762a164b1d361d9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (644 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etn.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etn.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etc.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etc.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derivate.bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derivate.bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zertifikatederwoche.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zertifikatederwoche.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'derivate.bnpparibas.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derivate.bnpparibas.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.etp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cms.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.archiv.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archiv.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.derivate.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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