bnp08s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:84:77:2e:29:95:f6:eb:2a:75:3e:7d:a6:55:a6:75 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:84:77:2e:29:95:f6:eb:2a:75:3e:7d:a6:55:a6:75
Serial Number (int): 19296992390423911062556094435771655797
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2b:ff:b1:ef:03:2a:03:9a:e1:22:de:e4:ea:9c:1a:0c:07:a9:a3:13
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): f4:ff:0d:e5:fe:b1:40:da:23:15:21:2d:56:d2:de:7b:e3:34:e6:6d
Fingerprint (sha256): 22:21:ce:12:5d:5d:1b:7b:46:0f:39:b6:af:35:7e:8b:e6:58:29:45:a0:9f:ab:f6:de:11:99:70:7e:55:19:b7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp08s.bnpparibas.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp08s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp08s.bnpparibas.com
agora-prd.bnpparibas.com
alis.v16.dev.staging.bnpparibas
antilles-guyane.bnpparibas
assinaturadigital.bnpparibas.com.br
b2ctest.ecredit.it
bicibourse.com
bnppam-private.staging.bnpparibas.com
bnpparibas.nc
bnpparibas.re
boleto.bnpparibas.com.br
car.bnpparibas-am.com
central.antilles-guyane.bnpparibas
compliance.preprod.staging.api.bnpparibas
compliance.staging.api.bnpparibas
creditclick.fr
cts-lra.bnpparibas.com
demo-directeo.epargne-retraite-entreprises.bnpparibas.com
demo-personeo.epargne-retraite-entreprises.bnpparibas.com
dev.bwelcome.hr.bnpparibas
directeo.epargne-retraite-entreprises.bnpparibas.com
documentexchangeconnect-internet.sso-stg.bnpparibas.com
documentexchangeconnect.bnpparibas.com
ebroker.sygmabnpparibas-pf.com
ereceipt2centric-cn.asia.bnpparibas.com
ereceipt2centric-in.asia.bnpparibas.com
ereceipt2centric.asia.bnpparibas.com
ereporting.asia.bnpparibas.com
fmop-apac.bnpparibas.com
fxpb-dr.bnpparibas.com
fxpb.staging.bnpparibas.com
ges-pb.bnpparibas.com
ges.bnpparibas.com
hr.group.api.staging.bnpparibas
irb-central.bnpparibas.com
jss.bnpparibas
Link2Portal.bnpparibas.com
media.youmanist.it
mediana.ifitalia.it
mobile.personeo.epargne-retraite-entreprises.bnpparibas.com
monitor.primebroker.com
ofpf-assistance.fr
oms-uat.primebroker.com
personeo.epargne-retraite-entreprises.bnpparibas.com
plateforme-obseques.fr
portail-aep.fr
portaldigital.bnpparibas.com.br
private.staging.bnpparibas-am.com
professionalbanking-wealthmanagement-staging.bnpparibas.com
rapport-sustainability.bnpparibas-am.com
recebiveis-stg.bnpparibas.com.br
recebiveis.bnpparibas.com
sgrboletoissuance-stg.bnpparibas.com.br
ssotests-directeo.epargne-retraite-entreprises.bnpparibas.com
staging.analyse.realestate.bnpparibas.co.uk
staging.bwelcome.hr.bnpparibas
staging.stimare.bnpparibas.com
staging.tecnici.stimare.bnpparibas.com
staging.val.stimare.bnpparibas.com
staging.workspace.realestate.bnpparibas.com
stgges.bnpparibas.com
sustainability-report.bnpparibas-am.com
sygmabnpparibas-pf.com
testchangenotes.bnpparibas.co.uk
testhelpdesk.bnpparibas.co.uk
testsupplier.bnpparibas.co.uk
thailandsocialsecurity.bnpparibas.com
thailandsocialsecurity.staging.bnpparibas.com
us-issuing.paying.rec.bnpparibas.com
usissuingandpaying.bnpparibas.com
vra.bnpparibas.com
wealthmanagement-staging.bnpparibas
wealthmanagement-staging.bnpparibas.com
www.antilles-guyane.bnpparibas
www.assinaturadigital.bnpparibas.com.br
www.bicibourse.com
www.bnpparibas.nc
www.bnpparibas.re
www.central.antilles-guyane.bnpparibas
www.creditclick.fr
www.cts-lra.bnpparibas.com
www.dev.bwelcome.hr.bnpparibas
www.hr.group.api.staging.bnpparibas
www.irb-central.bnpparibas.com
www.mediana.ifitalia.it
www.ofpf-assistance.fr
www.plateforme-obseques.fr
www.portail-aep.fr
www.portaldigital.bnpparibas.com.br
www.rapport-sustainability.bnpparibas-am.com
www.staging.bwelcome.hr.bnpparibas
www.sustainability-report.bnpparibas-am.com
www.testchangenotes.bnpparibas.co.uk
www.testhelpdesk.bnpparibas.co.uk
www.testsupplier.bnpparibas.co.uk

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp08s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEPyJwAI/Koia0J3mO+mfMTGVYqyCr
/V5LJ4xo9yZT6TRWQbp6ExB5II5DSL0VznM+KfMdWrl3DspsEMMFR7JdnQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19296992390423911062556094435771655797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp08s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
 . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
					2270008fcaa226b427798efa67cc4c6558ab20abfd5e4b278c68f72653e9345641ba7a131079208e4348bd15ce733e29f31d5ab9770eca6c10c30547b25d9d

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2bffb1ef032a039ae122dee4ea9c1a0c07a9a313
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp08s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora-prd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.v16.dev.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assinaturadigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2ctest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppam-private.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boleto.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.preprod.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-lra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bwelcome.hr.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentexchangeconnect-internet.sso-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentexchangeconnect.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric-cn.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric-in.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereporting.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmop-apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb-dr.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.group.api.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Link2Portal.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofpf-assistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms-uat.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plateforme-obseques.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail-aep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalbanking-wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapport-sustainability.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgrboletoissuance-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssotests-directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.analyse.realestate.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bwelcome.hr.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.tecnici.stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.val.stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workspace.realestate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainability-report.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testchangenotes.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testhelpdesk.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsupplier.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuing.paying.rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usissuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assinaturadigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cts-lra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.bwelcome.hr.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.group.api.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofpf-assistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plateforme-obseques.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portail-aep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapport-sustainability.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.bwelcome.hr.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sustainability-report.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testchangenotes.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testhelpdesk.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testsupplier.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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