bnp05s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:47:ca:4e:11:19:39:47:ef:4f:ad:53:8a:c9:13:6d was issued on by DigiCert Inc.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:47:ca:4e:11:19:39:47:ef:4f:ad:53:8a:c9:13:6d
Serial Number (int): 1701984304569241198879218714234393453
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f1:ac:06:86:ae:0e:c1:2b:bf:f6:d4:38:de:9d:09:7a:6f:67:fe:27
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a2:a5:94:cf:b8:1c:7c:70:1f:02:ae:ac:09:ed:a6:cd:dd:da:87:21
Fingerprint (sha256): 27:2c:1a:51:7c:b3:e5:17:72:26:ba:5e:19:fe:e1:63:62:9e:9a:8a:86:eb:8e:5e:30:9c:d4:a8:26:82:94:80

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bnp05s.bnpparibas.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp05s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp05s.bnpparibas.com
life.cardif.co.jp
corporate.myclub.bnpparibas-am.com
bankingcollnew.bnl.it
www.parvest.fr
www.cardif.co.jp
bgl.retail-club.bnpparibas
uat-my.cardif.com.tw
www.retail.myclub.bnpparibas-am.com
myclub.bnpparibas
www.bizcover.be
bizcover.be
bizcover.qabnpparibasfortis.be
my.cardif.co.jp
www.private.myclub.bnpparibas
private.myclub.bnpparibas
www.bnl.retail-club.bnpparibas
parvest.be
www.corporate.myclub.bnpparibas
parvest.lu
www.qabnpparibasfortis.com
www.corporate.myclub.bnpparibas-am.com
parvest-club.bnpparibas
www.bgl.retail-club.bnpparibas
retail.myclub.staging.bnpparibas
bway20coll.businessway.bnl.it
parvest.de
businessintelligence.bnpparibas.com
edm-tw-pre.cardif.com
cms.cardif.co.jp
nonlife.cardif.co.jp
pre-bigstar.cardif.com.tw
life-tw-pre.cardif.com
retail.myclub.staging.bnpparibas-am.com
corporate.myclub.staging.bnpparibas
danshin.cardif.co.jp
www.corporate.myclub.staging.bnpparibas-am.com
retail.myclub.bnpparibas
www.parvest.lu
blogs.qabnpparibasfortis.com
myclub.staging.bnpparibas
dixit.bnpparibasfortis.be
placements-financiers.bnpparibas-am.fr
myclub.bnpparibas-am.com
parvest.fr
parvest.it
bnpparibasfortis.com
private.myclub.bnpparibas-am.com
www.sdm.bnpparibas-am.fr
www.parvest.it
www.parvest.be
uat-mobile.cardif.com.tw
parvest.com
blogs.bnpparibasfortis.com
www.myclub.bnpparibas
www.parvest-club.bnpparibas
www.hellobank.be
retail.myclub.bnpparibas-am.com
codex.bnpparibas.com
www.bnpparibasfortis.com
dna.bnpparibas.com
bizcover.bnpparibasfortis.be
private.myclub.staging.bnpparibas-am.com
dixit.qabnpparibasfortis.be
www.qahellobank.be
qahellobank.be
cardif.co.jp
wwwcollnew.bnl.it
myclub.staging.bnpparibas-am.com
prioritybankingclub.bnpparibas
corporate.myclub.bnpparibas
myhrportal.staging.bnpparibas-am.com
sdm.bnpparibas-am.fr
www.myclub.bnpparibas-am.com
dnarec.bnpparibas.com
www.parvest.com
nonlife-tw-pre.cardif.com
www.retail.myclub.bnpparibas
qabnpparibasfortis.com
www.parvest.de
www.placements-financiers.bnpparibas-am.fr
myhrportal.bnpparibas-am.com
www.dixit.qabnpparibasfortis.be
www.prioritybankingclub.bnpparibas
cck.creditoclick.com.mx
bnl.retail-club.bnpparibas
private.myclub.staging.bnpparibas
quick.cardif.co.jp
me.cardif.co.jp
hellobank.be
www.private.myclub.bnpparibas-am.com
corporate.myclub.staging.bnpparibas-am.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp05s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAuQ+7mDVG6cmKE+maqU
A5eJGrwV7pNecc6H1h6mmnoq0T59+L/o9oKpeKmJcy9eAuLnyFgKS051ZbRpv+TS
PlgQy9y+MTXz5bMDUdcp+kEv+JrwpW9RAJX9pGY6FjpYL+hLuh01iH9/y9kwnTfb
kjMoReWW93ofDfevBb965Q8D0nEuMICeWSgTuUnEGPf8d7C/LIwAhC9TOStG2KOr
7SktT2LdQuo1Cs6IunkyLre59Ei2yYrps0KSRZ1Qv2Cs3PsjXsTNljD8cPu/L5pH
cwv+1ptGvhUF8zq/T/15dY7kpXyS8/TzhMq5eB4bHgRDwxA6wTJbLDy81JKkF/gO
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1701984304569241198879218714234393453
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp05s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22728598469219468340778131127219355144682047161819246984584187820182009415164795356940455531235988372231028773383308744979813027183580815876150223220513500694103448032298928609138232082411512353301372840751833005060242882894788743597298577474329409261692750819563155283517758391858895653404030882358737405568638093323047909881051176968204378821222557856310729193093097918151435596268986575697732062678145790406344691382454627397936389252414931676683385082175594452993321785092628881202916318540818997225645349550679586658475313697897084589149773342749886575017186149406665693624995213114723889674720473102670819233403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1ac0686ae0ec12bbff6d438de9d097a6f67fe27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2396 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp05s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingcollnew.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgl.retail-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-my.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retail.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bizcover.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcover.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcover.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnl.retail-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporate.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporate.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgl.retail-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.myclub.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bway20coll.businessway.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessintelligence.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edm-tw-pre.cardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonlife.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-bigstar.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'life-tw-pre.cardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.myclub.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danshin.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporate.myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclub.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixit.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placements-financiers.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sdm.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-mobile.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogs.bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellobank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retail.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dna.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizcover.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dixit.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qahellobank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qahellobank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcollnew.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prioritybankingclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhrportal.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdm.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dnarec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonlife-tw-pre.cardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.retail.myclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parvest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.placements-financiers.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhrportal.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dixit.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prioritybankingclub.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cck.creditoclick.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnl.retail-club.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.myclub.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quick.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellobank.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private.myclub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.myclub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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