origin.group.bnpparibas

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2d:0a:f9:75:ce:93:85:05:00:00:00:00:51:00:fc:52 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:0a:f9:75:ce:93:85:05:00:00:00:00:51:00:fc:52
Serial Number (int): 59872242432525138277476060664827018322
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 9f:69:d3:d4:ba:e5:7b:40:5a:e2:ce:7d:08:da:f1:29:88:cf:ae:b0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 75:8b:5f:d8:aa:2a:91:e7:f6:4e:c4:c6:e5:44:f1:47:20:bc:d5:6e
Fingerprint (sha256): 27:81:2b:e0:51:3c:bb:36:eb:7e:76:06:d7:30:f9:05:22:4f:3c:ec:bb:f5:2d:89:50:98:85:e7:53:ca:ab:5f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate origin.group.bnpparibas

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin.group.bnpparibas

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin.group.bnpparibas
www.origin.group.bnpparibas

Other certificates including the domain name group.bnpparibas

(limited to 100 certificates)
group.bnpparibas.com
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas.com
cdn-preprod-origin.group.bnpparibas
origin.group.bnpparibas
origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
preprod-origin.group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
sso-origin.group.bnpparibas
group.bnpparibas
cdn-preprod-origin.group.bnpparibas
matchmycv.group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas
preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
www.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
www.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
mailhog.contrib-preprod-origin.group.bnpparibas
group.bnpparibas
sso-contrib-preprod-origin.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas

Certificate

The complete raw certificate details for origin.group.bnpparibas in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28WSSDX90Jee11Qwr8ju
nr51gKnkCIDhvlD1kq10kg4XF9HoZbIsjwhhEfqBCNc5Sg5/tCwJdFFXZjshcDHc
VeaWYzVDsBJ8h1wGN8MHzG31OPf8qRfL7wYrMGFmMH6G8KIVl4W/oi5jEC431d6M
za4LGdMzKRZEfuvqBYJIaF89C9XgAm7J6IIZHkf1Gm/QXrf81hMLfGVxun7+zxbs
vY43T3063y7CbzaYpUpi0kMWOt7VwNIhsOtANxI7MpWfXpcfN5GYUqSvhJKzqS8q
pt8Sj3xPh1YndgcnWmJQ0R1ZTX0Jn8DGaXzvBnQbev8+N+gUjQR8jq0XlbsF6tDI
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 59872242432525138277476060664827018322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 14:52:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-18 15:22:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin.group.bnpparibas'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27743614883103601285359087066277937171168072322389996172255366338615324138054761042888164844660462325844078224461194245048515983022492240256473831303564396122128325234547081727990644048642854038706976132527178249597087147445384994223149536342793067938376473868982933237770338917114814315972184081332786412584125536890395169460954484243316515808298011874826736876693176056807985545846336388646187696392817100294766605881059661745003579727518442181536192738733918987593749388599954915158210934455694840561832898288697468988077011957334043563241873358967418434030011026917197848490055322853014334754607357745187741812969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.group.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.origin.group.bnpparibas'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f69d3d4bae57b405ae2ce7d08daf12988cfaeb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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