bnp08b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:bb:a0:ec:14:74:cc:e0:3d:d8:49:d7:5d:57:6a:01 was issued on by DigiCert Inc.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:bb:a0:ec:14:74:cc:e0:3d:d8:49:d7:5d:57:6a:01
Serial Number (int): 19583415343248675711631774592007629313
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 13:d3:55:11:cb:07:20:9a:aa:04:7c:5c:bd:b3:14:33:d8:2c:69:0d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): a3:46:ef:31:b0:a9:bd:b2:73:c3:2b:61:64:d1:84:f7:b7:7c:5c:3b
Fingerprint (sha256): 2a:57:f3:7d:1b:67:06:a1:78:88:fa:be:6b:f1:36:22:a2:e8:65:37:ad:bf:9b:53:c4:ae:13:5f:b8:23:01:07

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp08b.bnpparibas.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp08b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp08b.bnpparibas.com
bcef-dgi-collection.bnpparibas.com
bcef-dgi-collection.staging.bnpparibas
beta.jss.bnpparibas
bicibourse.stagingirb.bnpparibas
bicici.stagingirb.bnpparibas
bicis.stagingirb.bnpparibas
bnpparibas-immobilier.com
bnpparibas-immobilier.fr
bnpparibasimmo.fr
bnpparibasimmobilier.com
bnpparibasimmobilier.fr
card-reporting.bnpparibas
card-reporting.staging.bnpparibas
central.stagingirb.bnpparibas
central.stagingzag.bnpparibas
cwextranet-sec-simple.bnpparibas-am.com
cwextranet-sec-simple.staging.bnpparibas-am.com
cwextranet-sec-strong.bnpparibas.com
cwextranet-sec-strong.staging.bnpparibas-am.com
domesticatueconomia.es
elobservatoriocetelem.es
ere-sec-portals-extranet.staging.bnpparibas-am.com
espaces-immobiliers.com
espaces-immobiliers.fr
espacesimmobiliers.com
fundquest.bnpparibas-am.com
immobilier.bnpparibas.com
immobilier.bnpparibas.fr
keys.bgl.lu
logement.bnpparibas.com
logement.bnpparibas.fr
meunier-habitat.fr
meunier-promotion.fr
mywealthpart.bnpparibas.lu
nlservices.staging.bnpparibascardif.com
nouvelle-caledonie.stagingzag.bnpparibas
partners-sec-extranet.bnpparibas-am.com
partners-sec-extranet.staging.bnpparibas-am.com
partners-sec-internet.bnpparibas-am.com
partners-sec-internet.staging.bnpparibas-am.com
property-management.bnpparibas.fr
propertymanagement.bnpparibas.fr
re.bnpparibas.de
reim.bnpparibas.fr
repm.bnpparibas.fr
reunion.stagingzag.bnpparibas
stagingzag.bnpparibas
webbankingpart.bgl.lu
www.bicibourse.stagingirb.bnpparibas
www.bicici.stagingirb.bnpparibas
www.bicis.stagingirb.bnpparibas
www.bnpparibas-immobilier.com
www.bnpparibas-immobilier.fr
www.bnpparibasimmo.fr
www.bnpparibasimmobilier.com
www.bnpparibasimmobilier.fr
www.central.stagingirb.bnpparibas
www.central.stagingzag.bnpparibas
www.domesticatueconomia.es
www.elobservatoriocetelem.es
www.espaces-immobiliers.com
www.espaces-immobiliers.fr
www.espacesimmobiliers.com
www.fundquest.bnpparibas-am.com
www.immobilier.bnpparibas.com
www.immobilier.bnpparibas.fr
www.logement.bnpparibas.com
www.logement.bnpparibas.fr
www.meunier-habitat.fr
www.meunier-promotion.fr
www.nouvelle-caledonie.stagingzag.bnpparibas
www.property-management.bnpparibas.fr
www.propertymanagement.bnpparibas.fr
www.re.bnpparibas.de
www.reim.bnpparibas.fr
www.repm.bnpparibas.fr
www.reunion.stagingzag.bnpparibas
www.stagingzag.bnpparibas

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com

Certificate

The complete raw certificate details for bnp08b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEepx6aQTK0kq7TfdNeHDzjV6yocVm
ox8pxvMui93Y2Lb/lJPeDP3YvKpG/GNBCQRKuF23vP3ZLe0LlXQ8hAolbw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19583415343248675711631774592007629313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp08b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047a9c7a6904cad24abb4df74d7870f38d5eb2a1c566a31f29c6f32e8bddd8d8b6ff9493de0cfdd8bcaa46fc634109044ab85db7bcfdd92ded0b95743c840a256f
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13d35511cb07209aaa047c5cbdb31433d82c690d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2414 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp08b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcef-dgi-collection.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcef-dgi-collection.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jss.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicibourse.stagingirb.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicici.stagingirb.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicis.stagingirb.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-immobilier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-immobilier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibasimmo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibasimmobilier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibasimmobilier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card-reporting.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'card-reporting.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.stagingirb.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.stagingzag.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-sec-simple.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-sec-simple.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-sec-strong.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-sec-strong.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domesticatueconomia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elobservatoriocetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ere-sec-portals-extranet.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaces-immobiliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaces-immobiliers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacesimmobiliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquest.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immobilier.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keys.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logement.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logement.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meunier-habitat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meunier-promotion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealthpart.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlservices.staging.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nouvelle-caledonie.stagingzag.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-sec-extranet.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-sec-extranet.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-sec-internet.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-sec-internet.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property-management.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertymanagement.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 're.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reim.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repm.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.stagingzag.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagingzag.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webbankingpart.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicibourse.stagingirb.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicici.stagingirb.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicis.stagingirb.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-immobilier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-immobilier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasimmo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasimmobilier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasimmobilier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.central.stagingirb.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.central.stagingzag.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domesticatueconomia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elobservatoriocetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espaces-immobiliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espaces-immobiliers.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espacesimmobiliers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundquest.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immobilier.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immobilier.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logement.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logement.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meunier-habitat.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meunier-promotion.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nouvelle-caledonie.stagingzag.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.property-management.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.propertymanagement.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.re.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reim.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repm.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reunion.stagingzag.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stagingzag.bnpparibas'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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