c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:47:e8:bb:81:86:fe:b3:7d:fa:0a:23:66:fa:f4:96 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:47:e8:bb:81:86:fe:b3:7d:fa:0a:23:66:fa:f4:96
Serial Number (int): 12336425413801418091642705941802710166
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8f:34:d4:8e:00:fe:75:c8:e9:f0:6b:13:52:8d:62:e6:0e:b3:d3:6b
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e4:b4:2b:05:b4:54:75:f6:c8:d6:08:0a:74:ba:83:c7:10:21:9a:aa
Fingerprint (sha256): 2d:01:8a:b3:da:b3:6d:1d:2f:21:f3:1d:b8:81:9e:53:94:71:36:6c:87:ad:05:ce:be:70:00:1f:10:37:45:b0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
1-cortexplus-pp.bnpparibas.com
1-cortexplus.bnpparibas.com
1-globalmarkets-pp.bnpparibas.com
1-globalmarkets.bnpparibas.com
1-markets360-pp.bnpparibas.com
1-markets360.bnpparibas.com
1-origin-cortexplus.bnpparibas.com
2-cortexplus-pp.bnpparibas.com
2-cortexplus.bnpparibas.com
2-globalmarkets-pp.bnpparibas.com
2-globalmarkets.bnpparibas.com
2-markets360-pp.bnpparibas.com
2-markets360.bnpparibas.com
2-origin-cortexplus.bnpparibas.com
aeat.cash-cib.bnpparibas.es
affaires-publiques.bnpparibas
affaires-publiques.bnpparibas.com
alis.bnpparibas.com
apac.bnpparibas
apac.bnpparibas.com
bnpparibas.at
bnpparibas.be
bnpparibas.bg
bnpparibas.ca
bnpparibas.cn
bnpparibas.co.kr
bnpparibas.co.th
bnpparibas.com.au
bnpparibas.com.cn
bnpparibas.com.co
bnpparibas.com.my
bnpparibas.com.sg
bnpparibas.de
bnpparibas.dk
bnpparibas.es
bnpparibas.org.cn
cfd-support.bbva.bnpparibas.com
chile.bnpparibas.com
china.bnpparibas.com
china.bnpparibas.com.cn
compliance-notifications.bnpparibas.com
connexis-guarantee.bnpparibas.com
connexistrade-cust-temp.bnpparibas.com
cortexfx.bnpparibas.com
cxt-stg.bnpparibas.com
dam.bnpparibas.com
democfd-support.bbva.bnpparibas.com
economieetentreprise.bnpparibas
economieetentreprises.bnpparibas
eqdpo.bnpparibas.com
flexsimmo.imex.bnpparibas.fr
indices-globalmarkets.bnpparibas.com
invest.bnpparibas.com
neobonds.bnpparibas
neobonds.staging.bnpparibas
precfd-support.bbva.bnpparibas.com
quotetransparency-pp.bnpparibas.com
quotetransparency.bnpparibas.com
surveys.bnpparibas.com
tokenauth-cib-stg.bnpparibas.com
try-cfd.bnpparibas.com
vietnam.bnpparibas.com
www.aeat.cash-cib.bnpparibas.es
www.affaires-publiques.bnpparibas.com
www.apac.bnpparibas
www.apac.bnpparibas.com
www.bnpparibas.at
www.bnpparibas.be
www.bnpparibas.bg
www.bnpparibas.ca
www.bnpparibas.cn
www.bnpparibas.co.kr
www.bnpparibas.co.th
www.bnpparibas.com.au
www.bnpparibas.com.cn
www.bnpparibas.com.co
www.bnpparibas.com.my
www.bnpparibas.com.sg
www.bnpparibas.de
www.bnpparibas.dk
www.bnpparibas.es
www.bnpparibas.org.cn
www.chile.bnpparibas.com
www.china.bnpparibas.com
www.china.bnpparibas.com.cn
www.compliance-notifications.bnpparibas.com
www.economieetentreprise.bnpparibas
www.economieetentreprises.bnpparibas
www.eqdpo.bnpparibas.com
www.indices-globalmarkets.bnpparibas.com
www.invest.bnpparibas.com
www.quotetransparency-pp.bnpparibas.com
www.quotetransparency.bnpparibas.com
www.vietnam.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtwVdXfkjcEyKjS4vUmUJppDTnCAl
138PGCfRSQEpNmW77HKZMzxMaNmxarKJLaoFms9T7SdpEl+dXj5T+jf71A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12336425413801418091642705941802710166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b7055d5df923704c8a8d2e2f526509a690d39c2025d77f0f1827d14901293665bbec7299333c4c68d9b16ab2892daa059acf53ed2769125f9d5e3e53fa37fbd4
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f34d48e00fe75c8e9f06b13528d62e60eb3d36b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2550 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-cortexplus-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-globalmarkets-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-markets360-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-markets360.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-origin-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-cortexplus-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-globalmarkets-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-markets360-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-markets360.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-origin-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeat.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affaires-publiques.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affaires-publiques.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chile.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance-notifications.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexis-guarantee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistrade-cust-temp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexfx.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxt-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'democfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economieetentreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economieetentreprises.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqdpo.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexsimmo.imex.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indices-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobonds.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobonds.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotetransparency-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotetransparency.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenauth-cib-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-cfd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeat.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affaires-publiques.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chile.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance-notifications.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economieetentreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economieetentreprises.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eqdpo.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indices-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invest.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotetransparency-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotetransparency.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189deff1df90000040300483046022100b6c5b232fbe1877b6b131068038c2b0b18c1152a675f479fe408c53d5ce209d6022100cf66fa3602b37f7a77de82b542b9b7a7d2d4e69ed37f642b61c69e2c4b45759a00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189deff1dc5000004030046304402201c0b470cf98929d990e899981af9e6f6d3b74e9d3de6de5745202120117d555c02200978c32d2bbde3c7375562b4b7d41c9611384920951117900bc93e011db92483007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189deff1d700000040300473045022100ae9b18988883399339d0508599d4a07be35e029d1329e609a743bf26e33a57d602203f616ffe7c63460e4be930812f8ad00fff89d0194cca077c0d825dfdfa58b45f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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