f17aaabc20bfe045075927934fed52d21.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:2f:25:94:6b:09:66:be:4e:35:ff:9b:34:20:6d:50 was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:2f:25:94:6b:09:66:be:4e:35:ff:9b:34:20:6d:50
Serial Number (int): 8220168135110280934050197857491774800
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 09:8c:2e:1a:dc:d4:54:e8:c0:26:7c:82:7f:10:a1:78:e3:c1:10:79
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 64:47:70:bd:63:ff:83:e6:74:88:bb:42:06:6e:e5:f8:59:8a:ae:ad
Fingerprint (sha256): 2e:36:17:10:5d:5c:08:31:92:c9:ce:14:4f:e5:d4:e9:ae:40:fa:70:c0:a0:f5:47:bb:06:b8:28:09:95:84:44

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate f17aaabc20bfe045075927934fed52d21.bnpparibas.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wwwcoll.hellobank.it
www.scpi.immo
www.reim.bnpparibas.de
www.ratama-pp-pos.bnpparibas.dz
www.ratama-dz.bnpparibas.dz
www.qabnpparibasfortis.com
www.property-management.realestate.bnpparibas
www.oficinas.bnpparibas.es
www.navesylogistica.es
www.limmobilierdunmondequichange.fr
www.immersion360.realestate.bnpparibas
www.ifitalia.it
www.i-cliential.com
www.factor.bnpparibasfortis.be
www.factor.bnpparibas.se
www.factor.bnpparibas.nl
www.factor.bnpparibas.dk
www.factor.bnpparibas.de
www.espace-client.cdgp.fr
www.economic-research.bnpparibas.com
www.easy2cash.bnpparibasfortis.be
www.e2c.bnpparibasfortis.be
www.custexfactory.bnpparibascardif.com
www.cofinoga.fr
www.arvaljiutong.cn
www.arval.cn
webprive.epargne-entreprise.staging.bnpparibas.com
stream02-cortexfx-pp.bnpparibas.com
stream01-cortexfx-pp.bnpparibas.com
secondary-smartderivatives-pp.bnpparibas.com
scpi.immo
research.bnpparibas.com
reim.bnpparibas.de
ratama-pp-pos.bnpparibas.dz
ratama-dz.bnpparibas.dz
qabnpparibasfortis.com
psyg-recrf.staging.sygmabnpparibas-pf.com
psyg-rechm.staging.sygmabnpparibas-pf.com
property-management.realestate.bnpparibas
preprod.espace-client.cofinoga.fr
preprod.espace-client.cdgp.fr
preprod.cofinoga.fr
phonebook.bnlmobile.it
pewee.bnpparibas.com
pewee-uat.bnpparibas.com
optimisermon.epargne-retraite-entreprises.bnpparibas.com
oficinas.bnpparibas.es
netpaycentric-india.bnpparibas.com
navesylogistica.es
ma-retraite.bnpparibas
lp-master.realestate.bnpparibas
limmobilierdunmondequichange.fr
india-netpay.bnpparibas.com
indemnisation-c01.staging.cardif.fr
immersion360.realestate.bnpparibas
ifitalia.it
fundquestadvisor-com.staging.bnpparibas-ip.com
fastaccess-c02-rec.cardif.fr
factoring.bnpparibas.com
factor.bnpparibasfortis.be
factor.bnpparibas.se
factor.bnpparibas.pt
factor.bnpparibas.nl
factor.bnpparibas.dk
factor.bnpparibas.de
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
eware.uat1.bnpparibas.com
ereporting.asia.bnpparibas.com
erelio-epargne-retraite-entreprises-bnpparibas-com.staging.bnpparibas-ip.com
ereceipt2centric.asia.bnpparibas.com
edraft.uat1.bnpparibas.com
economic-research.bnpparibas.com
ebroker-recrf.staging.sygmabnpparibas-pf.com
ebroker-rechm.staging.sygmabnpparibas-pf.com
easy2cash.bnpparibasfortis.be
e2c.bnpparibasfortis.be
depuis100ans.lu
custexfactory.bnpparibascardif.com
cortexsecondary-pp.bnpparibas.com
cortexfx-pp.bnpparibas.com
contrib.cib.bnpparibas
connexistradebg.uat1.bnpparibas.com
cib.bnpparibas.com
cib.bnpparibas
arvaljiutong.cn
arval.cn
arbitrage.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEJH/o+jvdQPXpiQzOuFBZHs2ONiY1
mQme3DTu5M6mXVtKFDW4yJBXEkAn7U/cKv4b7UrHhp4YkdiV55q9VBGceg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8220168135110280934050197857491774800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004247fe8fa3bdd40f5e9890cceb850591ecd8e36263599099edc34eee4cea65d5b4a1435b8c89057124027ed4fdc2afe1bed4ac7869e1891d895e79abd54119c7a
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							098c2e1adcd454e8c0267c827f10a178e3c11079
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcoll.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reim.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-pp-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-dz.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.property-management.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oficinas.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navesylogistica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limmobilierdunmondequichange.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immersion360.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-cliential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-client.cdgp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy2cash.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e2c.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custexfactory.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webprive.epargne-entreprise.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream02-cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream01-cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondary-smartderivatives-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reim.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-pp-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-dz.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyg-recrf.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyg-rechm.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property-management.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.espace-client.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.espace-client.cdgp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonebook.bnlmobile.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewee-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimisermon.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oficinas.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpaycentric-india.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navesylogistica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma-retraite.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp-master.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limmobilierdunmondequichange.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-netpay.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indemnisation-c01.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersion360.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquestadvisor-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoring.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereporting.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erelio-epargne-retraite-entreprises-bnpparibas-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edraft.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-recrf.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-rechm.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy2cash.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2c.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depuis100ans.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custexfactory.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexsecondary-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib.cib.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistradebg.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00117fa4f2f57fd49d8c5379a69abd0aa6bb29446cff01a179e741a181f5898c96149a349c4abe928518f04a7c8d00b338a204882198a8551190765ff58e4b9e3a1b24eb93f96cc86e97c1e37f0f04d79638be9b9aaac94df36dd1452ce06fa820fa26982f12b12090a3b433d509fee1019d198252ff1bfca24f566adc25fc0867958dd68a4a54076a221a935e2a308679431d02c261656575036de80720c854ed40f78612dbfb88e7daa621f68d06bda55d2d81a2f76d33b398400d840c7cd303ef20befafc72ad9868e727add97fcf0865cdd82f51612bfa86be8f64a868cb6cae554e12dd7550c7c5ba7579a899c28a253b5de013a9139b563bfe132a76317b