bnp07s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:63:64:69:de:e5:e8:6e:38:02:3c:c2:db:fd:a3:de was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:63:64:69:de:e5:e8:6e:38:02:3c:c2:db:fd:a3:de
Serial Number (int): 13808353975745149644292516013978526686
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 91:09:c3:d4:0e:cf:89:c6:8f:16:44:26:a4:96:1c:2c:69:d1:42:83
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e9:d5:d7:0a:50:1d:9a:37:35:3f:c7:5c:77:5e:3a:c4:13:05:b2:a2
Fingerprint (sha256): 31:11:88:b3:34:19:96:75:f8:6d:02:5c:4d:0d:cb:9f:74:82:40:73:4d:fd:65:b0:13:c6:f4:8d:6d:10:b7:35

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate bnp07s.bnpparibas.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zonacliente.cetelem.es
www.zonacliente.cetelem.es
www.wellmakerscoll.bnpparibas.it
www.wellmakerscoll.bnl.it
www.wellmakers.bnpparibas.it
www.wellmakers.bnl.it
www.welfarecoll.bnl.it
www.webdoc-senegal.bicisnet.net
www.temporaire-www.bicisnet.net
www.serviciosweb.cetelem.es
www.reunion.bnpparibas.net
www.primebroker.com
www.france-titrisation.fr
www.france-titrisation.com
www.cvw.bnpparibas.com
www.cifact2.com
www.cifact.com
www.cetelem.es
www.cercle-actionnaires.bnpparibas.com
www.cercle-actionnaires.bnpparibas
www.bnpparibas.com.br
www.bnpparibas.com.ar
www.bicisnet.net
www.auto.cetelem.es
wellmakerscoll.bnpparibas.it
wellmakerscoll.bnl.it
wellmakers.bnpparibas.it
wellmakers.bnl.it
welfarecoll.bnl.it
webdoc-senegal.bicisnet.net
us-issuingandpaying.bnpparibas.com
temporaire-www.bicisnet.net
temporaire-reunion.bnpparibas.net
stgreportdownloader.primebroker.com
stgmonitor.primebroker.com
stgbnpparibas.primebroker.com
stgbnpparibas-pb.primebroker.com
std07.formation.akatest.pilax.com
std07-eu.formation.akatest.pilax.com
staging.primebroker.com
ssorec.allfunds-bc.com
ssologinrec.bnpparibas.com
ssologin-bp2s.bnpparibas.com
sso.allfunds-bc.com
serviciosweb.cetelem.es
securitiescorp.bnpparibas.com
reunion.bnpparibas.net
primebroker.com
preprod.wearetennis.bnpparibas
postventaauto.cetelem.es
portalbr.us-cib-gtm.bnpparibas.com
mobileics.primebroker.com
isa.bnpparibas.com
ibpssobr.us-cib-gtm.bnpparibas.com
ib.bnpparibas.com.br
hsp-ppd.bnpparibas.com
god-rec.bnpparibas.com
geode.portail-investisseur.com
geode-bp2s.bnpparibas.com
gctabsreporting.bnpparibas.com
fundwebuat.bnpparibas.com
entreprises-ere.staging.bnpparibas.com
cvw.bnpparibas.com
connexisach.americas.bnpparibas.com
commodityfutures.bnpparibas.com
commodityfutures-rec.bnpparibas.com
cetelem.es
cercle-actionnaires.bnpparibas.com
cercle-actionnaires.bnpparibas
cdn.cercle-actionnaires.bnpparibas
cdn.backoffice.cercle-actionnaires.bnpparibas
cdn-preprod.wearetennis.bnpparibas
cdn-bo.wearetennis.bnpparibas
cdn-bo-preprod.wearetennis.bnpparibas
cdc.portail-investisseur.com
cdc-rec.portail-investisseur.com
bo.wearetennis.bnpparibas
bo-preprod.wearetennis.bnpparibas
bnpparibas.com.ar
bnpparibas-pb.primebroker.com
bnp07s.bnpparibas.com
bicisnet.net
bds-pb.bnpparibas.com
basic07.formation.akatest.pilax.com
basic07-eu.formation.akatest.pilax.com
backoffice.cercle-actionnaires.bnpparibas
auto.cetelem.es
authentication.staging.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld2ZFiI8fpA7LDGQ23qK
b1+kWmTOOU7jZKbOhtfpu4ovkBIh1T2kZRXM2w+1xJBSo4tg4AXwbGj1YPv6TGEo
0Z55s5XQQf7ud8EhUT3yGUyQlm7R0aJEp6WJLsy4HGRpSVdAq9kOishJF1c1FvpB
zBNUc94G/EIpAVL6R85XwpGsoh/eQZmZ4xabYxHCzLqA9V0/rrKMlhqzO2hjHJkU
DN5RdQVLK5tCcqMBWI+xRRwmvq4/YfI/8nsylnXE7JHbZZ358eWsqOhvgdo1dT2Z
Qo4pj5ydN21cyLNoEWQM8UMic6rnijwwofIL/f2+KWZ24pgDLWR9sfQBKRUzXYGw
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13808353975745149644292516013978526686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18918781483475622605776026031482722801957653313424707478077007269735117697162990350826353901386009757203940110301906320170984626885939754518607827801118848656334932504802898314997349951614941120597187582739283738988015565783296377631164620056731947833326816405979624169888935369555344350266900983303634843218873046720611640697313249546472347781695587072289459956475540169031159545352830528075408688846925429648585718358014681724674328479763914569437514172180667167089964499750352399734072867756141632743045354739137555543209511765171022823905732036970387160628201559593761293751665680845822717894315624607485305925841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9109c3d40ecf89c68f164426a4961c2c69d14283
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2515 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgreportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std07.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std07-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssorec.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologinrec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologin-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiescorp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalbr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileics.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isa.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibpssobr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsp-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'god-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundwebuat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-rec.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bds-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic07.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic07-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b57812c1975df7c2c7e55cb8bef2a39a7efc60c41f0c079f109dcc6352d9c19ee322bb7cb136c2218d4a57beae2d047ae1b9677d0eff26c5b2bd85f4a8b2a54e60b8b4140e31428997f7a51d3bc4a9c5b933c8d64a107e33078d046a64a703c47d9d1ee9971475493674963d443cd1d0a91f7ccbe153541b0c26aaca9076b78064ac63bd1e306401e291337ea57d53ad4c807b2336633759947ddae49d2672a4556bd177b78aa0b0ee27790d3f5a054ba49eee8c55a1914e51f70a0bbf198655f7f75e1a700087eae5b092167b01576736720cf653016775363c94e9513899e85acaa2235e92b049a9e0d4a7300b40e3d9ca0589ac08be72d5009ed93ef4bbe