bnp19b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:48:08:04:66:c6:21:cf:ba:18:9e:6a:0b:5c:b0:51 was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:48:08:04:66:c6:21:cf:ba:18:9e:6a:0b:5c:b0:51
Serial Number (int): 8349375956520480081138273661050728529
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 38:d5:62:c9:c6:35:c5:fa:45:1f:7b:c3:f4:f3:23:e8:7c:09:ec:52
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): c5:c6:b5:f6:c6:e7:a8:c4:c5:80:04:71:44:0d:b0:38:35:2c:44:19
Fingerprint (sha256): 39:ed:22:a1:f7:7a:be:f3:7f:9e:f0:8c:2d:2f:c5:9a:d1:2c:f2:69:11:93:b6:31:28:ec:06:91:5c:6c:64:88

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp19b.bnpparibas.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp19b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp19b.bnpparibas.com
cas-mock.rcs.co.za
cas-qa.rcs.co.za
creditmoderne-prod-speed.neuges.org
diagprevoyance.bnpparibas.com
distrib-preprod.cetelem.fr
espace-contrats.bnpparibas-pf.com
espace-contrats.cetelem.fr
espace-contrats.cofinoga.fr
espace-contrats.creditclick.fr
espace-contrats.domofinance.com
espace-contrats.norrsken.fr
hom-2.credit-moderne.com
homol-icommerce.neuges.org
homol-inetgp.neuges.org
homologation.renovpret.fr
moncontrat-projeo.neuges.org
moncontrat.cafineo.fr
moncontrat.cetelem.fr
moncontrat.cofinoga.fr
moncontrat.domofinance.com
moncontrat.domofinance.fr
moncontrat.norrsken.fr
mywealth-staging.bnpparibas.de
partenariat.bnpparibas-pf.com
pegasus-wm-test.bnpparibas.com
pf-partners.cetelem.fr
pre-prod-stock-auto.cetelem.fr
prod.cofinoga.fr
prod.credit-moderne.com
professionalbanking-wealthmanagement-staging.bnpparibas.com
rec-moncontrat.renovpret.fr
recette-cmonbusiness.bnpparibas-pf.com
recette-espace-contrats-cafineo-fr.neuges.org
recette-espace-contrats-cetelem.neuges.org
recette-espace-contrats-credit-moderne.neuges.org
recette-espace-contrats-domofinance.neuges.org
recette-moncontrat.neuges.org
recette-partenariat-bnpparibas-pf-com.neuges.org
recette-ppewshop-restricted.neuges.org
recette-services-cetelem-fr.neuges.org
recette-simulateur-credit-domofinance.neuges.org
recette.auto.signature.neuges.org
recette.cetelem-esignrc.bnpparibas-pf.com
recette.courtier-sygma-esignrc.bnpparibas-pf.com
recette.dist-auto.signature.neuges.org
recette.emprunteur.signature.neuges.org
recette.espace-contrats.bnpparibas-pf.com
recette.espace-contrats.cofinoga.fr
recette.espace-contrats.emprunteur.neuges.org
recette.espace-contrats.prescripteur.neuges.org
recette.partinst-esignrc.bnpparibas-pf.com
recette.portaildeclassement.neuges.org
recette.prescripteur.signature.neuges.org
recette.signature-vad.domofinance.com
recette.sygma-esignrc.bnpparibas-pf.com
recette.vuevendeur.neuges.org
renovpret.fr
sec.neuges.org
secure.cetelem.fr
simulateur.credit.domofinance.com
simulationrentes-c1-assurance.staging.cardif.fr
simulationrentes-prod-tmp-assurance.cardif.fr
staging.rcs.co.za
staging.renovpret.fr
stock-auto.cetelem.fr
track-qa.rcs.co.za
track.rcs.co.za
voc-staging.bnpparibas.asia
voiceofwealth.staging.bnpparibas
wealth-staging.bnpparibas.asia
wealthmanagement-staging.bnpparibas
wealthmanagement-staging.bnpparibas.asia
wealthmanagement-staging.bnpparibas.com
wm-prod-speed.neuges.org
wm-rct2-speed.neuges.org
wm-rt-speed.neuges.org
www.renovpret.fr
www.simulationrentes-c1-assurance.staging.cardif.fr
www.simulationrentes-prod-tmp-assurance.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for bnp19b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE/9TOYQ3fHU9YbrS3VtKnCULCmxWq
7h9O3Dxu6+lJ4PhgRcK/7CgDxLJkdzKKRjxVGX3dzWtBRUb2onfZRCF1lA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8349375956520480081138273661050728529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp19b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004ffd4ce610ddf1d4f586eb4b756d2a70942c29b15aaee1f4edc3c6eebe949e0f86045c2bfec2803c4b26477328a463c55197dddcd6b414546f6a277d944217594
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38d562c9c635c5fa451f7bc3f4f323e87c09ec52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp19b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-mock.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditmoderne-prod-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagprevoyance.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distrib-preprod.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hom-2.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-icommerce.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-inetgp.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat-projeo.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.domofinance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealth-staging.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenariat.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegasus-wm-test.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pf-partners.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-prod-stock-auto.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalbanking-wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec-moncontrat.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-cmonbusiness.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-cafineo-fr.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-cetelem.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-credit-moderne.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-domofinance.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-moncontrat.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-partenariat-bnpparibas-pf-com.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-ppewshop-restricted.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-services-cetelem-fr.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-simulateur-credit-domofinance.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.dist-auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.emprunteur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.prescripteur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.portaildeclassement.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.vuevendeur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulateur.credit.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-c1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-prod-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stock-auto.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voiceofwealth.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealth-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-prod-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-rct2-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-rt-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationrentes-c1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationrentes-prod-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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