bnp08s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0a:66:7d:34:1f:62:33:41:cb:91:4d:79:a2:11:3a:15 was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:66:7d:34:1f:62:33:41:cb:91:4d:79:a2:11:3a:15
Serial Number (int): 13824433668197370436878242077824072213
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6b:6f:e8:6a:87:aa:97:25:f7:e5:23:27:e7:a6:80:41:3d:57:35:72
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 8c:e5:0f:0b:92:59:45:59:bb:82:d9:69:4f:ea:5a:be:00:13:79:e6
Fingerprint (sha256): 3a:dc:29:5b:8a:8e:74:37:0d:99:a9:14:f6:25:b0:65:d6:05:88:50:45:48:87:3d:aa:b3:ce:13:96:d5:ca:90

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp08s.bnpparibas.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp08s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp08s.bnpparibas.com
agora-prd.bnpparibas.com
alis.v16.dev.staging.bnpparibas
antilles-guyane.bnpparibas
api.alpha.nickel.eu
api.dev.nickel.eu
api.irb.algeria.bnpparibas.com
app.alpha.nickel.eu
assinaturadigital.bnpparibas.com.br
b2ctest.ecredit.it
bicibourse.com
bnppam-private.staging.bnpparibas.com
bnpparibas.nc
bnpparibas.re
boleto.bnpparibas.com.br
business.bnl.it
car.bnpparibas-am.com
central.antilles-guyane.bnpparibas
connexion.ere.bnpparibas
connexion.ere.staging.bnpparibas
corporatesac.bnl.it
corporatesacaemcoll.bnl.it
creditclick.fr
cts-lra.bnpparibas.com
demo-directeo.epargne-retraite-entreprises.bnpparibas.com
demo-monepargne.ere.bnpparibas
demo-monepargne.ere.staging.bnpparibas
demo-monere-api.ere.bnpparibas
demo-monere-api.ere.staging.bnpparibas
demo-personeo.epargne-retraite-entreprises.bnpparibas.com
directeo.epargne-retraite-entreprises.bnpparibas.com
documentexchangeconnect-internet.sso-stg.bnpparibas.com
documentexchangeconnect.bnpparibas.com
ebroker.sygmabnpparibas-pf.com
ereceipt2centric-cn.asia.bnpparibas.com
ereceipt2centric.asia.bnpparibas.com
ereporting.asia.bnpparibas.com
fxpb-dr.bnpparibas.com
fxpb.staging.bnpparibas.com
ges-pb.bnpparibas.com
ges.bnpparibas.com
irb-central.bnpparibas.com
jss.bnpparibas
mbswl-uat.bnpparibas.com
mbswl.bnpparibas.com
media.youmanist.bnl.it
media.youmanist.it
mediana.ifitalia.it
mobile.personeo.epargne-retraite-entreprises.bnpparibas.com
monepargne.ere.bnpparibas
monepargne.ere.staging.bnpparibas
monitor.primebroker.com
myfpx.bnpparibas.com
oms-uat.primebroker.com
personeo.epargne-retraite-entreprises.bnpparibas.com
portaldigital.bnpparibas.com.br
private.staging.bnpparibas-am.com
privatebanking.bnpparibas.it
privatebankingaemcoll.bnl.it
rapport-sustainability.bnpparibas-am.com
recebiveis-stg.bnpparibas.com.br
recebiveis.bnpparibas.com
sgrboletoissuance-stg.bnpparibas.com.br
ssotests-directeo.epargne-retraite-entreprises.bnpparibas.com
staging.workspace.realestate.bnpparibas.com
stgges.bnpparibas.com
sustainability-report.bnpparibas-am.com
sygmabnpparibas-pf.com
thailandsocialsecurity.bnpparibas.com
thailandsocialsecurity.staging.bnpparibas.com
us-issuing.paying.rec.bnpparibas.com
vra.bnpparibas.com
www.antilles-guyane.bnpparibas
www.api.irb.algeria.bnpparibas.com
www.assinaturadigital.bnpparibas.com.br
www.bicibourse.com
www.bnpparibas.nc
www.bnpparibas.re
www.central.antilles-guyane.bnpparibas
www.creditclick.fr
www.cts-lra.bnpparibas.com
www.irb-central.bnpparibas.com
www.mediana.ifitalia.it
www.portaldigital.bnpparibas.com.br
www.privatebanking.bnpparibas.it
www.privatebankingaemcoll.bnl.it
www.rapport-sustainability.bnpparibas-am.com
www.sustainability-report.bnpparibas-am.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp08s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE1OcD6A0H80W7N+/wKbfT5kKl3/WH
Z0pJW5A+uqf4ha8prDiYh/UMMSG1pv6PgTmUDhq3WTGOoHZ4KZVU0n87Fw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13824433668197370436878242077824072213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp08s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004d4e703e80d07f345bb37eff029b7d3e642a5dff587674a495b903ebaa7f885af29ac389887f50c3121b5a6fe8f8139940e1ab759318ea07678299554d27f3b17
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b6fe86a87aa9725f7e52327e7a680413d573572
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2778 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp08s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora-prd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.v16.dev.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.alpha.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.irb.algeria.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.alpha.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assinaturadigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2ctest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppam-private.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boleto.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatesac.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatesacaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-lra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monepargne.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monepargne.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monere-api.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monere-api.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentexchangeconnect-internet.sso-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentexchangeconnect.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric-cn.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereporting.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb-dr.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monepargne.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monepargne.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfpx.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms-uat.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapport-sustainability.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgrboletoissuance-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssotests-directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workspace.realestate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainability-report.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuing.paying.rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.irb.algeria.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assinaturadigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cts-lra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebanking.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapport-sustainability.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sustainability-report.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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