bnp10b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:45:6a:b7:47:40:0c:48:3b:90:e9:e0:f1:dc:74:cb was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:45:6a:b7:47:40:0c:48:3b:90:e9:e0:f1:dc:74:cb
Serial Number (int): 16311168888880485719279398483954267339
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4a:2f:41:5a:4e:fd:48:e1:63:15:f6:c6:c6:76:90:a8:10:b6:25:c2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 7c:2e:2a:e5:bb:99:99:e1:72:0f:ed:30:2f:e2:d1:ae:30:0c:f9:91
Fingerprint (sha256): 3d:0f:72:1d:1f:9b:9e:a3:36:b7:0b:64:e7:34:f2:cf:9e:1f:b5:a9:c1:7e:cc:35:fc:57:e3:0d:0d:ed:a8:88

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp10b.bnpparibas.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp10b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp10b.bnpparibas.com
analyticscom.staging.bnpparibas
apistore.staging.bnpparibas
baufinanzierungsversicherung.bnpparibascardif.de
bnl-dgi-collection.bnpparibas.com
bnl-dgi-collection.staging.bnpparibas
bo-run-courtage-portail.staging.cardif.fr
bo-run-n1-courtage-portail.staging.cardif.fr
bo-run-n2-courtage-portail.staging.cardif.fr
cardif-europe.developer.api.bnpparibas
cardif-europe.developer.staging.api.bnpparibas
cardif-italy.developer.api.bnpparibas
cardif-italy.developer.staging.api.bnpparibas
cardif-luxembourg.developer.api.bnpparibas
cardif-luxembourg.developer.staging.api.bnpparibas
cardif-pp-assurance.cardif.fr
cdc-archiverec.portail-investisseur.com
ce.developer.staging.api.bnpparibas
cg.developer.api.bnpparibas
cg.developer.staging.api.bnpparibas
ci.developer.api.bnpparibas
ci.developer.staging.api.bnpparibas
clients-fundquestadvisor.staging.bnpparibas-am.com
collect-dmit.staging.bnpparibas
comptes-c01.staging.cardif.fr
comptes-c02.staging.cardif.fr
comptes-run.staging.cardif.fr
contratacion.bnpparibascardif.es
core.corporate-mfa.cardif.api.bnpparibas
cwextranet-simple.bnpparibas-am.com
e2c.qabnpparibasfortis.be
easy2cash.qabnpparibasfortis.be
etranplus.staging.bnpparibas.com
factor-be.qabnpparibasfortis.be
factor-de.qabnpparibasfortis.be
factor-dk.qabnpparibasfortis.be
factor-it.qabnpparibasfortis.be
factor-nl.qabnpparibasfortis.be
factor-pl.qabnpparibasfortis.be
factor-uk.qabnpparibasfortis.be
factor.qabnpparibasfortis.be
finagora-c01.staging.cardif.fr
finagora-c02.staging.cardif.fr
finagora-run.staging.cardif.fr
foundation.corp.cardif.api.staging.bnpparibas
foundation.corporate-mfa.cardif.api.bnpparibas
france-titrisationppd.staging.bnpparibas.com
france-titrisationppd.staging.bnpparibas.fr
fundquestadvisor.staging.bnpparibas-am.com
gctabsreporting-ppd.staging.bnpparibas.com
groeivermogen.staging.bnpparibas-am.com
hfsadmin-kptu.staging.bnpparibas.com
histoire.staging.bnpparibas
iol-valuation-realestate.bnpparibas.fr
magenta.cardif.at
noa-ppd.bnpparibas.com
noa-rec.bnpparibas.com
odctel-pp-assurance.cardif.fr
online.cardif.cz
oos-pub.bnpparibas-am.com
oos-pub.staging.bnpparibas-am.com
opportunitedecontact-pp-assurance.cardif.fr
partenaires.cardif-pp-assurance.cardif.fr
partners-extranet.bnpparibas-am.com
partners-extranet.staging.bnpparibas-am.com
partners-internet.bnpparibas-am.com
partners-internet.staging.bnpparibas-am.com
preprod.baufinanzierungsversicherung.bnpparibascardif.de
preprod.contratacion.bnpparibascardif.es
preprod.online.cardif.cz
preprod.t-mobile.cardif.at
t-mobile.cardif.at
tma.cardif.at
urgenceetdeveloppement.staging.bnpparibas
wow-stg.bnpparibas.com
www.cardif-pp-assurance.cardif.fr
www.comptes-c01.staging.cardif.fr
www.comptes-c02.staging.cardif.fr
www.comptes-run.staging.cardif.fr
www.contratacion.bnpparibascardif.es
www.finagora-c01.staging.cardif.fr
www.finagora-c02.staging.cardif.fr
www.finagora-run.staging.cardif.fr
www.iol-valuation-realestate.bnpparibas.fr
www.oos-pub.staging.bnpparibas-am.com
www.partenaires.cardif-pp-assurance.cardif.fr
www.preprod.contratacion.bnpparibascardif.es
www.preprod.t-mobile.cardif.at
www.t-mobile.cardif.at
www.tma.cardif.at

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp10b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEbSKkku/LC0miWhB9eYSt+8buxJNR
qQuOuUPFxwODFqp5uOm1jB9+V4knH5FLySxBfKA1iXhW11VyK9HsiWCwvw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16311168888880485719279398483954267339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp10b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046d22a492efcb0b49a25a107d7984adfbc6eec49351a90b8eb943c5c7038316aa79b8e9b58c1f7e5789271f914bc92c417ca035897856d755722bd1ec8960b0bf
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a2f415a4efd48e16315f6c6c67690a810b625c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp10b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analyticscom.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apistore.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baufinanzierungsversicherung.bnpparibascardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnl-dgi-collection.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnl-dgi-collection.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-run-courtage-portail.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-run-n1-courtage-portail.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-run-n2-courtage-portail.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif-europe.developer.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif-europe.developer.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif-italy.developer.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif-italy.developer.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif-luxembourg.developer.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif-luxembourg.developer.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-archiverec.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ce.developer.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg.developer.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cg.developer.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.developer.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.developer.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-fundquestadvisor.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-dmit.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c01.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c02.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-run.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contratacion.bnpparibascardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.corporate-mfa.cardif.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-simple.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2c.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy2cash.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor-be.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor-de.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor-dk.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor-it.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor-nl.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor-pl.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor-uk.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.qabnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c01.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c02.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-run.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.corp.cardif.api.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.corporate-mfa.cardif.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-titrisationppd.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-titrisationppd.staging.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquestadvisor.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting-ppd.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groeivermogen.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfsadmin-kptu.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'histoire.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iol-valuation-realestate.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magenta.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odctel-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.cardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos-pub.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos-pub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opportunitedecontact-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.cardif-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-extranet.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-extranet.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-internet.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-internet.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.baufinanzierungsversicherung.bnpparibascardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.contratacion.bnpparibascardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.online.cardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.t-mobile.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-mobile.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tma.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urgenceetdeveloppement.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wow-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comptes-c01.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comptes-c02.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comptes-run.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratacion.bnpparibascardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finagora-c01.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finagora-c02.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finagora-run.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iol-valuation-realestate.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oos-pub.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partenaires.cardif-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.contratacion.bnpparibascardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.t-mobile.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.t-mobile.cardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tma.cardif.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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