bnp10s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:6e:c8:63:e1:72:b7:fe:86:8a:ef:8c:ae:9b:92:f8 was issued on by DigiCert Inc.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6e:c8:63:e1:72:b7:fe:86:8a:ef:8c:ae:9b:92:f8
Serial Number (int): 5892129032860127418480686640108638968
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 85:4f:77:57:c8:bf:26:82:57:ea:6f:c5:c4:ee:60:ea:8d:1f:b8:9c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 4e:cd:23:56:ae:3e:5c:52:51:73:06:10:70:ee:6e:ec:90:ce:8e:9e
Fingerprint (sha256): 43:fe:f9:f0:1c:30:54:39:19:cb:97:69:d2:40:8e:1b:f2:29:de:00:ea:4a:5b:3c:cb:85:97:da:7a:2e:e1:b9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp10s.bnpparibas.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp10s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp10s.bnpparibas.com
accountx2ca.bnl.it
agw-services.staging.bnpparibascardif.it
api-gtw.dev.nickel.eu
api-gtw.staging.nickel.eu
artigianonline.artigiancassa.it
auto.signature.neuges.org
careers.apac.bnpparibas
cdc-archive.portail-investisseur.com
centric2cdms.asia.bnpparibas.com
cetelem-esignrc.bnpparibas-pf.com
courtier-sygma-esignrc.bnpparibas-pf.com
devenir-distributeur.preprod.compte-nickel.fr
devenir-distributeur.staging.compte-nickel.fr
ecnycn.asia.bnpparibas.com
edraft.uat1.bnpparibas.com
emprunteur.signature.neuges.org
etranplus.bnpparibas.com
filebox.smsps-coll.bnl.it
financ.it
financit.it
fzw-ppd.bnpparibas.com
fzw.bnpparibas.com
gm-graduate-careers.apac.bnpparibas
ips-lab.experiment.bnpparibas
ips-lab.staging.bnpparibas
mobile.preprod.domofinance.com
mobileservices2.bgl.lu
mpad-prod.preprod.abm-uid.com
mpad-prod.staging.abm-uid.com
partenaires.preprod.domofinance.com
partenaires.qualif.domofinance.com
partinst-esignrc.bnpparibas-pf.com
partnerbiz.it
pass-portal.staging.bnpparibascardif.it
prescripteur.signature.neuges.org
qualif.domofinance.com
sb.artigiancassa.it
sbv2.artigiancassa.it
signature-vad.domofinance.com
signature.cetelem.fr
sygma-esignrc.bnpparibas-pf.com
tablet-nickel.preprod.abm-uid.com
tablet-nickel.staging.abm-uid.com
telepassxbiz.com
telepassxbiz.it
webdoc-ci.bicicinet.net
webdoc-ci.bnpparibas.com
webdoc-dz.staging.bnpparibas.net
webdoc-sn.bicisnet.net
webdoc-sn.bnpparibas.com
widgets.preprod.compte-nickel.fr
widgets.staging.compte-nickel.fr
ws-ext-esendex.preprod.nickel.eu
ws-ext-esendex.staging.nickel.eu
ws-ext-infobip.preprod.nickel.eu
ws-ext-infobip.staging.nickel.eu
ws-ext-monext-tokenizer.preprod.nickel.eu
ws-ext-monext-tokenizer.staging.nickel.eu
ws-ext-monext.preprod.nickel.eu
ws-ext-onfido.preprod.nickel.eu
ws-ext-pinsms.preprod.nickel.eu
ws-ext-pinsms.staging.nickel.eu
ws-ext-webapptibco.preprod.nickel.eu
ws-ext-webapptibco.staging.nickel.eu
www.accountx2ca.bnl.it
www.artigianonline.artigiancassa.it
www.financ.it
www.financit.it
www.partnerbiz.it
www.pass-portal.staging.bnpparibascardif.it
www.qualif.domofinance.com
www.staging.nickel.eu
www.telepassxbiz.it
www.webdoc-ci.bicicinet.net
www.webdoc-ci.bnpparibas.com
www.webdoc-dz.staging.bnpparibas.net
www.webdoc-sn.bicisnet.net
www.webdoc-sn.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp10s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEHID0DcR50two4pIYg7i9gbmHar1e
gC0PiwWCC6xsm7M//5wy3NionhEGHBNz1xuRwq7yMz9eBVaQ9QLyBC2QrA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5892129032860127418480686640108638968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp10s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00041c80f40dc479d2dc28e2921883b8bd81b9876abd5e802d0f8b05820bac6c9bb33fff9c32dcd8a89e11061c1373d71b91c2aef2333f5e055690f502f2042d90ac
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							854f7757c8bf268257ea6fc5c4ee60ea8d1fb89c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp10s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agw-services.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.dev.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artigianonline.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-archive.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centric2cdms.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecnycn.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edraft.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebox.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financ.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm-graduate-careers.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ips-lab.experiment.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ips-lab.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices2.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sb.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbv2.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artigianonline.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financ.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partnerbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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