bnp08s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:ef:4e:ea:d6:c2:f2:6d:be:6d:a8:07:77:c7:5a:69 was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ef:4e:ea:d6:c2:f2:6d:be:6d:a8:07:77:c7:5a:69
Serial Number (int): 6559471566134069010860931283864214121
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b5:36:6a:13:94:5d:bd:f3:c3:cc:a4:66:d4:aa:4e:ba:3b:12:31:cd
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 82:94:cf:b2:28:00:00:be:f4:54:98:9c:7d:9d:c1:00:22:bb:77:c0
Fingerprint (sha256): 45:cb:28:b9:70:d5:74:90:7f:33:02:6f:b6:34:df:90:b8:f2:50:ff:30:1d:8c:42:8e:ac:58:9e:e8:f6:22:12

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate bnp08s.bnpparibas.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp08s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agora-prd.bnpparibas.com
algeria.bnpparibas.com
algerie.bnpparibas.com
alis-qual-int.staging.bnpparibas
alis.int.staging.bnpparibas
alis.v16.dev.staging.bnpparibas
antilles-guyane.bnpparibas
b2ctest.ecredit.it
bankingaemcoll.hellobank.it
biciab.bf
bicibourse.com
bicici.com
bicigui.org
bicis.sn
bnp08s.bnpparibas.com
bnppam-private.staging.bnpparibas.com
bnpparibas.dz
bnpparibas.nc
bnpparibas.re
boleto.bnpparibas.com.br
central.antilles-guyane.bnpparibas
connexion.ere.bnpparibas
connexion.ere.staging.bnpparibas
corporatesac.bnl.it
demo-monepargne.ere.bnpparibas
demo-monepargne.ere.staging.bnpparibas
demo-monere-api.ere.bnpparibas
demo-monere-api.ere.staging.bnpparibas
ebroker-preprod.sygmabnpparibas-pf.com
ebroker.sygmabnpparibas-pf.com
fxpb-dr.bnpparibas.com
fxpb.bnpparibas.com
fxpb.staging.bnpparibas.com
ges-pb.bnpparibas.com
ges.bnpparibas.com
irb-central.bnpparibas.com
jss.bnpparibas
mbswl-uat.bnpparibas.com
mbswl.bnpparibas.com
media.youmanist.bnl.it
media.youmanist.it
mediana.ifitalia.it
monepargne.ere.bnpparibas
monepargne.ere.staging.bnpparibas
monitor.primebroker.com
myfpx.bnpparibas.com
portailsygma-preprod.sygmabnpparibas-pf.com
private.staging.bnpparibas-am.com
privatebanking.bnpparibas.it
privatebankingaem.bnl.it
privatebankingaem.bnpparibas.it
privatebankingaemcoll.bnl.it
recebiveis-files-stg.bnpparibas.com.br
recebiveis-stg.bnpparibas.com.br
recebiveis.bnpparibas.com
recebiveis.bnpparibas.com.br
riendutout.bnpparibas.com
sgrboletoissuance-stg.bnpparibas.com.br
staging.workspace.realestate.bnpparibas.com
sygmabnpparibas-pf.com
thailandsocialsecurity.bnpparibas.com
thailandsocialsecurity.staging.bnpparibas.com
ubci.tn
us-issuing.paying.rec.bnpparibas.com
www.algeria.bnpparibas.com
www.algerie.bnpparibas.com
www.antilles-guyane.bnpparibas
www.bankingaemcoll.hellobank.it
www.biciab.bf
www.bicibourse.com
www.bicici.com
www.bicigui.org
www.bicis.sn
www.bnpparibas.dz
www.bnpparibas.nc
www.bnpparibas.re
www.central.antilles-guyane.bnpparibas
www.irb-central.bnpparibas.com
www.mediana.ifitalia.it
www.privatebanking.bnpparibas.it
www.privatebankingaem.bnl.it
www.privatebankingaem.bnpparibas.it
www.privatebankingaemcoll.bnl.it
www.ubci.tn

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp08s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfZfsYtAos4IUB9IIQhdXzPHv5OG5
wqvsQvTmK+40+ErATop0Q7+u0/FIvGmWnDYqWQbemOuT80rm6DmGxaF6VA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6559471566134069010860931283864214121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp08s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047d97ec62d028b3821407d208421757ccf1efe4e1b9c2abec42f4e62bee34f84ac04e8a7443bfaed3f148bc69969c362a5906de98eb93f34ae6e83986c5a17a54
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5366a13945dbdf3c3cca466d4aa4eba3b1231cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2267 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora-prd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algeria.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algerie.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis-qual-int.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.int.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.v16.dev.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2ctest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingaemcoll.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biciab.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicigui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicis.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp08s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppam-private.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boleto.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatesac.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monepargne.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monepargne.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monere-api.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monere-api.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-preprod.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb-dr.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monepargne.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monepargne.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfpx.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portailsygma-preprod.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingaem.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingaem.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis-files-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riendutout.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgrboletoissuance-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workspace.realestate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubci.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuing.paying.rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algeria.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.algerie.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankingaemcoll.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biciab.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicigui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicis.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebanking.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingaem.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingaem.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubci.tn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017af6d37cff0000040300483046022100c645acdfd0aed06cab674efd4d2d65cc3c8dc1f03afa23f75e39166bc4e37719022100cbe2f306dfc829186613f16d9c9ce43d89eed31107e3b9b9a6576f12c041caef00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017af6d37cd7000004030046304402201322c2a1454b1714291616358bf8b54f2ef86711ec721fc39fd149ff3d973f56022031357dfd3bf47376a79766a37ddd65aece77b0197204756eb58efe329d8dc6fc007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017af6d37d14000004030047304502200855c20bb207fb1eaefd2e0dc1152a33d4ca80ca5f40a824be483cf32b85775a022100fd26b22e86c436aa4d72de83bce4e3dd169aceb9d2baf0721c165afeda4a8cf9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b2c7645754927e16025c92b6079b72ca3b09fa4ec73ed25974075758338f6f357abbfa5089ad56633796c6d9e0cdd3e5350cb69277feb33c34de51c6643a03430783619f9f3aa69d854240736735e2b7a51e749d0438cfaa4275791120c860b3a3e6dfbe569b80815f57e24d9fb23b70db0047d07ae40571564430011872ec14880f0fbb3c42ac17644ea64c0f5470b2d0ccb864ee3fef500257ea021745547ad851871b62d98ad48673e8b8856d5414b7e86da3a8d0e7b9e11a3eb2bfc89965852d9f65341189d4b4836608a17d7754e3dfaf1add1978efb2661f95c33bed7ddfa55554afbff221f03bccb30cab1f3518a5d30a8b74e3b00940e2200002010a