group.bnpparibas
- BNP PARIBAS SA -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 64:b3:a8:3b:35:61:d5:0f:a5:bf:47:d9:7a:78:c0:6a was issued on by Entrust, Inc..
With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
BNP PARIBAS SA
Organization:
BNP PARIBAS SA
Locality:
Montreuil
Country: FR
Country: FR
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 64:b3:a8:3b:35:61:d5:0f:a5:bf:47:d9:7a:78:c0:6aSerial Number (int): 133855632851965300735854069776905715818
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 03:9f:57:c2:75:aa:fa:f3:6d:33:99:18:84:3c:bd:17:91:8b:45:be
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 4e:57:56:a7:1f:17:b4:74:1f:cc:9a:18:07:1a:2e:45:41:ce:29:c4
Fingerprint (sha256): 4e:77:30:2f:24:7b:06:90:31:bb:04:cd:c2:c2:70:61:b5:e0:31:7b:f6:e8:ca:37:e8:85:3d:b9:a0:97:17:6b
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate group.bnpparibas
38
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for group.bnpparibas
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
group.bnpparibas
www.group.bnpparibas
group.bnpparibas.com
www.group.bnpparibas.com
cdn-group.bnpparibas.com
www.cdn-group.bnpparibas.com
bnpparibas.com
www.bnpparibas.com
careers.bnpparibas
www.careers.bnpparibas
careers.bnpparibas.com
www.careers.bnpparibas.com
carrieres.bnpparibas
www.carrieres.bnpparibas
cdn-com.bnpparibas.com
www.cdn-com.bnpparibas.com
cinema.bnpparibas.com
www.cinema.bnpparibas.com
climate-initiative.bnpparibas.com
www.climate-initiative.bnpparibas.com
csr.group.bnpparibas
www.csr.group.bnpparibas
emploi-carrieres.bnpparibas.com
www.emploi-carrieres.bnpparibas.com
espacepresse.bnpparibas.com
www.espacepresse.bnpparibas.com
fondation.bnpparibas
www.fondation.bnpparibas
fondation.bnpparibas.com
www.fondation.bnpparibas.com
foundation.bnpparibas.com
www.foundation.bnpparibas.com
recrutement.bnpparibas
www.recrutement.bnpparibas
recrutement.bnpparibas.com
www.recrutement.bnpparibas.com
rse.group.bnpparibas
www.rse.group.bnpparibas
www.group.bnpparibas
group.bnpparibas.com
www.group.bnpparibas.com
cdn-group.bnpparibas.com
www.cdn-group.bnpparibas.com
bnpparibas.com
www.bnpparibas.com
careers.bnpparibas
www.careers.bnpparibas
careers.bnpparibas.com
www.careers.bnpparibas.com
carrieres.bnpparibas
www.carrieres.bnpparibas
cdn-com.bnpparibas.com
www.cdn-com.bnpparibas.com
cinema.bnpparibas.com
www.cinema.bnpparibas.com
climate-initiative.bnpparibas.com
www.climate-initiative.bnpparibas.com
csr.group.bnpparibas
www.csr.group.bnpparibas
emploi-carrieres.bnpparibas.com
www.emploi-carrieres.bnpparibas.com
espacepresse.bnpparibas.com
www.espacepresse.bnpparibas.com
fondation.bnpparibas
www.fondation.bnpparibas
fondation.bnpparibas.com
www.fondation.bnpparibas.com
foundation.bnpparibas.com
www.foundation.bnpparibas.com
recrutement.bnpparibas
www.recrutement.bnpparibas
recrutement.bnpparibas.com
www.recrutement.bnpparibas.com
rse.group.bnpparibas
www.rse.group.bnpparibas
Other certificates including the domain name group.bnpparibas
(limited to 100 certificates)
group.bnpparibas.com
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas.com
cdn-preprod-origin.group.bnpparibas
origin.group.bnpparibas
origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
preprod-origin.group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
sso-origin.group.bnpparibas
group.bnpparibas
cdn-preprod-origin.group.bnpparibas
matchmycv.group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas
preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
www.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
www.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
mailhog.contrib-preprod-origin.group.bnpparibas
group.bnpparibas
sso-contrib-preprod-origin.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas.com
cdn-preprod-origin.group.bnpparibas
origin.group.bnpparibas
origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
preprod-origin.group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
sso-origin.group.bnpparibas
group.bnpparibas
cdn-preprod-origin.group.bnpparibas
matchmycv.group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas
preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
www.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
www.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
mailhog.contrib-preprod-origin.group.bnpparibas
group.bnpparibas
sso-contrib-preprod-origin.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
Certificate
The complete raw certificate details for group.bnpparibas in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIII4TCCB8mgAwIBAgIQZLOoOzVh1Q+lv0fZenjAajANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDAxMDMxMjQ3MDZaFw0yNTAxMDMxMjQ3MDVaMFUxCzAJBgNVBAYTAkZSMRIwEAYD VQQHEwlNb250cmV1aWwxFzAVBgNVBAoTDkJOUCBQQVJJQkFTIFNBMRkwFwYDVQQD ExBncm91cC5ibnBwYXJpYmFzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0h9WbSt7xj5cyCvkn9o9XfIsIqsZvHfp0TpdhQybwThk7GucAHgDubM38Xxr g9BUEPTIRLwb0IpxoIzHpiwEV5321/7vJPE2/yhD3F9+hF2esf1hOPFfhomPwcD1 bGwJTOEjw/Mh+ZO6937yQ3+jHJ92F7UVWR8JIusFfuvwx7vDNCB/iFCvdX8t/gAz JvUl9V6hoGVK9eY7ciacRt2D9l0CT4QCAndE4u41+5iGRO2uYmkLMZ/R7YsYxj6W NeTQdw4EnCxyYmi6AltaMQiyY5Jt/B3JKAXtNl5bZFcIIjjvi5fEzhbpxF+KWgMt ehV5c8cwXqhnuFLb4k4Lp/oz8QIDAQABo4IFRTCCBUEwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUA59XwnWq+vNtM5kYhDy9F5GLRb4wHwYDVR0jBBgwFoAUgqJwdN28 Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRw Oi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRy dXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6 Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwggP3BgNVHREEggPuMIID6oIQ Z3JvdXAuYm5wcGFyaWJhc4IUd3d3Lmdyb3VwLmJucHBhcmliYXOCFGdyb3VwLmJu cHBhcmliYXMuY29tghh3d3cuZ3JvdXAuYm5wcGFyaWJhcy5jb22CGGNkbi1ncm91 cC5ibnBwYXJpYmFzLmNvbYIcd3d3LmNkbi1ncm91cC5ibnBwYXJpYmFzLmNvbYIO Ym5wcGFyaWJhcy5jb22CEnd3dy5ibnBwYXJpYmFzLmNvbYISY2FyZWVycy5ibnBw YXJpYmFzghZ3d3cuY2FyZWVycy5ibnBwYXJpYmFzghZjYXJlZXJzLmJucHBhcmli YXMuY29tghp3d3cuY2FyZWVycy5ibnBwYXJpYmFzLmNvbYIUY2FycmllcmVzLmJu cHBhcmliYXOCGHd3dy5jYXJyaWVyZXMuYm5wcGFyaWJhc4IWY2RuLWNvbS5ibnBw YXJpYmFzLmNvbYIad3d3LmNkbi1jb20uYm5wcGFyaWJhcy5jb22CFWNpbmVtYS5i bnBwYXJpYmFzLmNvbYIZd3d3LmNpbmVtYS5ibnBwYXJpYmFzLmNvbYIhY2xpbWF0 ZS1pbml0aWF0aXZlLmJucHBhcmliYXMuY29tgiV3d3cuY2xpbWF0ZS1pbml0aWF0 aXZlLmJucHBhcmliYXMuY29tghRjc3IuZ3JvdXAuYm5wcGFyaWJhc4IYd3d3LmNz ci5ncm91cC5ibnBwYXJpYmFzgh9lbXBsb2ktY2FycmllcmVzLmJucHBhcmliYXMu Y29tgiN3d3cuZW1wbG9pLWNhcnJpZXJlcy5ibnBwYXJpYmFzLmNvbYIbZXNwYWNl cHJlc3NlLmJucHBhcmliYXMuY29tgh93d3cuZXNwYWNlcHJlc3NlLmJucHBhcmli YXMuY29tghRmb25kYXRpb24uYm5wcGFyaWJhc4IYd3d3LmZvbmRhdGlvbi5ibnBw YXJpYmFzghhmb25kYXRpb24uYm5wcGFyaWJhcy5jb22CHHd3dy5mb25kYXRpb24u Ym5wcGFyaWJhcy5jb22CGWZvdW5kYXRpb24uYm5wcGFyaWJhcy5jb22CHXd3dy5m b3VuZGF0aW9uLmJucHBhcmliYXMuY29tghZyZWNydXRlbWVudC5ibnBwYXJpYmFz ghp3d3cucmVjcnV0ZW1lbnQuYm5wcGFyaWJhc4IacmVjcnV0ZW1lbnQuYm5wcGFy aWJhcy5jb22CHnd3dy5yZWNydXRlbWVudC5ibnBwYXJpYmFzLmNvbYIUcnNlLmdy b3VwLmJucHBhcmliYXOCGHd3dy5yc2UuZ3JvdXAuYm5wcGFyaWJhczAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBMGA1UdIAQM MAowCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAo0atjRiMaJdQX6BVcaLbJCFrO+sgKWvmtdtzX/I5H5nyp9i2RsJop1OdG xFS9MHqcD5BUrlEYQVj5ltyO+wmjFLZUHAekcdhqDemlsJV7yfqWeAj/wF74Rlsa 4SEp1AAcfLbF61nTt5VXvBVSZE0Y9iemnR1gwtWoNI2bb1g5u3r/JVfRQ+aXgWwM FXcxC6oQHWOeGE3XAC3lin2lFYtd64MP/psnVl8keP3yOSPdKoh6pkI/UHjBaSEh SA0LNEoXlpewgpdWRoZRb4e6D0hhkOo1wsy29BJRXcLwi3WUZ96J+TVs+rtQOsQe GuSW18+qQscoNYL+yI8ugADv8pWW -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0h9WbSt7xj5cyCvkn9o9 XfIsIqsZvHfp0TpdhQybwThk7GucAHgDubM38Xxrg9BUEPTIRLwb0IpxoIzHpiwE V5321/7vJPE2/yhD3F9+hF2esf1hOPFfhomPwcD1bGwJTOEjw/Mh+ZO6937yQ3+j HJ92F7UVWR8JIusFfuvwx7vDNCB/iFCvdX8t/gAzJvUl9V6hoGVK9eY7ciacRt2D 9l0CT4QCAndE4u41+5iGRO2uYmkLMZ/R7YsYxj6WNeTQdw4EnCxyYmi6AltaMQiy Y5Jt/B3JKAXtNl5bZFcIIjjvi5fEzhbpxF+KWgMtehV5c8cwXqhnuFLb4k4Lp/oz 8QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 133855632851965300735854069776905715818 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 12:47:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 12:47:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'group.bnpparibas' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26525497191006173179021694774388784884650147044456701390513283709930395062397019939685808754552959003409226403065324957859086489835452879100668804454772346815652748009817529721290595514704613322382743903692805734526071611909630947268785883506481364366119162837465260060666523722849895485578001675727300693446350551409062593310420672083465784917418604556453591159595825418167516733128693780416858573699002366634537641897260682611884997166438542579795321604142548779582701047788411740111596045261098092823059648048721726188805779806151469172319392468958075599826610520788741488638868435961792359461240152989389593129969 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 039f57c275aafaf36d339918843cbd17918b45be . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1006 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.group.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.group.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-group.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn-group.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrieres.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrieres.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-com.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn-com.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinema.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climate-initiative.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.climate-initiative.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csr.group.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csr.group.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emploi-carrieres.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emploi-carrieres.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacepresse.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espacepresse.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondation.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondation.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundation.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recrutement.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recrutement.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recrutement.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recrutement.bnpparibas.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rse.group.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rse.group.bnpparibas' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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