bnp07s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:a0:ae:9d:95:53:e3:74:92:f3:f8:d1:21:28:e3:d5 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a0:ae:9d:95:53:e3:74:92:f3:f8:d1:21:28:e3:d5
Serial Number (int): 7480449100597383349250117869431743445
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cf:f6:fc:99:ae:5d:e8:28:8b:37:ec:dc:33:57:da:f5:8a:85:b6:a2
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 50:c8:30:4d:a3:af:ed:25:0c:d6:94:c1:bf:16:dc:67:cd:f8:0f:9b
Fingerprint (sha256): 53:93:bd:18:e4:6d:eb:89:b6:a3:16:d8:30:7d:9c:5a:25:c2:fb:a6:ca:8d:1a:ff:68:4b:18:32:ef:e7:66:20

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp07s.bnpparibas.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp07s.bnpparibas.com
api-nav-psd2.bddf.staging.bnpparibas
api-nav.bddf.staging.bnpparibas
api-nav.sandbox.bddf.staging.bnpparibas
api-nav.staging.bnpparibas.net
api-nav.staging.hellobank.fr
api.primebroker.com
authservices.smsps.bnl.it
auto.cetelem.es
bcef.devportal.staging.bnpparibas
bnpparibas-pb.primebroker.com
bnpparibas.com.ar
bnpparibas.com.br
bnpparibas.primebroker.com
bo.wearetennis.bnpparibas
cdn-bo.wearetennis.bnpparibas
cetelem.es
commatel-ppd.bnpparibas-am.it
commatel.bnpparibas-am.it
connexisach.americas.bnpparibas.com
consors.bank
consors.de
consorsbank.bank
consorsbank.de
cortalconsors.de
csost-staging.bnpparibas-am.it
cxt-uat.bnpparibas.com
eft-web.cib.bnpparibas.com
france-titrisation.com
france-titrisation.fr
fxpb.bnpparibas.com
gctabsreporting.bnpparibas.com
ib.bnpparibas.com.br
mbswl-uat.bnpparibas.com
mbswl.bnpparibas.com
monfisc-ppd.bnpparibas-am.it
monfisc.bnpparibas-am.it
oms.primebroker.com
pianopensione.bnl.it
postventaauto.cetelem.es
primebroker.com
primebrokerage.com
privatebanking-u1.bnpparibas.de
privatebanking.bnpparibas.de
reportdownloader.primebroker.com
saggio-ppd.bnpparibas-am.it
saggio.bnpparibas-am.it
securitiescorp.bnpparibas.com
securitiesservices.bnpparibas.com.br
securitiesservices.staging.bnpparibas.com
serviciosweb.cetelem.es
sso.wearetennis.bnpparibas
staging.primebroker.com
stgapi.primebroker.com
stgbnpparibas-pb.primebroker.com
stgbnpparibas.primebroker.com
stgges-pb.bnpparibas.com
stgmonitor.primebroker.com
stgreportdownloader.primebroker.com
u0.consorsbank.de
u1.consorsbank.de
us-issuingandpaying.bnpparibas.com
usissuingandpaying.staging.bnpparibas.com
wealthmanagement.bnpparibas.de
www.api-nav-psd2.bddf.staging.bnpparibas
www.auto.cetelem.es
www.bnpparibas.com.ar
www.bnpparibas.com.br
www.cetelem.es
www.cifact.com
www.cifact2.com
www.commatel-ppd.bnpparibas-am.it
www.commatel.bnpparibas-am.it
www.consors.bank
www.consors.de
www.consorsbank.bank
www.consorsbank.de
www.cortalconsors.de
www.csost-staging.bnpparibas-am.it
www.france-titrisation.com
www.france-titrisation.fr
www.monfisc-ppd.bnpparibas-am.it
www.monfisc.bnpparibas-am.it
www.pianopensione.bnl.it
www.postventaauto.cetelem.es
www.primebroker.com
www.primebrokerage.com
www.privatebanking.bnpparibas.de
www.saggio-ppd.bnpparibas-am.it
www.saggio.bnpparibas-am.it
www.serviciosweb.cetelem.es
www.staging.primebroker.com
www.wealthmanagement.bnpparibas.de
www.zonacliente.cetelem.es
zonacliente.cetelem.es

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEHQ9ch1N5C83nkdXwINQcmiTqpqq4
zrssnsBVT2yIDNzEygozywTkSbmdaHArWArHiQOnWVo4I9x8829HBdOtfA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7480449100597383349250117869431743445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00041d0f5c8753790bcde791d5f020d41c9a24eaa6aab8cebb2c9ec0554f6c880cdcc4ca0a33cb04e449b99d68702b580ac78903a7595a3823dc7cf36f4705d3ad7c
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cff6fc99ae5de8288b37ecdc3357daf58a85b6a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2547 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-nav-psd2.bddf.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-nav.bddf.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-nav.sandbox.bddf.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-nav.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-nav.staging.hellobank.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authservices.smsps.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcef.devportal.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commatel-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commatel.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consors.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consorsbank.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortalconsors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csost-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxt-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eft-web.cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monfisc-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monfisc.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebrokerage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking-u1.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saggio-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saggio.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiescorp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesservices.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesservices.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgapi.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgreportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u1.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usissuingandpaying.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api-nav-psd2.bddf.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commatel-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commatel.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consors.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consorsbank.bank'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cortalconsors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csost-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monfisc-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monfisc.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebrokerage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebanking.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saggio-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saggio.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wealthmanagement.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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