bnp07s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:5c:d7:e3:c4:6c:ce:ad:87:5a:e1:e4:42:f3:e3:28 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:5c:d7:e3:c4:6c:ce:ad:87:5a:e1:e4:42:f3:e3:28
Serial Number (int): 7128210053558061275527188990301299496
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 30:13:9c:40:18:d7:bf:e9:bb:3c:02:7a:61:33:fc:c1:8a:9c:2f:61
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 3e:2a:76:67:20:ac:32:71:31:47:af:14:87:bc:05:5b:63:75:70:6f
Fingerprint (sha256): 53:a4:e8:a0:d9:de:6a:d5:4a:19:30:83:f0:e4:6a:2d:d2:49:05:1c:cb:51:a7:7d:68:c6:06:77:f1:22:9e:df

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp07s.bnpparibas.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp07s.bnpparibas.com
api.primebroker.com
authentication.staging.bnpparibas.com
authservices.smsps.bnl.it
auto.cetelem.es
backoffice.cercle-actionnaires.bnpparibas
bicisnet.net
bnpparibas-pb.primebroker.com
bnpparibas.com.ar
bnpparibas.primebroker.com
bo-preprod.wearetennis.bnpparibas
bo.wearetennis.bnpparibas
cdc-rec.portail-investisseur.com
cdc.portail-investisseur.com
cdn-bo-preprod.wearetennis.bnpparibas
cdn-bo.wearetennis.bnpparibas
cdn-preprod.wearetennis.bnpparibas
cdn.backoffice.cercle-actionnaires.bnpparibas
cdn.cercle-actionnaires.bnpparibas
cercle-actionnaires.bnpparibas
cercle-actionnaires.bnpparibas.com
cetelem.es
commodityfutures-rec.bnpparibas.com
commodityfutures.bnpparibas.com
connexisach.americas.bnpparibas.com
cvw.bnpparibas.com
entreprises-ere.staging.bnpparibas.com
fundwebuat.bnpparibas.com
fxpb.bnpparibas.com
gctabsreporting.bnpparibas.com
geode-bp2s.bnpparibas.com
geode.portail-investisseur.com
god-rec.bnpparibas.com
ib.bnpparibas.com.br
pianopensione.bnl.it
postventaauto.cetelem.es
preprod.wearetennis.bnpparibas
primebroker.com
reportdownloader.primebroker.com
reunion.bnpparibas.net
securitiescorp.bnpparibas.com
securitiesservices.bnpparibas.com.br
serviciosweb.cetelem.es
sso.allfunds-bc.com
ssologin-bp2s.bnpparibas.com
ssologinrec.bnpparibas.com
ssorec.allfunds-bc.com
staging.primebroker.com
stgapi.primebroker.com
stgbnpparibas-pb.primebroker.com
stgbnpparibas.primebroker.com
stgges-pb.bnpparibas.com
stgmonitor.primebroker.com
stgreportdownloader.primebroker.com
temporaire-reunion.bnpparibas.net
temporaire-www.bicisnet.net
us-issuingandpaying.bnpparibas.com
webdoc-senegal.bicisnet.net
wellmakers.bnl.it
wellmakers.bnpparibas.it
wellmakerscoll.bnl.it
wellmakerscoll.bnpparibas.it
www.auto.cetelem.es
www.bicisnet.net
www.bnpparibas.com.ar
www.bnpparibas.com.br
www.cercle-actionnaires.bnpparibas
www.cercle-actionnaires.bnpparibas.com
www.cetelem.es
www.cifact.com
www.cifact2.com
www.cvw.bnpparibas.com
www.france-titrisation.com
www.france-titrisation.fr
www.pianopensione.bnl.it
www.postventaauto.cetelem.es
www.primebroker.com
www.reunion.bnpparibas.net
www.serviciosweb.cetelem.es
www.staging.primebroker.com
www.temporaire-www.bicisnet.net
www.webdoc-senegal.bicisnet.net
www.welfarecoll.bnl.it
www.wellmakers.bnl.it
www.wellmakers.bnpparibas.it
www.wellmakerscoll.bnl.it
www.wellmakerscoll.bnpparibas.it
www.zonacliente.cetelem.es
zonacliente.cetelem.es

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEfbDdgZFmc7F5IEkErhTmUJ2PuAr6
f9eYKGOCA3BuUbyWY6C+EMnQjIoQgbq7dhBGJL4kvk7XHDcueJZEXfN96g==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7128210053558061275527188990301299496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00047db0dd81916673b179204904ae14e6509d8fb80afa7fd79828638203706e51bc9663a0be10c9d08c8a1081babb76104624be24be4ed71c372e7896445df37dea
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30139c4018d7bfe9bb3c027a6133fcc18a9c2f61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2505 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authservices.smsps.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-rec.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundwebuat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'god-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiescorp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesservices.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologin-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologinrec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssorec.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgapi.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgreportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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