bnp07s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:ee:a8:bc:31:44:7f:36:6d:c6:a8:47:90:aa:2f:d1 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:ee:a8:bc:31:44:7f:36:6d:c6:a8:47:90:aa:2f:d1
Serial Number (int): 11873012973566155302704807730574143441
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3e:75:c1:fc:2c:e7:91:09:4f:82:82:c9:b2:f0:9f:9e:96:c6:e5:7c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 73:e3:27:87:5c:5c:66:be:9d:36:25:1e:a1:d3:d6:48:5c:7d:72:12
Fingerprint (sha256): 56:cf:51:a9:1f:6e:0a:cc:73:d5:fa:0d:cf:e8:de:d4:f9:86:c1:5e:68:80:b2:f4:30:c9:ba:0a:a4:a4:89:64

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate bnp07s.bnpparibas.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zonacliente.cetelem.es
www.zonacliente.cetelem.es
www.wellmakerscoll.bnpparibas.it
www.wellmakerscoll.bnl.it
www.wellmakers.bnpparibas.it
www.wellmakers.bnl.it
www.welfarecoll.bnl.it
www.webdoc-senegal.bicisnet.net
www.ubcinet.net
www.temporaire-www.ubcinet.net
www.temporaire-www.bicisnet.net
www.serviciosweb.cetelem.es
www.reunion.bnpparibas.net
www.primebroker.com
www.pianopensione.bnl.it
www.france-titrisation.fr
www.france-titrisation.com
www.cvw.bnpparibas.com
www.cifact2.com
www.cifact.com
www.cetelem.es
www.cercle-actionnaires.bnpparibas.com
www.cercle-actionnaires.bnpparibas
www.bnpparibas.com.br
www.bnpparibas.com.ar
www.bicisnet.net
www.auto.cetelem.es
wellmakerscoll.bnpparibas.it
wellmakerscoll.bnl.it
wellmakers.bnpparibas.it
wellmakers.bnl.it
welfarecoll.bnl.it
webdoc-senegal.bicisnet.net
us-issuingandpaying.bnpparibas.com
ubcinet.net
temporaire-www.ubcinet.net
temporaire-www.bicisnet.net
temporaire-reunion.bnpparibas.net
stgreportdownloader.primebroker.com
stgmonitor.primebroker.com
stgbnpparibas.primebroker.com
stgbnpparibas-pb.primebroker.com
std07.formation.akatest.pilax.com
std07-eu.formation.akatest.pilax.com
staging.primebroker.com
ssorec.allfunds-bc.com
ssologinrec.bnpparibas.com
ssologin-bp2s.bnpparibas.com
sso.allfunds-bc.com
serviciosweb.cetelem.es
securitiescorp.bnpparibas.com
reunion.bnpparibas.net
primebroker.com
preprod.wearetennis.bnpparibas
postventaauto.cetelem.es
portalbr.us-cib-gtm.bnpparibas.com
pianopensione.bnl.it
mobileics.primebroker.com
isa.bnpparibas.com
ibpssobr.us-cib-gtm.bnpparibas.com
ib.bnpparibas.com.br
hsp-ppd.bnpparibas.com
god-rec.bnpparibas.com
geode.portail-investisseur.com
geode-bp2s.bnpparibas.com
gctabsreporting.bnpparibas.com
fundwebuat.bnpparibas.com
entreprises-ere.staging.bnpparibas.com
cvw.bnpparibas.com
connexisach.americas.bnpparibas.com
commodityfutures.bnpparibas.com
commodityfutures-rec.bnpparibas.com
cetelem.es
cercle-actionnaires.bnpparibas.com
cercle-actionnaires.bnpparibas
cdn.cercle-actionnaires.bnpparibas
cdn.backoffice.cercle-actionnaires.bnpparibas
cdn-preprod.wearetennis.bnpparibas
cdn-bo.wearetennis.bnpparibas
cdn-bo-preprod.wearetennis.bnpparibas
cdc.portail-investisseur.com
cdc-rec.portail-investisseur.com
bo.wearetennis.bnpparibas
bo-preprod.wearetennis.bnpparibas
bnpparibas.com.ar
bnpparibas-pb.primebroker.com
bnp07s.bnpparibas.com
bicisnet.net
bds-pb.bnpparibas.com
basic07.formation.akatest.pilax.com
basic07-eu.formation.akatest.pilax.com
backoffice.cercle-actionnaires.bnpparibas
auto.cetelem.es
authservices.smsps.bnl.it
authentication.staging.bnpparibas.com
archibus.smsps-coll.bnl.it

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLEgVrvDhclaqDBNlLpb
KdeDnNdoU+am8Md9RzznuhLoOqDnX90D5LBhRByrtOqsi4yERm3ESnIKAdgKe2RI
WxhSDfIjzRqrZmkAEpa7i6Oy2Y6XEr2IHhXV0142tKSAwQvM9j91INlea8Eh/IMm
180tbvRv/WM0AxGAUKEuXSHEzDSAG7qjkeQLNXEq12SMbI9BMGkeLmjFDWo1sVEB
NAHME9KPJkUlbUWJRjSSWFjttkNTfaVPsBO4Z5IPLCH2CVMFdfEHCLQItXxQ96ti
k/GGdx+nr8ScdQ0HD18bIyQHVGcxy3WKvWKimycNFCXvezkbw9JkCzxojxQn1cz9
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11873012973566155302704807730574143441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22810239139347099411880336680789363558921325033527509748811972095370217669518459130399213245253552539666852812534840203137105708139641556214899661549844707116798455127217035325284280869865637983540768405497844640073172096017627902206719428412473280608894927541151450544449550780115476043963476414818285439096219032096084147843234318760388298765655870357403789546263499585156021230125986706889730675079115956710090982382245108559620667476498859389502112220244564679012952108320968954547454925301428458054234318159640020791401992402403392614826404218237519732039222276619927234343925696713008711905850064293222509509937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e75c1fc2ce791094f8282c9b2f09f9e96c6e57c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2708 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporaire-www.ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgreportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std07.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std07-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssorec.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologinrec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologin-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiescorp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalbr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileics.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isa.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibpssobr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsp-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'god-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundwebuat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-rec.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bds-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic07.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic07-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authservices.smsps.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archibus.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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