bnp10s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 02:fb:8b:d1:4c:72:d8:2b:5b:f0:db:a9:98:7a:d8:77 was issued on by DigiCert Inc.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:fb:8b:d1:4c:72:d8:2b:5b:f0:db:a9:98:7a:d8:77
Serial Number (int): 3964558340342645664857878953002195063
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 30:47:7d:19:20:ee:c2:1b:61:21:86:1a:a4:bf:c4:2f:7f:5b:04:f8
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 34:77:99:6e:89:f1:29:1a:68:ef:58:30:a2:23:13:fe:7a:c1:2a:3d
Fingerprint (sha256): 5f:05:93:6b:9e:e9:57:3f:f8:fe:25:30:4f:5c:c7:b4:a3:63:f9:1e:e2:e0:78:34:25:92:29:2d:98:cc:28:ba

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp10s.bnpparibas.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp10s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp10s.bnpparibas.com
www.webdoc.staging.bicicinet.net
www.webdoc-sn.staging.bicisnet.net
www.webdoc-sn.bnpparibas.com
www.webdoc-sn.bicisnet.net
www.webdoc-dz.staging.bnpparibas.net
www.webdoc-ci.bnpparibas.com
www.webdoc-ci.bicicinet.net
www.staging.nickel.eu
www.qualif.domofinance.com
www.preprod.domofinance.com
www.pass-portal.staging.bnpparibascardif.it
www.accountx2ca.bnl.it
ws-ext-webapptibco.staging.nickel.eu
ws-ext-webapptibco.preprod.nickel.eu
ws-ext-pinsms.staging.nickel.eu
ws-ext-pinsms.preprod.nickel.eu
ws-ext-onfido.preprod.nickel.eu
ws-ext-onfido.nickel.eu
ws-ext-monext.preprod.nickel.eu
ws-ext-monext-tokenizer.staging.nickel.eu
ws-ext-monext-tokenizer.preprod.nickel.eu
ws-ext-monext-tokenizer.nickel.eu
ws-ext-infobip.staging.nickel.eu
ws-ext-infobip.preprod.nickel.eu
ws-ext-esendex.staging.nickel.eu
ws-ext-esendex.preprod.nickel.eu
widgets.staging.compte-nickel.fr
widgets.preprod.compte-nickel.fr
webdoc.staging.bicicinet.net
webdoc-sn.staging.bicisnet.net
webdoc-sn.bnpparibas.com
webdoc-sn.bicisnet.net
webdoc-dz.staging.bnpparibas.net
webdoc-ci.bnpparibas.com
webdoc-ci.bicicinet.net
telepassxbiz.it
telepassxbiz.com
tabletnickel-service.abm-uid.com
tablet-nickel.staging.abm-uid.com
tablet-nickel.preprod.abm-uid.com
sygma-esignrc.bnpparibas-pf.com
signature.cetelem.fr
signature-vad.domofinance.com
qualif.domofinance.com
prescripteur.signature.neuges.org
preprod.domofinance.com
pass-portal.staging.bnpparibascardif.it
partinst-esignrc.bnpparibas-pf.com
partenaires.qualif.domofinance.com
partenaires.preprod.domofinance.com
mpad-prod.staging.abm-uid.com
mpad-prod.preprod.abm-uid.com
mon-alpha.compte-nickel.fr
mobileservices2.bgl.lu
mobile.preprod.domofinance.com
fzw.bnpparibas.com
fzw-ppd.bnpparibas.com
filebox.smsps-coll.bnl.it
etranplus.bnpparibas.com
emprunteur.signature.neuges.org
devenir-distributeur.staging.compte-nickel.fr
devenir-distributeur.preprod.compte-nickel.fr
customer-registration-control-bo.abm-uid.com
customer-registration-admin-api.abm-uid.com
customer-call-center-api.abm-uid.com
courtier-sygma-esignrc.bnpparibas-pf.com
cetelem-esignrc.bnpparibas-pf.com
cdc-archive.portail-investisseur.com
bo-nickel.preprod.abm-uid.com
bo-nickel-alpha.abm-uid.com
auto.signature.neuges.org
api-gtw.dev.nickel.eu
agw-services.staging.bnpparibascardif.it
accountx2ca.bnl.it

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp10s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPv1qwNoMaqQYXD6dHLq
5efVEA8KveLNQ5vCwS6CTFbhMj/XFnpj26gfwoXjBZE02Z3Hbjy1rNwIrt70bSzR
XGQMjj8rfuSZEUbMjv7SAaAeHNIwDnpJ6o9QV2iTa9nQ8VGxmiaf1LlulJqcWNDM
mrbnT4iQfO3LL1lar1AObAKxUuYwGsyQg8bVQvP3F5bU1RUniPgzmyRWH6jCFnvM
orgJRg/4CGw3BSPXyuF5BWpSWvIRx6CuZc8SYbsU08tenPRqFQvXyf1KgyxUpRWa
CZqHftAMhnNXEuwdKbU9nYyehHVSwQ/pbL7+XVE9StZn8U44ZZGQgm8Q4CpM9IZD
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3964558340342645664857878953002195063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp10s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22847140823431891802947587984492428065297758980461790750093174077243496407395863784403563600116509171667145339454214363977770322951472208966786703784173651118063472021040892409484668876700912471592089368410269080727777632852224602771827539846943397484338740764948310756468535081273447512176477555063504724309756069312023770267610945822972632905027453535658086471557031241762228823879413397310379075460369022124856310590244962677770956021422504073188413665734334411873783091210994715223248504199692202228924651473439534652628099939910425447556302029499726328376720619473355325158291012352659997006255010686947058664261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30477d1920eec21b6121861aa4bfc42f7f5b04f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2401 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp10s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc.staging.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.staging.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc.staging.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.staging.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletnickel-service.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-alpha.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices2.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebox.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-control-bo.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-admin-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-call-center-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-archive.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel-alpha.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.dev.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agw-services.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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