bnp07s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:ab:ee:f8:17:97:6f:6c:1c:24:68:64:78:ea:79:ef was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ab:ee:f8:17:97:6f:6c:1c:24:68:64:78:ea:79:ef
Serial Number (int): 12855781594244900217338165649784601071
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 77:66:b3:b1:c8:86:b6:2c:42:32:0f:45:21:c4:1f:08:a7:bd:91:5e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): b5:f4:d5:e5:9b:5b:02:77:2d:64:dd:bc:1d:d1:0d:d7:f4:a5:4b:42
Fingerprint (sha256): 66:72:0e:14:e6:60:d6:8f:d0:6e:b1:d1:26:33:f9:b0:ca:23:c1:a4:27:8d:5e:4f:8e:13:07:68:6a:cc:e3:b7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp07s.bnpparibas.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp07s.bnpparibas.com
zonacliente.cetelem.es
www.zonacliente.cetelem.es
www.wellmakerscoll.bnpparibas.it
www.wellmakerscoll.bnl.it
www.wellmakers.bnpparibas.it
www.wellmakers.bnl.it
www.welfarecoll.bnl.it
www.webdoc-senegal.bicisnet.net
www.ubcinet.net
www.temporaire-www.ubcinet.net
www.temporaire-www.bicisnet.net
www.staging.primebroker.com
www.serviciosweb.cetelem.es
www.reunion.bnpparibas.net
www.primebroker.com
www.pianopensione.bnl.it
www.france-titrisation.fr
www.france-titrisation.com
www.cvw.bnpparibas.com
www.cifact2.com
www.cifact.com
www.cetelem.es
www.cercle-actionnaires.bnpparibas.com
www.cercle-actionnaires.bnpparibas
www.bnpparibas.com.br
www.bnpparibas.com.ar
www.bicisnet.net
www.auto.cetelem.es
wellmakerscoll.bnpparibas.it
wellmakerscoll.bnl.it
wellmakers.bnpparibas.it
wellmakers.bnl.it
webdoc-senegal.bicisnet.net
us-issuingandpaying.bnpparibas.com
ubcinet.net
temporaire-www.bicisnet.net
temporaire-reunion.bnpparibas.net
stgreportdownloader.primebroker.com
stgmonitor.primebroker.com
stgges-pb.bnpparibas.com
stgbnpparibas.primebroker.com
stgbnpparibas-pb.primebroker.com
stgapi.primebroker.com
staging.primebroker.com
ssorec.allfunds-bc.com
ssologinrec.bnpparibas.com
ssologin-bp2s.bnpparibas.com
sso.allfunds-bc.com
serviciosweb.cetelem.es
securitiesservices.bnpparibas.com.br
securitiescorp.bnpparibas.com
reunion.bnpparibas.net
reportdownloader.primebroker.com
primebroker.com
preprod.wearetennis.bnpparibas
postventaauto.cetelem.es
pianopensione.bnl.it
ib.bnpparibas.com.br
god-rec.bnpparibas.com
geode.portail-investisseur.com
geode-bp2s.bnpparibas.com
gctabsreporting.bnpparibas.com
fxpb.bnpparibas.com
fundwebuat.bnpparibas.com
entreprises-ere.staging.bnpparibas.com
cvw.bnpparibas.com
connexisach.americas.bnpparibas.com
commodityfutures.bnpparibas.com
commodityfutures-rec.bnpparibas.com
cetelem.es
cercle-actionnaires.bnpparibas.com
cercle-actionnaires.bnpparibas
cdn.cercle-actionnaires.bnpparibas
cdn.backoffice.cercle-actionnaires.bnpparibas
cdn-preprod.wearetennis.bnpparibas
cdn-bo.wearetennis.bnpparibas
cdn-bo-preprod.wearetennis.bnpparibas
cdc.portail-investisseur.com
cdc-rec.portail-investisseur.com
bo.wearetennis.bnpparibas
bo-preprod.wearetennis.bnpparibas
bnpparibas.primebroker.com
bnpparibas.com.ar
bnpparibas-pb.primebroker.com
bicisnet.net
backoffice.cercle-actionnaires.bnpparibas
auto.cetelem.es
authservices.smsps.bnl.it
authentication.staging.bnpparibas.com
api.primebroker.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fbeTcEqDQ57+RIl90s7
IHKmf1TVOMZMzk8SyRMnGsJmpZCjbGkVamr+h2iIQmjgbtDtzs6ta0bW3crkSYgw
BiVGjQoAtTybTPu6XdGLdCUf6C7wCWLMBPIuEH4zKrgr65LCMH2eb4mmWcAKgy1o
chGHOurUkuS7PCa30pv+gGVxZD1bz6g9GKQd0BOp5xCbbD2yS8A0MgCogi+oL9b2
9q6CGy19NWwryHDQE03Bmqk4NZpDOug+jSlELVGIQ80UM06qhzERr9cYEHlIAbeQ
1Y7cZ+sedo6Wy5phWhCG0VBWA1Utq87JMairEE+/HwfdNWoYzfn4Edpy4g19KfJH
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12855781594244900217338165649784601071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27515447509962625912652536574209574101481011968474267386023838409859725546177674912691290098461106589497325828927986321612139421720876325209024820461701077158003168921214673097297133261402772013542072103591479786944205419313216760585154124933287609547635618630124247339783134605147472561075975942399212441644772657214755048083282979769570477733983060749072343569505893046756212927570959522050527775540113766125881132786957637520040457203743806339041633785195388856024589019719920377733237489614687936588237376933743947291878379447252108540808280549625965430113803717018143058948235188987933036584881446475685881333607
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7766b3b1c886b62c42320f4521c41f08a7bd915e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2537 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporaire-www.ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgreportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgapi.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssorec.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologinrec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologin-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesservices.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiescorp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'god-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundwebuat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-rec.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authservices.smsps.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.primebroker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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