securitiesservices.bnpparibas.com.br

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 8e:7d:69:cb:7f:81:e5:e3:00:00:00:00:50:e8:49:73 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8e:7d:69:cb:7f:81:e5:e3:00:00:00:00:50:e8:49:73
Serial Number (int): 189401558284561914514338553325532236147
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c2:45:92:3e:5a:42:79:94:eb:94:b1:d2:d0:99:32:10:8d:1d:45:6e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f7:85:94:0f:c9:64:b5:d5:d9:60:c6:74:ec:cf:07:ca:e3:db:39:6d
Fingerprint (sha256): 67:d9:3f:91:7f:f2:8a:88:e3:38:b4:36:e7:7f:d1:b2:35:45:5b:98:01:86:4d:df:48:42:63:49:c7:30:35:11

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate securitiesservices.bnpparibas.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securitiesservices.bnpparibas.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securitiesservices.bnpparibas.com.br
portalssbr.us-cib-gtm.bnpparibas.com

Other certificates including the domain name bnpparibas.com.br

(limited to 100 certificates)
www.bnpparibas.com.br
bnp07s.bnpparibas.com
www2.bnpparibas.com.br
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
securitiesservices.bnpparibas.com.br
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
www.bnpparibas.com.br
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
ib.bnpparibas.com.br
www2.bnpparibas.com.br
bnp08s.bnpparibas.com
www.bnpparibas.com.br
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
www2.bnpparibas.com.br
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
www.bnpparibas.com.br
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
ww3.bnpparibas.com.br
securitiesservices.bnpparibas.com.br
portaldigital-staging.bnpparibas.com.br
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
www2.bnpparibas.com.br
bnp07s.bnpparibas.com
ib.bnpparibas.com.br
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
ww3.bnpparibas.com.br
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
ib.bnpparibas.com.br

Certificate

The complete raw certificate details for securitiesservices.bnpparibas.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr+Oq9x9ER9HSHoTj7AN
Iuiu1jKzQRX4X4AA/WruwsPSRDLPHtTmDC7vRwvfXU64d/MmLr9XovUkViidSgEQ
delpIEjiQZ7k/8yKwSPXdq2zXNXrsiYGCKijOGQS+HzA2E5+E/eiL7Splh0JttoI
tEFwPO1fr6BWQ22J9vl+lDLqIhPXhvJnGsYXH99lhyRGNJ6JdWMwYgPHF338PepV
XWxL+NG18jMJ4qMKsgfk8UkFnEweDM168TerT3c7ZQ/wsJqMhlQtA1AFcRdNiFil
1Tlz+HXxboiSrL1+WDuLkjrCOBi2ySWvhfaaEr5prULFbgWUxzEFsVB4TWD9AAKX
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189401558284561914514338553325532236147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-02 13:24:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-02 13:54:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securitiesservices.bnpparibas.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19030206175006495545121184931080899483246006145969891319209514465414585973482644482499566199868822087289260029771363788195803859675050878861810075521595993334631648438935175686705703975104457991582333417807687360185507038201180854398345588736330644660005583625251533199054404238517340058362698258727994538641615381908488609379852265945080879793482946378361558215778033650204571574590167738299532553035746508436593715340506949479515551217986461735410431806745001792170378231702300265611042077149726360540668720507857060140058068900273046741609701413525776796859041337471627873510048100381625176804610326827488942135209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesservices.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalssbr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c245923e5a427994eb94b1d2d09932108d1d456e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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