digital-service.bankofscotland.co.uk

- Lloyds Banking Group PLC -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 41:4e:70:a9:4a:34:53:1d:25:4b:d1:b9:ca:68:fa:85:44:53:9c:7c was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Organization: Lloyds Banking Group PLC
Organization unit: Group IT
State / Province: Edinburgh, City of
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 41:4e:70:a9:4a:34:53:1d:25:4b:d1:b9:ca:68:fa:85:44:53:9c:7c
Serial Number (int): 372833672411413881340302892104753154355023289468
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: c6:93:c6:a5:f3:09:b6:08:c1:45:d6:a5:fb:ba:6f:fa:78:0b:f5:54
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): b8:1e:26:04:fa:b7:70:1f:e8:55:6d:4e:d5:6b:92:1a:a1:43:b9:8d
Fingerprint (sha256): 00:35:91:87:d6:21:a3:41:81:f1:da:3f:74:fd:0a:a5:0f:a1:b6:aa:01:fe:8a:c2:33:d3:5e:9b:57:5c:8e:82

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate digital-service.bankofscotland.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digital-service.bankofscotland.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital-service.bankofscotland.co.uk

Other certificates including the domain name bankofscotland.co.uk

(limited to 100 certificates)
digital-service.bankofscotland.co.uk
szervizek.carglass.hu
prehome-insurance.lloydsbank.com
secure-channel-api.lloydsbank.com
nftinfra-authorise.lloydsbank.co.uk
cbcdn.bankofscotland.co.uk
cbcdn.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
homeinsurance-claims.bankofscotland.co.uk
lbgibmorigin.developer.lloydsbank.com
homeinsuranceclaims.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-01.lloydsbank.com
du.lloydsbank.co.uk
cem.lloydsbank.co.uk
community.bankofscotland.co.uk
cem.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-702.lloydsbanking.com
isite.bankofscotland.co.uk
trust-digital.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
businessonboarding.preview.bankofscotland.co.uk
secure-business.bankofscotland.co.uk
businessdocumentation.bankofscotland.co.uk
citymaincardlossassistanceuat.bankofscotland.co.uk
home-insurance.lloydsbank.com
lbgibmorigin.api.lloydsbank.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
nftinfra-authorise-api.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
banking.bankofscotland.co.uk
amconline.co.uk
luat-channel-retail-auth-api.lloydsbank.co.uk
images.bankofscotland.co.uk
nft-api.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
check2.bankofscotland.co.uk
nft-channel-retail.auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
check2.bankofscotland.co.uk
SCEP-DESKTOP-PROD-01.lloydsbank.com
sit01-channel-retail-auth.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PROD-01.lloydsbank.com
apply.lloydsbank.co.uk
apis-b.bankofscotland.co.uk
pre-authorise-api.lloydsbank.co.uk
trust-digital.bankofscotland.co.uk
luat-docupload-digital.bankofscotland.co.uk
secure.form.bankofscotland.co.uk
cbsecure-sit6.bankofscotland.co.uk
tpp-authorise-api.lloydsbank.com
apio.bankofscotland.co.uk
images.bankofscotland.co.uk
luat-api.lloydsbank.com
images.bankofscotland.co.uk
bluat02-docupload-trust.digital.bankofscotland.co.uk
developer.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
online.lloydsbank.co.uk
cdn.bankofscotland.co.uk
SCEP-DESKTOP-PROD-01.lloydsbank.com
luat-api.lloydsbank.com
citymaincardlossassistance.bankofscotland.co.uk
secure-api.lloydsbank.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
cbsecure.bankofscotland.co.uk
cbonline.bankofscotland.co.uk
businessonboarding.preview.bankofscotland.co.uk
share.lloydsbank.co.uk
secure.bankofscotland.co.uk
pre-authorise-api.lloydsbank.co.uk
www.amconline.co.uk
www.investments.bankofscotland.co.uk
bcdn-16c9d93d.lloydsbank.co.uk
luat-authorise.lloydsbank.co.uk
apis.bankofscotland.co.uk
pre-channel-retail-auth.lloydsbank.co.uk
nft-api.lloydsbank.com
answers-embed.reseau-stan.com.pagescdn.com
apis-b.bankofscotland.co.uk
nft-api.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
idverify.lloydsbank.co.uk
prehome-insurance.lloydsbank.com
lbgibmorigin.luat-api.lloydsbank.com
home-insurance.lloydsbank.com
sit-channel-retail-auth.lloydsbank.co.uk
cbstats.bankofscotland.co.uk
apio-b.bankofscotland.co.uk
channel-api.lloydsbank.co.uk
apis.bankofscotland.co.uk
businessdocumentation.preview.lloydsbank.co.uk
luat-developer.lloydsbank.com
cbonline-sit4-6.bankofscotland.co.uk
businesslending-02.bankofscotland.co.uk
lbgibmorigin.nft-api.lloydsbank.com
idverify.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
lbgibmorigin.luat-api.lloydsbank.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com

Certificate

The complete raw certificate details for digital-service.bankofscotland.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X6mXtBUJ6KAUbRjDGP5
DMcsKUcn3r/npTFVOQTLwLQIuyV5XFkgRZUR1QFRb+51dPBhSAekyjuljG0wSJKX
Toor2Q1XCUQYWeoW8S0J5oIaM0KIjiLX46MSE4334YQHMFLCBDivnF9M2Ty7WNhR
dRIAiPGrgAsPJLpsc7MwlYLVKEe0KFJcqCSyWX7aXVL1mDpUoc97i+U41zR6rCJq
NnkQkX75lsbSa+p8ItNJiAfHJFH/18U2AU7qfBQN8zgoj/SPh3GnipBlsuXOa8Tt
mjWmFwLiniovrjbL6Qv5I3erX9wqaBvSXD6ITs4q5drVjBKO5Ili29hPEzmJ4Ypz
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372833672411413881340302892104753154355023289468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 14:25:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 14:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Group IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'digital-service.bankofscotland.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26951212343360529478104203226011811105200863666328514752145973495442702971197088138218753416256756043366879724938155575519740033472353497318419259372239091554181770764241797624251152898693974245981410290571206360804841936822883592005237438938641135600885145167878315157729670737301034272010078969701514619848284014925577524955278348435897174289577969110857392779232529119813161479781027787012448884006950915785729363220131788395352996855631547861477955484270585436724589767473578005678720326634456919398908701059766903388017453627491943531193426283913282212319613413753629609540984142381760774297280305271194671281143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-service.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c693c6a5f309b608c145d6a5fbba6ffa780bf554
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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