citymaincardlossassistanceuat.bankofscotland.co.uk

- Lloyds Banking Group PLC -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 19:91:88:e6:f5:5d:37:d5:ad:73:de:0a:5b:65:13:2a:d1:fe:df:34 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Organization: Lloyds Banking Group PLC
Organization unit: Packaged Accounts Benefit
State / Province: Edinburgh, City of
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 19:91:88:e6:f5:5d:37:d5:ad:73:de:0a:5b:65:13:2a:d1:fe:df:34
Serial Number (int): 145970303186358914707697739456799578403907755828
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 05:f3:81:1f:54:81:55:ae:6d:15:93:4d:ce:01:29:e7:03:32:e0:68
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 09:91:2e:8e:95:72:23:f1:a0:c0:7e:8c:61:f9:46:1e:03:72:34:55
Fingerprint (sha256): 03:52:bd:b0:ee:e4:d8:d9:fa:d2:63:93:11:c8:92:04:21:cf:0a:c7:04:4a:e0:3d:09:8d:c5:a8:c8:1e:0a:32

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate citymaincardlossassistanceuat.bankofscotland.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for citymaincardlossassistanceuat.bankofscotland.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

citymaincardlossassistanceuat.bankofscotland.co.uk

Other certificates including the domain name bankofscotland.co.uk

(limited to 100 certificates)
digital-service.bankofscotland.co.uk
szervizek.carglass.hu
prehome-insurance.lloydsbank.com
secure-channel-api.lloydsbank.com
nftinfra-authorise.lloydsbank.co.uk
cbcdn.bankofscotland.co.uk
cbcdn.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
homeinsurance-claims.bankofscotland.co.uk
lbgibmorigin.developer.lloydsbank.com
homeinsuranceclaims.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-01.lloydsbank.com
du.lloydsbank.co.uk
cem.lloydsbank.co.uk
community.bankofscotland.co.uk
cem.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-702.lloydsbanking.com
isite.bankofscotland.co.uk
trust-digital.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
businessonboarding.preview.bankofscotland.co.uk
secure-business.bankofscotland.co.uk
businessdocumentation.bankofscotland.co.uk
citymaincardlossassistanceuat.bankofscotland.co.uk
home-insurance.lloydsbank.com
lbgibmorigin.api.lloydsbank.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
nftinfra-authorise-api.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
banking.bankofscotland.co.uk
amconline.co.uk
luat-channel-retail-auth-api.lloydsbank.co.uk
images.bankofscotland.co.uk
nft-api.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
check2.bankofscotland.co.uk
nft-channel-retail.auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
check2.bankofscotland.co.uk
BCS-PROD-01.lloydsbanking.com
SCEP-DESKTOP-PROD-01.lloydsbank.com
sit01-channel-retail-auth.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PROD-01.lloydsbank.com
apply.lloydsbank.co.uk
apis-b.bankofscotland.co.uk
pre-authorise-api.lloydsbank.co.uk
trust-digital.bankofscotland.co.uk
luat-docupload-digital.bankofscotland.co.uk
secure.form.bankofscotland.co.uk
cbsecure-sit6.bankofscotland.co.uk
tpp-authorise-api.lloydsbank.com
apio.bankofscotland.co.uk
images.bankofscotland.co.uk
luat-api.lloydsbank.com
images.bankofscotland.co.uk
bluat02-docupload-trust.digital.bankofscotland.co.uk
developer.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
online.lloydsbank.co.uk
cdn.bankofscotland.co.uk
SCEP-DESKTOP-PROD-01.lloydsbank.com
luat-api.lloydsbank.com
citymaincardlossassistance.bankofscotland.co.uk
secure-api.lloydsbank.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
cbsecure.bankofscotland.co.uk
cbonline.bankofscotland.co.uk
businessonboarding.preview.bankofscotland.co.uk
share.lloydsbank.co.uk
secure.bankofscotland.co.uk
pre-authorise-api.lloydsbank.co.uk
www.amconline.co.uk
www.investments.bankofscotland.co.uk
bcdn-16c9d93d.lloydsbank.co.uk
luat-authorise.lloydsbank.co.uk
apis.bankofscotland.co.uk
pre-channel-retail-auth.lloydsbank.co.uk
nft-api.lloydsbank.com
answers-embed.reseau-stan.com.pagescdn.com
apis-b.bankofscotland.co.uk
nft-api.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
idverify.lloydsbank.co.uk
prehome-insurance.lloydsbank.com
lbgibmorigin.luat-api.lloydsbank.com
home-insurance.lloydsbank.com
sit-channel-retail-auth.lloydsbank.co.uk
cbstats.bankofscotland.co.uk
apio-b.bankofscotland.co.uk
channel-api.lloydsbank.co.uk
apis.bankofscotland.co.uk
businessdocumentation.preview.lloydsbank.co.uk
luat-developer.lloydsbank.com
cbonline-sit4-6.bankofscotland.co.uk
businesslending-02.bankofscotland.co.uk
lbgibmorigin.nft-api.lloydsbank.com
idverify.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
lbgibmorigin.luat-api.lloydsbank.com

Certificate

The complete raw certificate details for citymaincardlossassistanceuat.bankofscotland.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zAjIsjNfDoqLjMrXPe6
nG4/BB9ibTmTV5xdTBTj3XxpB//Hwq580x0qTvgW5thema/oyBFqY6NUe0Ic9G/R
YYSyttYQ0Pfgf20mM35i9Ykajrrsgv/YGzNysI64OxqEe4Ph3GS33yaNuI+aKAVL
GWotlK+w8Bn33a0AJmYUt86lr0bq+z3ACBckWa5eiiM0/LDZfbfElakAgpHkme9v
hWEZnNoKdecq6k0F/yCb/14fPsHUkYRjVvacEh8J135Z4lQxKgXX7TGAUi3stcYk
NmEV1OtewilKL4dijoi0EmJGd9B6kwtZV+8UFjiAUWPIV5JT/i0onXefx0wRLsF+
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145970303186358914707697739456799578403907755828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 15:28:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-08 15:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Packaged Accounts Benefit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'citymaincardlossassistanceuat.bankofscotland.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29689739029464518775184564120074074998643544444687689659314963245525601321631811394980961398762531853783582245866525542636302469316875566902094675267729238757903442754719966110158823105224014246665734892639363684790456263551750221121013889131392036873387156566907222266775391885638741144113590510038805565720325783290235576958400802856532336742572456643861772815377704859649425786784125231238069434405681767010407482535497474182166620014278662485922770448235594933887933695492494673490723063618011512180407696252446776616362672103594433248244618008431435330024063017703575624950239866534080284703487195134601170353779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citymaincardlossassistanceuat.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05f3811f548155ae6d15934dce0129e70332e068
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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