BCS-PROD-01.lloydsbanking.com

- Lloyds Banking Group PLC -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 06:1b:a4:ba:53:ea:9a:6d:72:17:16:3c:9c:0b:64:04 was issued on by DigiCert Inc.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Lloyds Banking Group PLC

Company registration number: SC095000
Organization: Lloyds Banking Group PLC
Locality: Edinburgh
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:1b:a4:ba:53:ea:9a:6d:72:17:16:3c:9c:0b:64:04
Serial Number (int): 8118901067474035830825479496058758148
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d7:96:cf:c9:a8:ad:0a:59:d6:bf:e3:8a:ee:66:b2:9b:ea:4b:b0:91
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 7e:33:56:f2:ed:4b:4e:fb:22:f1:f0:96:d6:f8:a5:ef:77:b0:ae:5e
Fingerprint (sha256): 06:5c:ff:76:30:73:66:89:27:f5:9a:62:2b:53:81:73:4f:5f:6f:a6:71:6b:7c:7c:4d:0b:cc:58:69:93:b4:fb

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate BCS-PROD-01.lloydsbanking.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for BCS-PROD-01.lloydsbanking.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

BCS-PROD-01.lloydsbanking.com
cbsecure-lp.lloydsbank.com
cbsecure-lp.bankofscotland.co.uk
cbonline-lp.lloydsbank.com
cbonline-lp.bankofscotland.com
cbonline-lp.bankofscotland.co.uk
api.businessfinanceassistant.bankofscotland.co.uk
businessfinanceassistant.bankofscotland.co.uk
api.businessfinanceassistant.lloydsbank.com
businessfinanceassistant.lloydsbank.com
auth.cashflowcontrolonline.lloydsbanking.com
cashflowcontrolonline.lloydsbanking.com

Other certificates including the domain name lloydsbanking.com

(limited to 100 certificates)
tpp-developer.lloydsbanking.com
LBGITQMgr.S4UCTZQ2.lloydsbanking.com
lbgibm-apigateway.lloydsbanking.com
LBGITWMQClient.LLL-PROD-APP01.lloydsbanking.com
tpp-developer.lloydsbanking.com
cs-api-pentesterone-PRD.lloydsbanking.com
ms-api-connectedfi-TST.lloydsbanking.com
CDNK00.lloydsbanking.com
CDNK00.lloydsbanking.com
Sharepoint-Hybrid-Search-STS-live.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-702.lloydsbanking.com
cs-api-blueMotor-TST.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-703.lloydsbanking.com
test1-jira.devops.lloydsbanking.com
dre-out.lloydsbanking.com
APPTTVIRTUAL08A-ext.lloydsbanking.com
adfstest01global2.lloydsbanking.com
visanotify-u.lloydsbanking.com
cs-api-chrisspencer-TST.lloydsbanking.com
ms-api-bluemotor.lloydsbanking.com
Sharepoint-Hybrid-Search-STS-test.lloydsbanking.com
debtmanagergonft.lloydsbanking.com
snowinboundapi-tpbt.lloydsbanking.com
cs-api-ume-PRD.lloydsbanking.com
cs-api-afapi-PRD.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
neso.styx.lloydsbanking.com
CD.INFRP1001-to-CALLCREDIT02.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
debtmanagergopre-prod.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
sapd-callsign-dp-prod.lloydsbanking.com
jira.devops.lloydsbanking.com
BCS-PROD-01.lloydsbanking.com
visanotify-u.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-701.lloydsbanking.com
APPLGVIRTUAL2F5_to_COPLBGCDTL01.lloydsbanking.com
MVSA.lloydsbanking.com
emm-mail-nft.lloydsbanking.com
cs-api-pentesterthree-PRD.lloydsbanking.com
tpp-developer.lloydsbanking.com
CD.UNX.BASPC218-to-REISPRDAPPA387.lloydsbanking.com
BRVSWIDB1080.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
cs-api-1146533-PRD.lloydsbanking.com
CDRLSPET03C001-ext.lloydsbanking.com
sapd-callsign-dp-sit.lloydsbanking.com
developer.lloydsbanking.com
lbg-workday-sign-test.lloydsbanking.com
fuspxx.finance.lloydsbanking.com
ms-api-dcapilab-TST.lloydsbanking.com
debtmanagercommercial.lloydsbanking.com
pilot.styx.lloydsbanking.com
ss-9885991-test.lloydsbanking.com
delta.tpsa.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
bas-d-120.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-701.lloydsbanking.com
BRVSWIDB3086.lloydsbanking.com
CD.UNX.APPLV05B6-EXT.lloydsbanking.com
hybrid.pp.lloydsbanking.com
Prod-G313-REED-Recruitment.lloydsbanking.com
Adfsglobal2.lloydsbanking.com
adfsglobal2.lloydsbanking.com
CD.UNX.BASPC218.EXT.lloydsbanking.com
eia2.digital.lloydsbanking.com
sapd-callsign-dp-oat.lloydsbanking.com
ibmoffpc-lb-b2bout.test.lloydsbanking.com
ms-api-AFTEAM-TST.lloydsbanking.com
currency-ib-pp.lloydsbanking.com
nftinfra-developer.lloydsbanking.com
cs-api-pendragonplc-PRD.lloydsbanking.com
dexter-int.lloydsbanking.com
luat-lbgibm-microservices-branch.lloydsbanking.com
LBGITWMQClient.LLL-PROD-APP02.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-201.lloydsbanking.com
ms-api-hlpensiontrusteesltd.lloydsbanking.com
syndicate.lloydsbanking.com
CD.UNX.BASPC202-EXT.lloydsbanking.com
snowoutboundapi-tpbt.lloydsbanking.com
dre.extranet.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
snowoutboundapi-tpcc.lloydsbanking.com
pre-secure-channel-api.lloydsbank.com
ms-api-9507391.lloydsbanking.com
www.luc-te5.lloydsbanking.com
debtmanagergo.lloydsbanking.com
APPTGVIRTUAL013-to-SIG.BAS.TCB.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-201.lloydsbanking.com
secure-channel-api.lloydsbank.com
ms-api-newcross.lloydsbanking.com
CD.AIX.BASPC63-to-FTPLCWL001.lloydsbanking.com
cs-api-9406012-PRE.lloydsbanking.com
cs-api-feedzai-TST.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-101.lloydsbanking.com
adfsiaglobal1.lloydsbanking.com
ms-api-feedzai.test.lloydsbanking.com
hybrid.dt.lloydsbanking.com
lbgibm-microservices-branch.lloydsbanking.com

Certificate

The complete raw certificate details for BCS-PROD-01.lloydsbanking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42NtPGBRFezEF7TCdge5
Jj6MDk8qT5y/XTn971PqPRXHxIz3a24WYzyIQcLGmUZnwSyDWR6/CSLYkIRYjlZn
bmUnyhumLvUhEudJ3RlJveJXa74+Q9x3ZuiLVNLiWDDVpxEb5Wt+OYB1nL4x/mu0
uMwI8Nad5Li8mCr9Jbxc4umKD4F1g0zF2J0zfdmdXgbuCbzT6D5CF2oV7LU/TJR7
DGxk5vJXltArai6hBkKqPzWhNJegaozNxgASQQRHlH1jD0ejRpYadndvBnsjIbIF
i69GsPPloqxyddX6OgJYJx/I3uX7Koku+VSLoUS81aeLRGgjtFSnXPenQrJ1U3is
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8118901067474035830825479496058758148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SC095000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BCS-PROD-01.lloydsbanking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28705124361647927624298636572807089234084917605109808615212215511139417851470433427068335902774651089671515333574388378750720804056366148780283047750859054418783769079768299178703073611114120207371805712786427686681245536159853836288255931216305062264357626202715100044636636587670467506758888714453008577599620240657065003989995524132584815696087710070702070274137304998141876067561730889568829136635048875887704036341727346541815502258868584114423740781909527503212728888407056713515623669197133657333310489532894280722796321476823631415170269679919465425898056587646548625774365378133475741664771244638098863729819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d796cfc9a8ad0a59d6bfe38aee66b29bea4bb091
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (462 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'BCS-PROD-01.lloydsbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsecure-lp.lloydsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbsecure-lp.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbonline-lp.lloydsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbonline-lp.bankofscotland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbonline-lp.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.businessfinanceassistant.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessfinanceassistant.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.businessfinanceassistant.lloydsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessfinanceassistant.lloydsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.cashflowcontrolonline.lloydsbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashflowcontrolonline.lloydsbanking.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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