apis-b.bankofscotland.co.uk

- Lloyds Banking Group PLC -

Issued by QuoVadis EV SSL ICA G1

About this certificate

This digital certificate with serial number 77:c1:0d:54:9d:5d:52:ea:e5:75:2c:fc:80:61:84:6f:cf:e5:0f:fc was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Company registration number: SC095000
Organization: Lloyds Banking Group PLC
Organization unit: IT Security
State / Province: Edinburgh
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 77:c1:0d:54:9d:5d:52:ea:e5:75:2c:fc:80:61:84:6f:cf:e5:0f:fc
Serial Number (int): 683675106803962608606164634920860686984472236028
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 62:dd:54:b8:92:58:39:32:20:17:1b:14:58:ba:97:86:09:7c:f4:45
AuthorityKeyId: 55:58:86:ce:ba:7c:76:4e:99:13:a9:0f:d3:6c:9f:c2:f5:d3:3c:e3

Fingerprint (sha1): 24:c1:96:0f:86:f3:d9:37:66:72:0c:84:4f:9c:62:f1:c3:aa:a8:69
Fingerprint (sha256): 06:c7:a3:cd:71:a1:2c:7b:0d:0b:4a:52:b6:88:20:db:63:b1:8a:fd:c9:a5:3e:52:8e:16:cb:83:56:fa:1b:08

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevssl1.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevssl1.crl

Check the revocation status for certificate apis-b.bankofscotland.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apis-b.bankofscotland.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apis-b.bankofscotland.co.uk

Other certificates including the domain name bankofscotland.co.uk

(limited to 100 certificates)
digital-service.bankofscotland.co.uk
szervizek.carglass.hu
prehome-insurance.lloydsbank.com
secure-channel-api.lloydsbank.com
nftinfra-authorise.lloydsbank.co.uk
cbcdn.bankofscotland.co.uk
cbcdn.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
homeinsurance-claims.bankofscotland.co.uk
lbgibmorigin.developer.lloydsbank.com
homeinsuranceclaims.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-01.lloydsbank.com
du.lloydsbank.co.uk
cem.lloydsbank.co.uk
community.bankofscotland.co.uk
cem.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-702.lloydsbanking.com
isite.bankofscotland.co.uk
trust-digital.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
businessonboarding.preview.bankofscotland.co.uk
secure-business.bankofscotland.co.uk
businessdocumentation.bankofscotland.co.uk
citymaincardlossassistanceuat.bankofscotland.co.uk
home-insurance.lloydsbank.com
lbgibmorigin.api.lloydsbank.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
nftinfra-authorise-api.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
banking.bankofscotland.co.uk
amconline.co.uk
luat-channel-retail-auth-api.lloydsbank.co.uk
images.bankofscotland.co.uk
nft-api.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
check2.bankofscotland.co.uk
nft-channel-retail.auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
check2.bankofscotland.co.uk
SCEP-DESKTOP-PROD-01.lloydsbank.com
sit01-channel-retail-auth.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PROD-01.lloydsbank.com
apply.lloydsbank.co.uk
apis-b.bankofscotland.co.uk
pre-authorise-api.lloydsbank.co.uk
trust-digital.bankofscotland.co.uk
luat-docupload-digital.bankofscotland.co.uk
secure.form.bankofscotland.co.uk
cbsecure-sit6.bankofscotland.co.uk
tpp-authorise-api.lloydsbank.com
apio.bankofscotland.co.uk
images.bankofscotland.co.uk
luat-api.lloydsbank.com
images.bankofscotland.co.uk
bluat02-docupload-trust.digital.bankofscotland.co.uk
developer.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
online.lloydsbank.co.uk
cdn.bankofscotland.co.uk
SCEP-DESKTOP-PROD-01.lloydsbank.com
luat-api.lloydsbank.com
citymaincardlossassistance.bankofscotland.co.uk
secure-api.lloydsbank.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
cbsecure.bankofscotland.co.uk
cbonline.bankofscotland.co.uk
businessonboarding.preview.bankofscotland.co.uk
share.lloydsbank.co.uk
secure.bankofscotland.co.uk
pre-authorise-api.lloydsbank.co.uk
www.amconline.co.uk
www.investments.bankofscotland.co.uk
bcdn-16c9d93d.lloydsbank.co.uk
luat-authorise.lloydsbank.co.uk
apis.bankofscotland.co.uk
pre-channel-retail-auth.lloydsbank.co.uk
nft-api.lloydsbank.com
answers-embed.reseau-stan.com.pagescdn.com
apis-b.bankofscotland.co.uk
nft-api.bankofscotland.co.uk
luat-secure-channel-api.lloydsbank.com
idverify.lloydsbank.co.uk
prehome-insurance.lloydsbank.com
lbgibmorigin.luat-api.lloydsbank.com
home-insurance.lloydsbank.com
sit-channel-retail-auth.lloydsbank.co.uk
cbstats.bankofscotland.co.uk
apio-b.bankofscotland.co.uk
channel-api.lloydsbank.co.uk
apis.bankofscotland.co.uk
businessdocumentation.preview.lloydsbank.co.uk
luat-developer.lloydsbank.com
cbonline-sit4-6.bankofscotland.co.uk
businesslending-02.bankofscotland.co.uk
lbgibmorigin.nft-api.lloydsbank.com
idverify.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
lbgibmorigin.luat-api.lloydsbank.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com

Certificate

The complete raw certificate details for apis-b.bankofscotland.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgwcvau2h9vIQNFxkUUg
fQYVSuW4NwsR8OMw7ApBj5wTBAZT6EmNgE+QAzjFZrsXldmrf8s8BiBoFYokCix8
JNVUeWqofMEkioTWyuPtVLGeOtyoqL7rKYbzVBFkAphlZRixSwHrCne6QhYimcBG
/Zl1+j/3ksZNspwaHFsFL1jONcx/gLuTwlQ0+DK9PYzRJEzIJzcm7Y8H+xoOls1e
beuDIFlIrybEBFcfM2X0bEbe0lOt55pcx5EbScWvXiYgnhvtRXpw8Ma4q3MQCwSh
H04r3wIN0BrotxHacF3Docck6r0eM5bU2Yyl0Zj2a50HVJqW46d7OYNz1FgPkWzu
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 683675106803962608606164634920860686984472236028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis EV SSL ICA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 15:42:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 15:52:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Business Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SC095000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apis-b.bankofscotland.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23991250726075696779798397845561652736861221323330473998493990298526957758726936473512676286341837493439866587421843135729665636337196999521951110688278210217575171436693603415489030910793281723969433455830062836560763311568536948411991222885377450763028482908922500665296367759418943424480430117014397077816232076625910499498695079837900925535060382379448868084604105819075706418352415556978235490297372202516364713560439114604611598405108940785030015626644260752679209021626822123147868069806397895032147806700835830764227534271534625686282934766245953910839979277115269600365099165860260108307968436891254961008271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 555886ceba7c764e9913a90fd36c9fc2f5d33ce3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevssl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis-b.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevssl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62dd54b89258393220171b1458ba9786097cf445
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016958db793e000004030046304402206e4c3006031c411b0b00ff1354a05ec876f49b4443d47ec27cc7022f0eb3ce08022015d5b1fffbde49e9b94d30933c2274483c5df74c66040a0001f1eb471c665c990076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016958db79e8000004030047304502205270ffe891f0c229cfdea1d22640fb4274e0255a15d9ba7cf7d4ff7f2d6ea3e702210080409167eec3fc09462295535a6573c3c12e893c928e752ba1b1a32608190db7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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