www.smartdata.lloydsbankcommercial.com

- MasterCard International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3f:33:e9:52:0f:a4:26:7f:00:00:00:00:50:e6:42:6b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MasterCard International

Organization: MasterCard International
Organization unit: BIP01 AIDC
Locality: Waterloo
Country: BE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:33:e9:52:0f:a4:26:7f:00:00:00:00:50:e6:42:6b
Serial Number (int): 84010903177222673985279184115117474411
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: fb:23:3d:84:fc:f7:87:9f:3a:39:48:15:3d:19:f7:b2:8a:e5:99:76
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 5b:8b:1f:e1:df:5e:ee:d1:df:64:6c:7a:58:ed:c9:c7:37:ff:61:eb
Fingerprint (sha256): 0b:80:bf:81:fe:32:45:a0:ec:b9:85:8f:73:33:59:d0:4d:9b:3a:99:74:12:9a:b6:48:7a:e4:db:9d:75:b3:8d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.smartdata.lloydsbankcommercial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.smartdata.lloydsbankcommercial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.smartdata.lloydsbankcommercial.com

Other certificates including the domain name lloydsbankcommercial.com

(limited to 100 certificates)
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
lloydsbankcommercial.com
amconline.co.uk
volunteering.lloydsbankinggroup.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
www.lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.epayvirtual.lloydsbankcommercial.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
www.prepaid.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
international.lloydsbank.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
amconline.co.uk
sdg2demo.commerzbank.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
amconline.co.uk
amconline.co.uk
www.amconline.co.uk
sdg2.comdata.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
customerservice.lloydsbankcommercial.com
sdg2.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.lloydsbankcommercial.com
amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
www.test-smartdata.lloydsbankcommercial.com
www.lloydsbankcommercial.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
sdg2.comdata.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
customerservice.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
mcincontrol.mastercard.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.test-smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
dcsrd-prod-01.lloydsbanking.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
blog.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
touchpoint.lloydsbankcommercial.com
international.lloydsbank.com
international.lloydsbank.com
lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
www.amconline.co.uk
international.lloydsbank.com

Certificate

The complete raw certificate details for www.smartdata.lloydsbankcommercial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FqRb29l9qVj6Vj+NhqK
ZO0R0lkFvZn3JXJBBsfXZQcKUNljcpRQJn2x3rydwbUvY4IuU1D5h5hJGQjn1Hyd
Rt96ba1Hguoj/WvjrvohV80fmpPJGHzlh7IF6QowPuTeUaWLepBD+gfWEk9+YPBH
6xfHgk+6A5boNPU4XgYpv4mGCj10S9+cjCsg0uGgmO/isHU5N7ftieznC2d9NoZF
+Xz2ITnlBPSt48ZNjmZmFxXMRUHhaaT0dpE3zxPX75AyhRt700GhT4+EoiCZB3vR
UmzvtnoWLZOVS2lchAiNjxdfWyWoIzxnzIikQI7wXKo2f1gQ6HImUglJMl/bqVJM
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84010903177222673985279184115117474411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 12:59:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 13:29:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MasterCard International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIP01 AIDC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.smartdata.lloydsbankcommercial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28826994330164173080252167871472994871395865697997979519779140057336342859307980020387581836492745382752531192692888744296440628599373935279162528004887949870107396013779178345386607770124617307406812837299963354830228149544780142081171797533313975083167301717363829302008023999384231373897450426887537000569757176880808017211648955886828086432747443502829963442412893793202383626011543658168253965930550910037153960341833215964975116613272905714615311223877803248991380719788166650012796409787230453492557695172991132778409626540684844334694149254188433377901141254807722707155103152031860170710733805653985040944383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdata.lloydsbankcommercial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb233d84fcf7879f3a3948153d19f7b28ae59976
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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