share.lloydsbank.co.uk

- Lloyds Banking Group PLC -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 76:43:02:a0:e6:ff:25:5a:68:fe:90:92:ca:06:f1:26:de:4e:cd:9e was issued on by QuoVadis Limited.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Organization: Lloyds Banking Group PLC
Organization unit: Lloyds
State / Province: Edinburgh
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 76:43:02:a0:e6:ff:25:5a:68:fe:90:92:ca:06:f1:26:de:4e:cd:9e
Serial Number (int): 675155289862312418822282502209070067580499053982
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: cb:f4:22:71:cd:e3:fe:10:60:00:48:a7:64:98:3c:13:6b:fa:0b:dc
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): c6:1b:ee:4c:58:de:ec:57:a6:85:01:53:ca:df:cb:3e:11:3a:88:2d
Fingerprint (sha256): 0c:c4:6a:f8:35:4a:48:d6:68:4b:4f:d7:ba:3c:2a:f2:fe:67:ea:68:90:35:32:6e:64:b1:23:d6:17:61:6b:f4

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate share.lloydsbank.co.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for share.lloydsbank.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

share.lloydsbank.co.uk
share.bankofscotland.co.uk
share.halifax-online.co.uk
share-cdn.lloydsbank.co.uk
share-cdn.halifax-online.co.uk
share-cdn.bankofscotland.co.uk

Other certificates including the domain name lloydsbank.co.uk

(limited to 100 certificates)
businesstm-bos-oat.test.lloydsbank.co.uk
apio.lloydsbank.co.uk
f06.chtah.com
nftinfra-authorise.lloydsbank.co.uk
mobilephoneinsurance.lloydsbank.co.uk
Aggregator-transport.lloydsbank.co.uk
09052024.test.lloydsbank.co.uk
NLZ-TRN-LBG-DESKTOP-PREPROD-01.lloydsbank.com
check2.lloydsbank.co.uk
wwwmy.if.oat.lloydsbank.co.uk
help.lloydsbank.co.uk
du.lloydsbank.co.uk
onlinebusiness.lloydsbank.co.uk
cem.lloydsbank.co.uk
cem.lloydsbank.co.uk
businessdocumentation.bankofscotland.co.uk
secure.lloydsbank.co.uk
nftinfra-authorise-api.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
apis-b.lloydsbank.co.uk
idaware.lloydsbank.co.uk
amconline.co.uk
luat-channel-retail-auth-api.lloydsbank.co.uk
bluat03-trust.digital.lloydsbank.co.uk
apis-b.lloydsbank.co.uk
nft-channel-retail.auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
prs.lloydsbank.co.uk
securepay.lloydsbank.co.uk
sit01-channel-retail-auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
secure.lloydsbank.co.uk
idchecker.lloydsbank.co.uk
*.digital.lloydsbank.co.uk
wprod-trust.digital.lloydsbank.co.uk
pre-authorise-api.lloydsbank.co.uk
apio-b.lloydsbank.co.uk
luat01-mlp-apio-rk-b.digital.lloydsbank.co.uk
bprod-docupload-trust.digital.lloydsbank.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
online.lloydsbank.co.uk
campaign.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
help.lloydsbank.co.uk
apio.lloydsbank.co.uk
cbonline.bankofscotland.co.uk
mobilephoneinsurance.lloydsbank.co.uk
share.lloydsbank.co.uk
businessdocumentation-oat.test.lloydsbank.co.uk
pre-authorise-api.lloydsbank.co.uk
bcdn-16c9d93d.lloydsbank.co.uk
luat-authorise.lloydsbank.co.uk
check2.lloydsbank.co.uk
pre-channel-retail-auth.lloydsbank.co.uk
bluat02-docupload-trust.digital.lloydsbank.co.uk
idverify.lloydsbank.co.uk
wluat04-trust.digital.lloydsbank.co.uk
bluat03-docupload-trust.digital.lloydsbank.co.uk
check.lloydsbank.co.uk
sit-channel-retail-auth.lloydsbank.co.uk
business-bos-oat2.test.lloydsbank.co.uk
wprod-docupload-trust.digital.lloydsbank.co.uk
bprod-trust.digital.lloydsbank.co.uk
channel-api.lloydsbank.co.uk
businessdocumentation.preview.lloydsbank.co.uk
privatebanking.lloydsbank.co.uk
apis.lloydsbank.co.uk
wprod-trust.digital.lloydsbank.co.uk
*.digital.lloydsbank.co.uk
idverify.lloydsbank.co.uk
online.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
digital-service.lloydsbank.co.uk
luat01-mtp-apio-rk-b.digital.lloydsbank.co.uk
GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
luat-authorise-api.lloydsbank.co.uk
tpp-authorise-api.lloydsbank.co.uk
luat01-mtp-apio-rk-b.digital.lloydsbank.co.uk
apio-b.lloydsbank.co.uk
apio.lloydsbank.co.uk
apio.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
businessonboarding.bankofscotland.co.uk
NLZ-TRN-LBG-DESKTOP-PROD-01.lloydsbank.com
marketing.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-101.lloydsbanking.com
luat-trust-digital.lloydsbank.co.uk
luat-channel-api.lloydsbank.co.uk
cem.lloydsbank.co.uk
wluat02-trust.digital.lloydsbank.co.uk
businesslending-bos-oat2.test.lloydsbank.co.uk
bluat01-trust.digital.lloydsbank.co.uk
help.lloydsbank.co.uk
f06.chtah.com
amconline.co.uk
apis-b.lloydsbank.co.uk
wluat04-docupload-trust.digital.lloydsbank.co.uk
luat01-dtp-online-rk-b.digital.lloydsbank.co.uk
luat01-dlp-apply-rk-b.digital.lloydsbank.co.uk
cem.lloydsbank.co.uk

Certificate

The complete raw certificate details for share.lloydsbank.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIInzCCBoegAwIBAgIUdkMCoOb/JVpo/pCSygbxJt5OzZ4wDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTE4MDUyMjA5MzY1
NFoXDTE5MDUyMjA5NDYwMFowgYoxCzAJBgNVBAYTAkdCMRIwEAYDVQQIDAlFZGlu
YnVyZ2gxEjAQBgNVBAcMCUVkaW5idXJnaDEhMB8GA1UECgwYTGxveWRzIEJhbmtp
bmcgR3JvdXAgUExDMQ8wDQYDVQQLDAZMbG95ZHMxHzAdBgNVBAMMFnNoYXJlLmxs
b3lkc2JhbmsuY28udWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL
akuHWcVgidQ2ySx2KwtBM9CKPmdfSqduqI8hnbUgKIcPABKkjzAPpzfEm1GTLT8x
n60LMhSIQ1ju4jgCnIr8NedRsyc6vg9viGhSnCYEEk8Kq7CegrHSo3ybUomS3ZIg
k3qPF8YhDXrej81dXrZz8uhbjbpkLC5smvIU6yuHTx/thh+eUxjMrwwAFwPjKVCF
6SYk4rxw/h0EmplPolOh2lpnWC19IrXjKyj88CFn1qrfjnykdZXDRkllhQRAu8vf
2zNlpTVSJtwBLEwE52Q6/cHh2SwdLSde7nDmmPQUyUfq3EfzuVpB7Mmq4SDsOCkW
lpkxUGUPNVwc2Y15+n33AgMBAAGjggQ3MIIEMzAJBgNVHRMEAjAAMB8GA1UdIwQY
MBaAFLMSibWpSzW8FQDwgOnYeIfxE3x2MHMGCCsGAQUFBwEBBGcwZTA3BggrBgEF
BQcwAoYraHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9xdnNzbGczLmNy
dDAqBggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMIG3
BgNVHREEga8wgayCFnNoYXJlLmxsb3lkc2JhbmsuY28udWuCGnNoYXJlLmJhbmtv
ZnNjb3RsYW5kLmNvLnVrghpzaGFyZS5oYWxpZmF4LW9ubGluZS5jby51a4Iac2hh
cmUtY2RuLmxsb3lkc2JhbmsuY28udWuCHnNoYXJlLWNkbi5oYWxpZmF4LW9ubGlu
ZS5jby51a4Iec2hhcmUtY2RuLmJhbmtvZnNjb3RsYW5kLmNvLnVrMFEGA1UdIARK
MEgwRgYMKwYBBAG+WAACZAEBMDYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVv
dmFkaXNnbG9iYWwuY29tL3JlcG9zaXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwIG
CCsGAQUFBwMBMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmwucXVvdmFkaXNn
bG9iYWwuY29tL3F2c3NsZzMuY3JsMB0GA1UdDgQWBBTL9CJxzeP+EGAASKdkmDwT
a/oL3DAOBgNVHQ8BAf8EBAMCBaAwggH3BgorBgEEAdZ5AgQCBIIB5wSCAeMB4QB3
ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABY4c+kacAAAQDAEgw
RgIhANxOWJXMMZ62vjpUVRL4p/BIp2/CbvYNoQovtp5aNPheAiEA3LjhesI3sek+
XDmdWa4zvPf7VeFWdQfFVmJ4PbYEjnUAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb
37jjd80OyA3cEAAAAWOHPpHOAAAEAwBGMEQCIDs45vDQKjTdg3DVQQz+wER9TFz4
LNafPuVK2o5mGs0yAiB2a/DBYRJjHMHgdNNwViPshUIMrD9+m6F6Tfspg1gSdAB2
AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABY4c+kr8AAAQDAEcw
RQIgVl3syTA2pNw/r2EVXrdqQ7nespZ89gQK5HFceExHskACIQC+YUCVpUaCxH8e
yoZlFSh0RmLwxF2gEl1Nkru0qjJk4wB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEA
KQaNsgiaN9kTAAABY4c+kzUAAAQDAEgwRgIhAIybcbmUOZTtOwkdA4rnjJNlup8g
vTRJSWIpKSo3rFQ2AiEAvWRYK+5PzmwZ8Hl2vn1zUSf0vfYL/qpKTNoTMHkd8jgw
DQYJKoZIhvcNAQELBQADggIBABixs9Y8fulnI3KzbsmFgdZTMeJFbn7dF/nh0NGY
zA70vFfMziMCDZE9zolu7qVzrbJuWIzGrwG+wQ2HhePxXAVFWxQq+g767qmgPt2r
oYz4nJk/QQgn2o5WkL3EqONB3DmRF1xajUVjbR4BuLMqzfbLzSvMiBR6pMlDfXKx
8GJLhuQQWbB8jlSxsKhrIdatzWMlbCnLf+9yL8Fq7s1z6q2nVtppZKYF7gFAV5Rr
B5B0cuYp46AChu7mR4U57sFJug4LAOAQ4pdxopA9BCgscgvJkebfQ0fslDtCmK57
Y82KuCvqoxr67hFI6vpEmk2RLnzjE0s7f//B/SOuZHUAr8HdOKhijh9PI5U3Ln+Y
Zj9+kdhyoepFZc3N2/BLFatjjasfD9o+yDdu651X6TVIDR3UI79YN7aajsvehR48
rNoYyo0NIO0HBv/Wk31FJAQw4BCcN6lO2Fa+za3iHLA/DF1P4+Rv1n5O7quzapuB
DbHNEGds6cB3Ukxffy5rixnHQd2m4URhr1PJUKl/bpH/cRMCWovUVRkS1pyk4f/n
svRbdep6TZvQS8a9bW7u56C5ckyFMe8wofPAbx9EKJkCmT8cvgnz/1fRrErkovWM
KNgcfBGZMLbqiladnMMIhPISaE1Foav7MRJsAEogvWuExyuq19Ex8A9pUdpsgNeo
IhIJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2pLh1nFYInUNsksdisL
QTPQij5nX0qnbqiPIZ21ICiHDwASpI8wD6c3xJtRky0/MZ+tCzIUiENY7uI4ApyK
/DXnUbMnOr4Pb4hoUpwmBBJPCquwnoKx0qN8m1KJkt2SIJN6jxfGIQ163o/NXV62
c/LoW426ZCwubJryFOsrh08f7YYfnlMYzK8MABcD4ylQhekmJOK8cP4dBJqZT6JT
odpaZ1gtfSK14yso/PAhZ9aq3458pHWVw0ZJZYUEQLvL39szZaU1UibcASxMBOdk
Ov3B4dksHS0nXu5w5pj0FMlH6txH87laQezJquEg7DgpFpaZMVBlDzVcHNmNefp9
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 675155289862312418822282502209070067580499053982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 09:36:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 09:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'share.lloydsbank.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25678791942966061577714610377593234578656533302932959439929334394993871164659817689678801869946411549059008666399059466525137264380586511370181303376971996369362553672706731554899149699473908808120767140170146530093289615595858241694074228853590674117997833269071282828618225314921680104166926039742760567184792738826025183622062637290464945353014647293573646538051099996305506583594952187034484575375318500006994615631995474876853358765577429986463420886336626125614006659058313316459071320684002193705234950482369452702863635669746393296428670963574551015960141194323146694483288322780277427476942608545051416624631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.halifax-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share-cdn.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share-cdn.halifax-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share-cdn.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbf42271cde3fe10600048a764983c136bfa0bdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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