ibmoffpc-lb-b2bout.test.lloydsbanking.com

- Lloyds Banking Group PLC -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 22:ec:5d:85:ca:f7:17:0a:6a:03:30:3b:89:e2:33:49:31:42:ee:9f was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Organization: Lloyds Banking Group PLC
Organization unit: IT Security
State / Province: Edinburgh
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 22:ec:5d:85:ca:f7:17:0a:6a:03:30:3b:89:e2:33:49:31:42:ee:9f
Serial Number (int): 199376809044797244866205981481238120699950984863
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 16:ef:23:9d:e8:46:a3:f3:ce:13:23:08:bb:33:36:d4:75:18:86:39
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): aa:bd:ca:25:70:c1:08:d6:e2:a1:d3:ee:17:f8:85:6c:a2:81:6e:71
Fingerprint (sha256): 0d:ec:7f:44:7b:9a:52:68:bf:02:8e:f0:7d:70:58:7b:9d:29:b3:90:15:6d:e5:5d:e4:06:b4:81:4b:03:46:75

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate ibmoffpc-lb-b2bout.test.lloydsbanking.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ibmoffpc-lb-b2bout.test.lloydsbanking.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ibmoffpc-lb-b2bout.test.lloydsbanking.com

Other certificates including the domain name lloydsbanking.com

(limited to 100 certificates)
tpp-developer.lloydsbanking.com
LBGITQMgr.S4UCTZQ2.lloydsbanking.com
lbgibm-apigateway.lloydsbanking.com
LBGITWMQClient.LLL-PROD-APP01.lloydsbanking.com
tpp-developer.lloydsbanking.com
cs-api-pentesterone-PRD.lloydsbanking.com
ms-api-connectedfi-TST.lloydsbanking.com
CDNK00.lloydsbanking.com
CDNK00.lloydsbanking.com
Sharepoint-Hybrid-Search-STS-live.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-702.lloydsbanking.com
cs-api-blueMotor-TST.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-703.lloydsbanking.com
test1-jira.devops.lloydsbanking.com
dre-out.lloydsbanking.com
APPTTVIRTUAL08A-ext.lloydsbanking.com
adfstest01global2.lloydsbanking.com
visanotify-u.lloydsbanking.com
cs-api-chrisspencer-TST.lloydsbanking.com
ms-api-bluemotor.lloydsbanking.com
Sharepoint-Hybrid-Search-STS-test.lloydsbanking.com
debtmanagergonft.lloydsbanking.com
snowinboundapi-tpbt.lloydsbanking.com
cs-api-ume-PRD.lloydsbanking.com
cs-api-afapi-PRD.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
neso.styx.lloydsbanking.com
CD.INFRP1001-to-CALLCREDIT02.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
debtmanagergopre-prod.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
sapd-callsign-dp-prod.lloydsbanking.com
jira.devops.lloydsbanking.com
visanotify-u.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-701.lloydsbanking.com
APPLGVIRTUAL2F5_to_COPLBGCDTL01.lloydsbanking.com
MVSA.lloydsbanking.com
emm-mail-nft.lloydsbanking.com
cs-api-pentesterthree-PRD.lloydsbanking.com
tpp-developer.lloydsbanking.com
CD.UNX.BASPC218-to-REISPRDAPPA387.lloydsbanking.com
BRVSWIDB1080.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
cs-api-1146533-PRD.lloydsbanking.com
CDRLSPET03C001-ext.lloydsbanking.com
sapd-callsign-dp-sit.lloydsbanking.com
developer.lloydsbanking.com
lbg-workday-sign-test.lloydsbanking.com
fuspxx.finance.lloydsbanking.com
ms-api-dcapilab-TST.lloydsbanking.com
debtmanagercommercial.lloydsbanking.com
pilot.styx.lloydsbanking.com
ss-9885991-test.lloydsbanking.com
delta.tpsa.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
bas-d-120.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-701.lloydsbanking.com
BRVSWIDB3086.lloydsbanking.com
CD.UNX.APPLV05B6-EXT.lloydsbanking.com
hybrid.pp.lloydsbanking.com
Prod-G313-REED-Recruitment.lloydsbanking.com
Adfsglobal2.lloydsbanking.com
adfsglobal2.lloydsbanking.com
CD.UNX.BASPC218.EXT.lloydsbanking.com
eia2.digital.lloydsbanking.com
sapd-callsign-dp-oat.lloydsbanking.com
ibmoffpc-lb-b2bout.test.lloydsbanking.com
ms-api-AFTEAM-TST.lloydsbanking.com
currency-ib-pp.lloydsbanking.com
nftinfra-developer.lloydsbanking.com
dexter-int.lloydsbanking.com
luat-lbgibm-microservices-branch.lloydsbanking.com
LBGITWMQClient.LLL-PROD-APP02.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-201.lloydsbanking.com
ms-api-hlpensiontrusteesltd.lloydsbanking.com
syndicate.lloydsbanking.com
CD.UNX.BASPC202-EXT.lloydsbanking.com
snowoutboundapi-tpbt.lloydsbanking.com
dre.extranet.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
snowoutboundapi-tpcc.lloydsbanking.com
pre-secure-channel-api.lloydsbank.com
ms-api-9507391.lloydsbanking.com
www.luc-te5.lloydsbanking.com
debtmanagergo.lloydsbanking.com
APPTGVIRTUAL013-to-SIG.BAS.TCB.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-201.lloydsbanking.com
secure-channel-api.lloydsbank.com
ms-api-newcross.lloydsbanking.com
CD.AIX.BASPC63-to-FTPLCWL001.lloydsbanking.com
cs-api-9406012-PRE.lloydsbanking.com
cs-api-feedzai-TST.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-101.lloydsbanking.com
adfsiaglobal1.lloydsbanking.com
ms-api-feedzai.test.lloydsbanking.com
hybrid.dt.lloydsbanking.com
lbgibm-microservices-branch.lloydsbanking.com
cs-api-8105143-NFT.lloydsbanking.com
APPLGVIRTUAL191-to-SIG.SND.SERV5.lloydsbanking.com

Certificate

The complete raw certificate details for ibmoffpc-lb-b2bout.test.lloydsbanking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHcbp9+j5zklGR+Sz/12
NVGZNjefi18v0Az+mhzBP3qqC1a1Kl6v+YzbxBIZJrUnykhtTPi2GlvYyNMYOngr
kLACyA5QcfAUpixTzlZWR067fnwK/YaEUzG+Cgg/htbC3CnrbNmFG++F/bUhoLc1
h9qAHKLxNCRyLN5hWhuqo8uZz6u30mCXbGYcyawlqNxzk4OQ7mmkqGWaZxEcR1LL
+qRh+rvGCguvMorJYCwCHoEUYuwqXxDEAYLQIXjtBmhGK1u8M3aZ1M8dchhApEf3
eLl9TQz/xxYCXHuF+kITw2544lQmNsljIa7/N/v6DmH4lLd3u/wKjUyoUUi1U636
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 199376809044797244866205981481238120699950984863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 10:58:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 11:08:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ibmoffpc-lb-b2bout.test.lloydsbanking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25811348571875320484815401106990895249284090260763684298894115017869227566968556306225323319601901660229571348334615595537120861309174623288653836358163199386230800810916232503552703979137486121951303268468431905839051148142295280397542208946929786124508634623418293172869440819335164730599666099491656294421674800043510442038380482884008413161296554765327546287111695999795338031486675960198183126379636275198151843770923948875126718192036327192816727333524082364078363350640620247706671225558084776619828899872068917162446966063356835375386721844179972103793321679355683133964786421252949336515860661535790045461027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibmoffpc-lb-b2bout.test.lloydsbanking.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16ef239de846a3f3ce132308bb3336d475188639
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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