bluat02-docupload-trust.digital.lloydsbank.co.uk

- Lloyds Banking Group PLC -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 60:7c:a7:5e:d7:2e:91:08:10:5f:0c:de:62:06:d0:88:26:dc:f9:fb was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Organization: Lloyds Banking Group PLC
Organization unit: Group IT
State / Province: Edinburgh
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 60:7c:a7:5e:d7:2e:91:08:10:5f:0c:de:62:06:d0:88:26:dc:f9:fb
Serial Number (int): 550842986428025292462871806315045096648930556411
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: f7:94:d0:bc:06:a8:bb:71:e9:01:53:ae:b8:3d:be:49:0c:be:5d:f1
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): cb:f3:67:9e:3f:33:d6:4c:47:63:d6:04:9a:37:31:d3:d4:13:98:d4
Fingerprint (sha256): 0e:43:fb:c2:18:69:36:94:d4:b5:3c:7e:07:95:5a:76:d8:bd:b1:7b:78:09:4f:7c:c0:a9:3f:3a:ff:17:75:33

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate bluat02-docupload-trust.digital.lloydsbank.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bluat02-docupload-trust.digital.lloydsbank.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bluat02-docupload-trust.digital.lloydsbank.co.uk

Other certificates including the domain name lloydsbank.co.uk

(limited to 100 certificates)
businesstm-bos-oat.test.lloydsbank.co.uk
apio.lloydsbank.co.uk
f06.chtah.com
nftinfra-authorise.lloydsbank.co.uk
mobilephoneinsurance.lloydsbank.co.uk
Aggregator-transport.lloydsbank.co.uk
09052024.test.lloydsbank.co.uk
NLZ-TRN-LBG-DESKTOP-PREPROD-01.lloydsbank.com
check2.lloydsbank.co.uk
wwwmy.if.oat.lloydsbank.co.uk
help.lloydsbank.co.uk
du.lloydsbank.co.uk
onlinebusiness.lloydsbank.co.uk
cem.lloydsbank.co.uk
cem.lloydsbank.co.uk
businessdocumentation.bankofscotland.co.uk
secure.lloydsbank.co.uk
nftinfra-authorise-api.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
apis-b.lloydsbank.co.uk
idaware.lloydsbank.co.uk
amconline.co.uk
luat-channel-retail-auth-api.lloydsbank.co.uk
bluat03-trust.digital.lloydsbank.co.uk
apis-b.lloydsbank.co.uk
nft-channel-retail.auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
prs.lloydsbank.co.uk
securepay.lloydsbank.co.uk
sit01-channel-retail-auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
secure.lloydsbank.co.uk
idchecker.lloydsbank.co.uk
*.digital.lloydsbank.co.uk
wprod-trust.digital.lloydsbank.co.uk
pre-authorise-api.lloydsbank.co.uk
apio-b.lloydsbank.co.uk
luat01-mlp-apio-rk-b.digital.lloydsbank.co.uk
bprod-docupload-trust.digital.lloydsbank.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
online.lloydsbank.co.uk
campaign.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
help.lloydsbank.co.uk
apio.lloydsbank.co.uk
cbonline.bankofscotland.co.uk
mobilephoneinsurance.lloydsbank.co.uk
share.lloydsbank.co.uk
businessdocumentation-oat.test.lloydsbank.co.uk
pre-authorise-api.lloydsbank.co.uk
bcdn-16c9d93d.lloydsbank.co.uk
luat-authorise.lloydsbank.co.uk
check2.lloydsbank.co.uk
pre-channel-retail-auth.lloydsbank.co.uk
bluat02-docupload-trust.digital.lloydsbank.co.uk
idverify.lloydsbank.co.uk
wluat04-trust.digital.lloydsbank.co.uk
bluat03-docupload-trust.digital.lloydsbank.co.uk
check.lloydsbank.co.uk
sit-channel-retail-auth.lloydsbank.co.uk
business-bos-oat2.test.lloydsbank.co.uk
wprod-docupload-trust.digital.lloydsbank.co.uk
bprod-trust.digital.lloydsbank.co.uk
channel-api.lloydsbank.co.uk
businessdocumentation.preview.lloydsbank.co.uk
privatebanking.lloydsbank.co.uk
apis.lloydsbank.co.uk
wprod-trust.digital.lloydsbank.co.uk
*.digital.lloydsbank.co.uk
idverify.lloydsbank.co.uk
online.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
digital-service.lloydsbank.co.uk
luat01-mtp-apio-rk-b.digital.lloydsbank.co.uk
GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
luat-authorise-api.lloydsbank.co.uk
tpp-authorise-api.lloydsbank.co.uk
luat01-mtp-apio-rk-b.digital.lloydsbank.co.uk
apio-b.lloydsbank.co.uk
apio.lloydsbank.co.uk
apio.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
businessonboarding.bankofscotland.co.uk
NLZ-TRN-LBG-DESKTOP-PROD-01.lloydsbank.com
marketing.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-101.lloydsbanking.com
luat-trust-digital.lloydsbank.co.uk
luat-channel-api.lloydsbank.co.uk
cem.lloydsbank.co.uk
wluat02-trust.digital.lloydsbank.co.uk
businesslending-bos-oat2.test.lloydsbank.co.uk
bluat01-trust.digital.lloydsbank.co.uk
help.lloydsbank.co.uk
f06.chtah.com
amconline.co.uk
apis-b.lloydsbank.co.uk
wluat04-docupload-trust.digital.lloydsbank.co.uk
luat01-dtp-online-rk-b.digital.lloydsbank.co.uk
luat01-dlp-apply-rk-b.digital.lloydsbank.co.uk
cem.lloydsbank.co.uk

Certificate

The complete raw certificate details for bluat02-docupload-trust.digital.lloydsbank.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRrvkFSnQRQGDBy57xcZ
MOKnV6lgZL27cou9lGiA9VuMi2FUOduA2OIrk9GOGuAZhyQomFlHDSfgwhfoeVqD
IJ1KnLs7tyi+/fZ+Bof4y7bwulkBZfOOt69SgN5J5ZLGf16hho5fTTrqF8h8epPx
D9Ht3j+eAW3sdK6/b5rnE2NoiMh9/U0Hhxo2wI/E5Cxcy44nks2aVgu0MxOmXg9l
3AnW+Bcm5o7YWaFPmhoufWYS9oIIikzA0PdlB+TsO1DwO41RcTQdKGGva1iWkADY
l3XzGAG8raEfPmk7dzr8N8FlP2cHJzWPzqsVSXRgkW53v93JcMDXVEi8ELWEvVG/
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 550842986428025292462871806315045096648930556411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-15 08:03:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 08:13:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Group IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'bluat02-docupload-trust.digital.lloydsbank.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24882228614398303095076415462016898961114410338469349114184732470115183337423649554624176874010791118999408202211615377349072496645932527439635336797943563683714508503390833249310762227503520069344260144085045363087997286720210324761061882572931024217615777741901573712683190352171315832146491818279055137548500761286972459296729174769168575906546956706289920816332842341387348429189519268480849615521367888445156234134658553454652323262133543782223983567885035771223684800060673551324919508425025459821261102021439358969097369546196484148010690836518887969424261392187423633971338472772469386622348323596371647119271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluat02-docupload-trust.digital.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f794d0bc06a8bb71e90153aeb83dbe490cbe5df1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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