idverify.lloydsbank.co.uk

- Lloyds Banking Group PLC -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 54:36:eb:76:7b:91:aa:80:5d:bd:71:0f:4c:b8:b1:96:08:94:69:29 was issued on by QuoVadis Limited.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Organization: Lloyds Banking Group PLC
Organization unit: Lloyds
State / Province: Edinburgh
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 54:36:eb:76:7b:91:aa:80:5d:bd:71:0f:4c:b8:b1:96:08:94:69:29
Serial Number (int): 480779976694687818719808411602386968340260481321
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 00:a5:c6:47:fd:4a:55:39:0c:15:4d:14:d5:39:bf:2d:aa:9c:58:8b
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 34:eb:2a:91:5d:3c:29:8b:ec:6f:36:ad:9e:3f:b7:2e:ca:bc:84:91
Fingerprint (sha256): 0e:c2:91:51:4d:01:72:37:86:e1:10:11:c9:4f:22:13:c0:44:d2:67:a2:c1:02:1c:7f:84:69:a1:04:40:c3:ac

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate idverify.lloydsbank.co.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for idverify.lloydsbank.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

idverify.lloydsbank.co.uk
idverify.halifax-online.co.uk
idverify.bankofscotland.co.uk

Other certificates including the domain name lloydsbank.co.uk

(limited to 100 certificates)
businesstm-bos-oat.test.lloydsbank.co.uk
apio.lloydsbank.co.uk
f06.chtah.com
nftinfra-authorise.lloydsbank.co.uk
mobilephoneinsurance.lloydsbank.co.uk
Aggregator-transport.lloydsbank.co.uk
09052024.test.lloydsbank.co.uk
NLZ-TRN-LBG-DESKTOP-PREPROD-01.lloydsbank.com
check2.lloydsbank.co.uk
wwwmy.if.oat.lloydsbank.co.uk
help.lloydsbank.co.uk
du.lloydsbank.co.uk
onlinebusiness.lloydsbank.co.uk
cem.lloydsbank.co.uk
cem.lloydsbank.co.uk
businessdocumentation.bankofscotland.co.uk
secure.lloydsbank.co.uk
nftinfra-authorise-api.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
apis-b.lloydsbank.co.uk
idaware.lloydsbank.co.uk
amconline.co.uk
luat-channel-retail-auth-api.lloydsbank.co.uk
bluat03-trust.digital.lloydsbank.co.uk
apis-b.lloydsbank.co.uk
nft-channel-retail.auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
prs.lloydsbank.co.uk
securepay.lloydsbank.co.uk
sit01-channel-retail-auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
secure.lloydsbank.co.uk
idchecker.lloydsbank.co.uk
*.digital.lloydsbank.co.uk
wprod-trust.digital.lloydsbank.co.uk
pre-authorise-api.lloydsbank.co.uk
apio-b.lloydsbank.co.uk
luat01-mlp-apio-rk-b.digital.lloydsbank.co.uk
bprod-docupload-trust.digital.lloydsbank.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
online.lloydsbank.co.uk
campaign.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
help.lloydsbank.co.uk
apio.lloydsbank.co.uk
cbonline.bankofscotland.co.uk
mobilephoneinsurance.lloydsbank.co.uk
share.lloydsbank.co.uk
businessdocumentation-oat.test.lloydsbank.co.uk
pre-authorise-api.lloydsbank.co.uk
bcdn-16c9d93d.lloydsbank.co.uk
luat-authorise.lloydsbank.co.uk
check2.lloydsbank.co.uk
pre-channel-retail-auth.lloydsbank.co.uk
bluat02-docupload-trust.digital.lloydsbank.co.uk
idverify.lloydsbank.co.uk
wluat04-trust.digital.lloydsbank.co.uk
bluat03-docupload-trust.digital.lloydsbank.co.uk
check.lloydsbank.co.uk
sit-channel-retail-auth.lloydsbank.co.uk
business-bos-oat2.test.lloydsbank.co.uk
wprod-docupload-trust.digital.lloydsbank.co.uk
bprod-trust.digital.lloydsbank.co.uk
channel-api.lloydsbank.co.uk
businessdocumentation.preview.lloydsbank.co.uk
privatebanking.lloydsbank.co.uk
apis.lloydsbank.co.uk
wprod-trust.digital.lloydsbank.co.uk
*.digital.lloydsbank.co.uk
idverify.lloydsbank.co.uk
online.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
digital-service.lloydsbank.co.uk
luat01-mtp-apio-rk-b.digital.lloydsbank.co.uk
GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
luat-authorise-api.lloydsbank.co.uk
tpp-authorise-api.lloydsbank.co.uk
luat01-mtp-apio-rk-b.digital.lloydsbank.co.uk
apio-b.lloydsbank.co.uk
apio.lloydsbank.co.uk
apio.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
businessonboarding.bankofscotland.co.uk
NLZ-TRN-LBG-DESKTOP-PROD-01.lloydsbank.com
marketing.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-101.lloydsbanking.com
luat-trust-digital.lloydsbank.co.uk
luat-channel-api.lloydsbank.co.uk
cem.lloydsbank.co.uk
wluat02-trust.digital.lloydsbank.co.uk
businesslending-bos-oat2.test.lloydsbank.co.uk
bluat01-trust.digital.lloydsbank.co.uk
help.lloydsbank.co.uk
f06.chtah.com
amconline.co.uk
apis-b.lloydsbank.co.uk
wluat04-docupload-trust.digital.lloydsbank.co.uk
luat01-dtp-online-rk-b.digital.lloydsbank.co.uk
luat01-dlp-apply-rk-b.digital.lloydsbank.co.uk
cem.lloydsbank.co.uk

Certificate

The complete raw certificate details for idverify.lloydsbank.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmQrLGMEXCtNDTpRakE7
FFoCH9fQbhl1aIHMO1mdXVzhbHPVsnDL9E0DEBllqq/GjDuO96pilTT+enfVhxT9
iXqynlCdtOjghEUIxB7Aq4tuD/pgQSgIABy81xHADFspUgF1EA+rpfkf8/kSBkxe
ndOSXjDGaAcZT8wu7FMgWQqPwKXxb+TulVAcnBasv5n/Hebj+OaRvnECENuTblPj
MaFGjH7LhiM/IV1ALR40tQf+e752Jz6Dk0zPnR2+MAmUcKBgyjtMYfWDIKjgKj/3
WcE1TBAJPUtdf1KXp/q9zIoe77loRRw6hbSREkmaasdflTJYR16anIVfnSEBNbGs
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 480779976694687818719808411602386968340260481321
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-07 10:07:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 10:17:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'idverify.lloydsbank.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22519813284296939355754693018006846717496742032486265489654760459194375726046448481598239561319482150387958064240005022640649901376804548517990005086127628999941126830195801146538927553771269243846676000112286137629843060413479524954039867302621523715656747510691481464626339122531946276003357640842640427686835176446879313180140269075148966363693950357052738598192487717211156405267499287038801275921715891853830157565967145857447981980090429611588359106794398727083511430998396838743283929299629348410150476234919273845569352278018611436594849091631809519343985299741097034890503697815619540693372702401416853040149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idverify.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idverify.halifax-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idverify.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00a5c647fd4a55390c154d14d539bf2daa9c588b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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