LBGITWMQ.QPC2.lloydsbankinggroup.com

- Lloyds Banking Group PLC -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 37:dc:79:96:86:a3:bd:d9:ea:4f:5e:07:64:db:33:1f:90:5e:55:e7 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Organization: Lloyds Banking Group PLC
Organization unit: LBG
State / Province: Edinburgh, City of
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 37:dc:79:96:86:a3:bd:d9:ea:4f:5e:07:64:db:33:1f:90:5e:55:e7
Serial Number (int): 318911248146907438518136233407322850244998092263
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: a4:2b:70:e6:d9:75:6d:19:6b:26:b2:05:9c:76:c1:98:9c:6b:6b:b6
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 06:c5:23:52:9a:52:1e:c5:2f:b7:46:23:d7:5f:4a:eb:2c:61:8a:db
Fingerprint (sha256): 0f:1c:e7:6a:42:c3:81:24:0c:31:3b:da:2f:3a:6a:dc:51:82:be:a5:8f:78:ce:33:4e:8e:30:8c:a4:e2:fb:55

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate LBGITWMQ.QPC2.lloydsbankinggroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for LBGITWMQ.QPC2.lloydsbankinggroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

LBGITWMQ.QPC2.lloydsbankinggroup.com

Other certificates including the domain name lloydsbankinggroup.com

(limited to 100 certificates)
LBGITWMQ.QPSTR003.lloydsbankinggroup.com
volunteering-test.lloydsbankinggroup.com
pre-secure-channel-cards-auth.lloydsbankinggroup.com
secure-channel-api.lloydsbank.com
luat-secure-channel-api.lloydsbank.com
LBGITWMQ.QDC1.lloydsbankinggroup.com
luat-secure-channel-api.lloydsbank.com
nftinfra-authorise-api.lloydsbank.co.uk
dp-jt-ext.test.lloydsbankinggroup.com
LBGITWMQ.QAC2.lloydsbankinggroup.com
optimisation.data.lloydsbankinggroup.com
Digital-Banking.lloydsbankinggroup.com
LBGITWMQ.QDSWI010.lloydsbankinggroup.com
nft-channel-retail.auth.lloydsbank.co.uk
SCEP-DESKTOP-PROD-01.lloydsbank.com
sit01-channel-retail-auth.lloydsbank.co.uk
recruitment.lloydsbankinggroup.com
Digital-Banking.lloydsbankinggroup.com
dp-visa-ext.test.lloydsbankinggroup.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
careers.lloydsbankinggroup.com
SCEP-DESKTOP-PROD-01.lloydsbank.com
volunteering-test.lloydsbankinggroup.com
jobshop.lloydsbankinggroup.com
www.amconline.co.uk
recruitment.lloydsbankinggroup.com
dpb2b-extsig-Halifax.lloydsbankinggroup.com
LBGITWMQ.QAC1.LLOYDSBANKINGGROUP.COM
luat-secure-channel-api.lloydsbank.com
LBGITWMQ.QPC2.lloydsbankinggroup.com
sit-channel-retail-auth.lloydsbank.co.uk
dpb2b-extsig-Halifax.test.lloydsbankinggroup.com
mbna.co.uk
dp-jt-ext.lloydsbankinggroup.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
luat-secure-channel-api.lloydsbank.com
pre-secure-channel-api.lloydsbank.com
LBGITWMQ.QPSTR002.lloydsbankinggroup.com
LBGITWMQ.QDC2.LLOYDSBANKINGGROUP.COM
secure-channel-api.lloydsbank.com
b2b-datapower-ext.aslive.test.lloydsbankinggroup.com
luat-secure-channel-api.lloydsbank.com
luat-channel-api.lloydsbank.co.uk
LBGITWMQ.QPSTR004.lloydsbankinggroup.com
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
dpb2b-prod-ext.lloydsbankinggroup.com
recruitment.lloydsbankinggroup.com
LBGITWMQ.S4UCTPQ1.lloydsbankinggroup.com
recruitment.lloydsbankinggroup.com
Digital-Banking.test.lloydsbankinggroup.com
luat-secure-channel-api.lloydsbank.com
secure-channel-api.lloydsbank.com
volunteering.lloydsbankinggroup.com
recruitment.lloydsbankinggroup.com
dp-visa-ext.test.lloydsbankinggroup.com
SCEP-DESKTOP-PROD-01.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
channel-api.lloydsbank.co.uk
SCEP-DESKTOP-PREPROD-01.lloydsbank.com
LBGITWMQ.S4UCTPQ6.lloydsbankinggroup.com
jobshop.lloydsbankinggroup.com
Digital-Banking.lloydsbankinggroup.com
international.lloydsbank.com
pre-secure-channel-cards-auth-api.lloydsbankinggroup.com
luat-channel-cards-auth-api.lloydsbankinggroup.com
pre-secure-channel-api.lloydsbank.com
channel-retail-auth.lloydsbank.co.uk
dpb2b-extsig-BOS.test.lloydsbankinggroup.com
sit03-channel-cards-auth.lloydsbankinggroup.com
careers.lloydsbankinggroup.com
SCEP-DESKTOP-PROD-01.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sit01-channel-retail-auth.lloydsbank.co.uk
recruitment.lloydsbankinggroup.com
nftinfra-authorise-api.lloydsbank.co.uk
Digital-Banking.test.lloydsbankinggroup.com
LBGITWMQ.QPSTR002.lloydsbankinggroup.com
pre-secure-channel-api.lloydsbank.com
nftinfra-authorise-api.lloydsbank.co.uk
secure-channel-api.lloydsbank.com
careers.lloydsbankinggroup.com
dp-cloudbroker-ext.test.lloydsbankinggroup.com
dpb2b-dev-ext.test.lloydsbankinggroup.com
LBGITWMQ.S4UCTPQ1.LLOYDSBANKINGGROUP.COM
international.lloydsbank.com
LBGITWMQ.S4UCTPQ5.lloydsbankinggroup.com
www.lloydsbankinggroup.com
mbna.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
luat-secure-channel-api.lloydsbank.com
LBGITWMQ.S4UCTPQ2.lloydsbankinggroup.com
international.lloydsbank.com
dpb2b-extsig-TSB.test.lloydsbankinggroup.com
yourtalkmagazine.lloydsbankinggroup.com
esb.RADS.local.lloydsbankinggroup.com
secure-channel-api.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
channel-api.lloydsbank.co.uk
dp-jt-ext.test.lloydsbankinggroup.com

Certificate

The complete raw certificate details for LBGITWMQ.QPC2.lloydsbankinggroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGRDCCBCygAwIBAgIUN9x5loajvdnqT14HZNszH5BeVecwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEczMB4XDTIwMDExNzEzNTcx
NVoXDTIxMDExNzE0MDcwMFowgZ4xCzAJBgNVBAYTAkdCMRswGQYDVQQIDBJFZGlu
YnVyZ2gsIENpdHkgb2YxEjAQBgNVBAcMCUVkaW5idXJnaDEhMB8GA1UECgwYTGxv
eWRzIEJhbmtpbmcgR3JvdXAgUExDMQwwCgYDVQQLDANMQkcxLTArBgNVBAMMJExC
R0lUV01RLlFQQzIubGxveWRzYmFua2luZ2dyb3VwLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMqu0oJYTnzS0IHDXzL5aylUD1M16MMqHtwiKYhB
+leYEN1F2djbYwXx+L+pscJgK9QxEO1psmEZhtp3F2YYfQ59CpvWszMoaUtk2lKh
f1+OIVw62cwalNDjzp42iEZdkTgc/CAeOHihRO06WFZPYwn+a/MZxmt9ZOU0nCTt
l+D8tKxSMdtV8ra/KIpiD9EYhFXJozlKeIcPECCELY9YrNDg6yqKzrw9t52QwC+l
DknBmVxrxFpUaPasPVDwJAWmdXLsbxX/QBtEDXMHLUYtq6yqFzINPOKjTeprMZsg
7svS97ZbwB4wFHeaxMxhCqfl4X5nHbkVjVAuj9U20+7D+NECAwEAAaOCAcgwggHE
MAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAUsxKJtalLNbwVAPCA6dh4h/ETfHYwcwYI
KwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAChitodHRwOi8vdHJ1c3QucXVvdmFkaXNn
bG9iYWwuY29tL3F2c3NsZzMuY3J0MCoGCCsGAQUFBzABhh5odHRwOi8vb2NzcC5x
dW92YWRpc2dsb2JhbC5jb20wLwYDVR0RBCgwJoIkTEJHSVRXTVEuUVBDMi5sbG95
ZHNiYW5raW5nZ3JvdXAuY29tMFEGA1UdIARKMEgwRgYMKwYBBAG+WAACZAEBMDYw
NAYIKwYBBQUHAgEWKGh0dHA6Ly93d3cucXVvdmFkaXNnbG9iYWwuY29tL3JlcG9z
aXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMDoGA1UdHwQzMDEw
L6AtoCuGKWh0dHA6Ly9jcmwucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzMuY3Js
MB0GA1UdDgQWBBSkK3Dm2XVtGWsmsgWcdsGYnGtrtjAOBgNVHQ8BAf8EBAMCBaAw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAJZsuQxQ9/EI
GW2AYjWipXhv4Rdz+X9YVTp+uBWhDnnWQVLoB5vsIw+PsM90F61mQiXkcJdRtk5t
Ifc9l4jXv/srFrSe4W3ngHH6mD1PydZFhBoqXXpHr5rUz454BfN1oFUcTIIPJ5k/
6r28AkQMKG/VXDbxPsHtOHCS3ttV5k0UWMqpIXygWpCVcAYbH3H3SOui8hLk/u65
S06HPPrLceyfuqnfSEDkEMFTbtiyTBjmVbgujqJmVecOHshiUZpM9M4yH2gfelDQ
kzSU/SACm3YunhmoTBHvRd6Q8NbNA88UNgDOdzaGKvx1pzcDxX6n4fXnjaLFmEoL
llRbTQC2xaaZfOW9IzTshGbhGmwJyRLjKgYAi0DuPkRieBkDzd9/nsb2KmEtNhpB
4WwQF8o92d36/QOxd8l7tJbhNMd1bjR3CSqqEy9eD1g1PR1aOmTh2CbIEAEBUukV
Qmm8Gftlfw2YpmVKpiRTbkpPbqNbVc//SCxmcLQQdrzEDZXMBY4M05qHdwRA96Ml
6CaeCC7J5tB0HV0+C+Yg9+TEF/BnjHoryVnUinp2D2f6GcxbTYjbOCEnVq7wl/VJ
H05hc/DWeH126CMGGKsIf7u5sm4GsE4mAz5kN7fXD9QhOPrnvFqCCDAz9P/EoBB+
14jMnasr4KXErOWE31h3/ItmvZKZnU7e
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq7SglhOfNLQgcNfMvlr
KVQPUzXowyoe3CIpiEH6V5gQ3UXZ2NtjBfH4v6mxwmAr1DEQ7WmyYRmG2ncXZhh9
Dn0Km9azMyhpS2TaUqF/X44hXDrZzBqU0OPOnjaIRl2ROBz8IB44eKFE7TpYVk9j
Cf5r8xnGa31k5TScJO2X4Py0rFIx21Xytr8oimIP0RiEVcmjOUp4hw8QIIQtj1is
0ODrKorOvD23nZDAL6UOScGZXGvEWlRo9qw9UPAkBaZ1cuxvFf9AG0QNcwctRi2r
rKoXMg084qNN6msxmyDuy9L3tlvAHjAUd5rEzGEKp+XhfmcduRWNUC6P1TbT7sP4
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318911248146907438518136233407322850244998092263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 13:57:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-17 14:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LBG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LBGITWMQ.QPC2.lloydsbankinggroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25586345692986679864399901099448590904726864382725707823489200011077744849824409990062730267458244460520992769980902346070485751999803555608646831958853775517247441436794361239314260229083988296603515030019058861956121083665838202048328814680563358247212041008107483587617944929869162098106795201091628920219204762449488938179205015505595680126617564831991705849265915564043473364617838485659991459517621228803081799982243840086910415245198322542679176842479275405550859971475230421080918262258649611688826953525785950002345609641780522853400908740759150466415977081094543430290400299356504439670262976858095473653969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LBGITWMQ.QPC2.lloydsbankinggroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a42b70e6d9756d196b26b2059c76c1989c6b6bb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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