GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com

- Lloyds Banking Group PLC -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0c:ff:99:ba:3f:99:85:34:ca:c2:08:77:83:35:15:a0 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Company registration number: SC095000
Organization: Lloyds Banking Group PLC
Locality: Edinburgh
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:ff:99:ba:3f:99:85:34:ca:c2:08:77:83:35:15:a0
Serial Number (int): 17277889613136108196591558155576874400
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a9:eb:af:d2:a1:80:ff:a6:0a:30:07:ec:c2:af:25:d1:87:34:10:b7
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): e1:6c:43:64:f5:3b:75:aa:48:99:69:f2:14:24:3f:d6:a1:0a:2a:c8
Fingerprint (sha256): 12:b9:61:3e:fd:73:50:1b:96:0c:9c:0f:f9:47:b5:c3:6f:11:c9:da:86:5a:43:74:1a:a2:69:e9:56:44:d0:14

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
secure.lloydsbank.co.uk
onlinebusiness.lloydsbank.co.uk
online-business.bankofscotland.co.uk
online.bankofscotland.co.uk
secure.halifax-online.co.uk
www.halifax-online.co.uk
securebusiness.lloydsbank.co.uk
secure-business.bankofscotland.co.uk
secure.bankofscotland.co.uk
online.lloydsbank.co.uk

Other certificates including the domain name lloydsbanking.com

(limited to 100 certificates)
tpp-developer.lloydsbanking.com
LBGITQMgr.S4UCTZQ2.lloydsbanking.com
lbgibm-apigateway.lloydsbanking.com
LBGITWMQClient.LLL-PROD-APP01.lloydsbanking.com
tpp-developer.lloydsbanking.com
cs-api-pentesterone-PRD.lloydsbanking.com
ms-api-connectedfi-TST.lloydsbanking.com
CDNK00.lloydsbanking.com
CDNK00.lloydsbanking.com
Sharepoint-Hybrid-Search-STS-live.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-702.lloydsbanking.com
cs-api-blueMotor-TST.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-703.lloydsbanking.com
test1-jira.devops.lloydsbanking.com
dre-out.lloydsbanking.com
APPTTVIRTUAL08A-ext.lloydsbanking.com
adfstest01global2.lloydsbanking.com
visanotify-u.lloydsbanking.com
cs-api-chrisspencer-TST.lloydsbanking.com
ms-api-bluemotor.lloydsbanking.com
Sharepoint-Hybrid-Search-STS-test.lloydsbanking.com
debtmanagergonft.lloydsbanking.com
snowinboundapi-tpbt.lloydsbanking.com
cs-api-ume-PRD.lloydsbanking.com
cs-api-afapi-PRD.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
neso.styx.lloydsbanking.com
CD.INFRP1001-to-CALLCREDIT02.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
debtmanagergopre-prod.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
sapd-callsign-dp-prod.lloydsbanking.com
jira.devops.lloydsbanking.com
BCS-PROD-01.lloydsbanking.com
visanotify-u.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-701.lloydsbanking.com
APPLGVIRTUAL2F5_to_COPLBGCDTL01.lloydsbanking.com
MVSA.lloydsbanking.com
emm-mail-nft.lloydsbanking.com
cs-api-pentesterthree-PRD.lloydsbanking.com
tpp-developer.lloydsbanking.com
CD.UNX.BASPC218-to-REISPRDAPPA387.lloydsbanking.com
BRVSWIDB1080.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
cs-api-1146533-PRD.lloydsbanking.com
CDRLSPET03C001-ext.lloydsbanking.com
sapd-callsign-dp-sit.lloydsbanking.com
developer.lloydsbanking.com
lbg-workday-sign-test.lloydsbanking.com
fuspxx.finance.lloydsbanking.com
ms-api-dcapilab-TST.lloydsbanking.com
debtmanagercommercial.lloydsbanking.com
pilot.styx.lloydsbanking.com
ss-9885991-test.lloydsbanking.com
delta.tpsa.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
bas-d-120.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-701.lloydsbanking.com
BRVSWIDB3086.lloydsbanking.com
CD.UNX.APPLV05B6-EXT.lloydsbanking.com
hybrid.pp.lloydsbanking.com
Prod-G313-REED-Recruitment.lloydsbanking.com
Adfsglobal2.lloydsbanking.com
adfsglobal2.lloydsbanking.com
CD.UNX.BASPC218.EXT.lloydsbanking.com
eia2.digital.lloydsbanking.com
sapd-callsign-dp-oat.lloydsbanking.com
ibmoffpc-lb-b2bout.test.lloydsbanking.com
ms-api-AFTEAM-TST.lloydsbanking.com
currency-ib-pp.lloydsbanking.com
nftinfra-developer.lloydsbanking.com
dexter-int.lloydsbanking.com
luat-lbgibm-microservices-branch.lloydsbanking.com
LBGITWMQClient.LLL-PROD-APP02.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-201.lloydsbanking.com
ms-api-hlpensiontrusteesltd.lloydsbanking.com
syndicate.lloydsbanking.com
CD.UNX.BASPC202-EXT.lloydsbanking.com
snowoutboundapi-tpbt.lloydsbanking.com
dre.extranet.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
snowoutboundapi-tpcc.lloydsbanking.com
pre-secure-channel-api.lloydsbank.com
ms-api-9507391.lloydsbanking.com
www.luc-te5.lloydsbanking.com
debtmanagergo.lloydsbanking.com
APPTGVIRTUAL013-to-SIG.BAS.TCB.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-201.lloydsbanking.com
secure-channel-api.lloydsbank.com
ms-api-newcross.lloydsbanking.com
CD.AIX.BASPC63-to-FTPLCWL001.lloydsbanking.com
cs-api-9406012-PRE.lloydsbanking.com
cs-api-feedzai-TST.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-101.lloydsbanking.com
adfsiaglobal1.lloydsbanking.com
ms-api-feedzai.test.lloydsbanking.com
hybrid.dt.lloydsbanking.com
lbgibm-microservices-branch.lloydsbanking.com
cs-api-8105143-NFT.lloydsbanking.com

Certificate

The complete raw certificate details for GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TQYGWFyXN7hh0ZvRMHp
kIK4nV/v63K7B2ihT3tALwfC7xGnNFj9M1wgNU+kVqqwQnOBvVrdBgZhQdROsQ8W
KoaVr4o9OWZ5+a0ZQFvnDUxBN+VAdSpAZowVUQ69HhjkN7Bs4v0ZcEVfe8qJBbZr
LTo9OfGrcA0Ah+BgzmUYaIGmGv/g1/qNW/mXDF04vBRBVHnVCzOa7wJ0buXJdYZW
WurtCadgKVmJ3syhPkBhtxSVqXpMB0zrKHU5KRYU1Wm1JFykXUmAWk4s4DlODbJ7
ry/ljpv+7fmqg6IfvEsUxUjfXnweZseHWRLO1Y6hdVM6nSH0j/oqrxUuWU3Us1Ne
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17277889613136108196591558155576874400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SC095000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26409494314424394340560192322043903714144838507279900208405039970673054471254333034668595250415798740184441604908953293550044236997408368103141667370747437675305203295768111727433344042277948599539862820785357850267442860511980517199688214929349661289667349998365356195833242039546709673311057441562763371359377296653198700234828332767788397720430051036367152729660709016345332335451110970914164578669859488502211250912372468154092990592713999827408950721535283295710412142590208639367352951014779615527399245468463558345705511070537780172369463963868601813096794787247268806251500280607500436317016623102913823334113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9ebafd2a180ffa60a3007ecc2af25d1873410b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (356 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinebusiness.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online-business.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.halifax-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halifax-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securebusiness.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-business.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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