apio.lloydsbank.co.uk

- Lloyds Banking Group PLC -

Issued by QuoVadis EV SSL ICA G1

About this certificate

This digital certificate with serial number 2d:a6:ea:ad:f9:98:cf:de:83:c0:cb:81:b9:0b:c2:2e:cc:a2:57:94 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Company registration number: SC095000
Organization: Lloyds Banking Group PLC
Organization unit: IT Security
State / Province: Edinburgh
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:a6:ea:ad:f9:98:cf:de:83:c0:cb:81:b9:0b:c2:2e:cc:a2:57:94
Serial Number (int): 260626951865557587413212884182826912676365621140
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 0b:bf:f8:ba:d4:f1:80:8e:80:63:9c:b6:96:74:64:7b:71:99:07:9b
AuthorityKeyId: 55:58:86:ce:ba:7c:76:4e:99:13:a9:0f:d3:6c:9f:c2:f5:d3:3c:e3

Fingerprint (sha1): 7c:c9:75:ab:de:9c:cc:92:9e:32:79:75:09:6d:cc:c4:fb:cb:0d:a1
Fingerprint (sha256): 14:14:7d:ab:84:f3:a8:d8:32:32:56:8d:a7:31:05:95:a9:a0:8c:0f:a0:ff:39:a4:c2:84:e1:5d:2c:32:ce:1c

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevssl1.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevssl1.crl

Check the revocation status for certificate apio.lloydsbank.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apio.lloydsbank.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apio.lloydsbank.co.uk

Other certificates including the domain name lloydsbank.co.uk

(limited to 100 certificates)
businesstm-bos-oat.test.lloydsbank.co.uk
apio.lloydsbank.co.uk
f06.chtah.com
nftinfra-authorise.lloydsbank.co.uk
mobilephoneinsurance.lloydsbank.co.uk
Aggregator-transport.lloydsbank.co.uk
09052024.test.lloydsbank.co.uk
NLZ-TRN-LBG-DESKTOP-PREPROD-01.lloydsbank.com
check2.lloydsbank.co.uk
wwwmy.if.oat.lloydsbank.co.uk
help.lloydsbank.co.uk
du.lloydsbank.co.uk
onlinebusiness.lloydsbank.co.uk
cem.lloydsbank.co.uk
cem.lloydsbank.co.uk
businessdocumentation.bankofscotland.co.uk
secure.lloydsbank.co.uk
nftinfra-authorise-api.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
apis-b.lloydsbank.co.uk
idaware.lloydsbank.co.uk
amconline.co.uk
luat-channel-retail-auth-api.lloydsbank.co.uk
bluat03-trust.digital.lloydsbank.co.uk
apis-b.lloydsbank.co.uk
nft-channel-retail.auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
prs.lloydsbank.co.uk
securepay.lloydsbank.co.uk
sit01-channel-retail-auth.lloydsbank.co.uk
apply.lloydsbank.co.uk
secure.lloydsbank.co.uk
idchecker.lloydsbank.co.uk
*.digital.lloydsbank.co.uk
wprod-trust.digital.lloydsbank.co.uk
pre-authorise-api.lloydsbank.co.uk
apio-b.lloydsbank.co.uk
luat01-mlp-apio-rk-b.digital.lloydsbank.co.uk
bprod-docupload-trust.digital.lloydsbank.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
online.lloydsbank.co.uk
campaign.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
help.lloydsbank.co.uk
apio.lloydsbank.co.uk
cbonline.bankofscotland.co.uk
mobilephoneinsurance.lloydsbank.co.uk
share.lloydsbank.co.uk
businessdocumentation-oat.test.lloydsbank.co.uk
pre-authorise-api.lloydsbank.co.uk
bcdn-16c9d93d.lloydsbank.co.uk
luat-authorise.lloydsbank.co.uk
check2.lloydsbank.co.uk
pre-channel-retail-auth.lloydsbank.co.uk
bluat02-docupload-trust.digital.lloydsbank.co.uk
idverify.lloydsbank.co.uk
wluat04-trust.digital.lloydsbank.co.uk
bluat03-docupload-trust.digital.lloydsbank.co.uk
check.lloydsbank.co.uk
sit-channel-retail-auth.lloydsbank.co.uk
business-bos-oat2.test.lloydsbank.co.uk
wprod-docupload-trust.digital.lloydsbank.co.uk
bprod-trust.digital.lloydsbank.co.uk
channel-api.lloydsbank.co.uk
businessdocumentation.preview.lloydsbank.co.uk
privatebanking.lloydsbank.co.uk
apis.lloydsbank.co.uk
wprod-trust.digital.lloydsbank.co.uk
*.digital.lloydsbank.co.uk
idverify.lloydsbank.co.uk
online.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
digital-service.lloydsbank.co.uk
luat01-mtp-apio-rk-b.digital.lloydsbank.co.uk
GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
luat-authorise-api.lloydsbank.co.uk
tpp-authorise-api.lloydsbank.co.uk
luat01-mtp-apio-rk-b.digital.lloydsbank.co.uk
apio-b.lloydsbank.co.uk
apio.lloydsbank.co.uk
apio.lloydsbank.co.uk
onboarding-hub-test.preview.lloydsbank.co.uk
businessonboarding.bankofscotland.co.uk
NLZ-TRN-LBG-DESKTOP-PROD-01.lloydsbank.com
marketing.lloydsbank.co.uk
NLZ-LBG-DESKTOP-PREPROD-101.lloydsbanking.com
luat-trust-digital.lloydsbank.co.uk
luat-channel-api.lloydsbank.co.uk
cem.lloydsbank.co.uk
wluat02-trust.digital.lloydsbank.co.uk
businesslending-bos-oat2.test.lloydsbank.co.uk
bluat01-trust.digital.lloydsbank.co.uk
help.lloydsbank.co.uk
f06.chtah.com
amconline.co.uk
apis-b.lloydsbank.co.uk
wluat04-docupload-trust.digital.lloydsbank.co.uk
luat01-dtp-online-rk-b.digital.lloydsbank.co.uk
luat01-dlp-apply-rk-b.digital.lloydsbank.co.uk
cem.lloydsbank.co.uk

Certificate

The complete raw certificate details for apio.lloydsbank.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0FvU6XTZ4IaNAZRN+dk
m1yCyDdtc9n25TgZeK5qaZTRsZ+sA9CHcdAQM314k/+2k5bLUcMfdWTsAKBII53/
D+PFy/YEGej0WTaO/LaokOQ/WUfFgLBd/w27vwCB2l6zKMaV0s+mXLPrb4yQFIr8
ZhI1FHcu1R0C7EeFbjb85vzx4Kd9H4UmUrfalOlDUjLYWkFp/5kR2Sa8+dAoP6pX
BnN4jY8j565fxLw8fdedEITCE6/QIW9U/oi6rl9Ic2Hsn27+9ClHcmDYNRW75INT
jvIlLRd2W68wpfc8sGpcL5I1AG37hVqhFfco+DnT/kkBHvaHmom6Ik61zL/mdA5a
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 260626951865557587413212884182826912676365621140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis EV SSL ICA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-06 15:24:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-06 15:34:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Business Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SC095000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'apio.lloydsbank.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25153689825311290522284983921229252677902484753266864313994354748655808249495182321292576868663077026632037912270714361838753475009982352193575679460317720263253004597507539787247913536988562499260472609125947507354568953104460869132710751619072826559927789750458103389679070135382219144257598745199350891184914499993622078998526704710327800490364286080182028079612369069176826861270572073225378125246088501029595432280970471686692635750583136051723669533764004752840310317694955055928467520314373738121273339272941837257674668414112554226809244110820735884893987537106563086656517226910108753689824724141225154599663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevssl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0bbff8bad4f1808e80639cb69674647b7199079b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 555886ceba7c764e9913a90fd36c9fc2f5d33ce3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevssl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apio.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000155c0d8e46e0000040300463044022050410e825aa17da9378d478959140a498ef367d7124bd9a0e3efccb8ae01f10c02206d3bc13faf3298c58977e26cd52dcd40eab2282c3a8b016a1c1050dc80e7bc5d00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000155c0d8e3e50000040300473045022100c0ecbcecbd55c683c9a426ab200ee4df75b42d37186ae93602c710fbc499446102203318d2bc1d79638b00b13778ad2988b507bb823980e41eb627a71dc0d69b3805007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000155c0d8e3cf000004030047304502200ce7673e32aa8d236bfefdb1b138ff7bcabc7ed862b6a79e8323d5dfe813a346022100a6c2d9806c33aeff234455f08eaf8f25a3bd5c30e780e25bc065169be097d583
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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