touchpoint.lloydsbankcommercial.com

- Lloyds Banking Group PLC -

Issued by QuoVadis Global SSL ICA G2

About this certificate

This digital certificate with serial number 64:6a:6c:19:51:89:81:f4:59:63:d7:79:0c:ac:14:82:67:e6:93:84 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Lloyds Banking Group PLC

Organization: Lloyds Banking Group PLC
Organization unit: Commercial Card & Acquiring Solutions
State / Province: Edinburgh
Locality: Edinburgh
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 64:6a:6c:19:51:89:81:f4:59:63:d7:79:0c:ac:14:82:67:e6:93:84
Serial Number (int): 573272372815749449724789444590514888766547989380
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 86:80:ec:e3:42:f0:39:11:d9:4f:1d:30:f4:e1:de:27:23:26:89:0e
AuthorityKeyId: 91:19:62:ad:5b:17:a7:30:fb:f0:de:39:25:b1:bd:8c:b9:b8:51:27

Fingerprint (sha1): 59:1f:00:81:54:14:32:7d:4e:9e:42:ce:b4:2e:22:59:f5:f4:dd:35
Fingerprint (sha256): 6d:ee:18:8b:28:68:d5:50:82:69:da:cb:38:7e:69:87:4e:0a:53:a7:36:19:8c:45:44:4f:90:4b:90:d0:4e:e5

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg2.crl

Check the revocation status for certificate touchpoint.lloydsbankcommercial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for touchpoint.lloydsbankcommercial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

touchpoint.lloydsbankcommercial.com

Other certificates including the domain name lloydsbankcommercial.com

(limited to 100 certificates)
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
lloydsbankcommercial.com
amconline.co.uk
volunteering.lloydsbankinggroup.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
www.lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.epayvirtual.lloydsbankcommercial.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
www.prepaid.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
international.lloydsbank.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
amconline.co.uk
sdg2demo.commerzbank.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
amconline.co.uk
amconline.co.uk
www.amconline.co.uk
sdg2.comdata.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
customerservice.lloydsbankcommercial.com
sdg2.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.lloydsbankcommercial.com
amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
www.test-smartdata.lloydsbankcommercial.com
www.lloydsbankcommercial.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
sdg2.comdata.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
customerservice.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
mcincontrol.mastercard.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.test-smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
dcsrd-prod-01.lloydsbanking.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
blog.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
touchpoint.lloydsbankcommercial.com
international.lloydsbank.com
international.lloydsbank.com
lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
www.amconline.co.uk
international.lloydsbank.com

Certificate

The complete raw certificate details for touchpoint.lloydsbankcommercial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFWzCCBEOgAwIBAgIUZGpsGVGJgfRZY9d5DKwUgmfmk4QwDQYJKoZIhvcNAQEL
BQAwTTELMAkGA1UEBhMCQk0xGTAXBgNVBAoTEFF1b1ZhZGlzIExpbWl0ZWQxIzAh
BgNVBAMTGlF1b1ZhZGlzIEdsb2JhbCBTU0wgSUNBIEcyMB4XDTE5MDMyNTA5Mzcy
MloXDTIwMDMyNTA5NDcwMFowgbYxCzAJBgNVBAYTAkdCMRIwEAYDVQQIDAlFZGlu
YnVyZ2gxEjAQBgNVBAcMCUVkaW5idXJnaDEhMB8GA1UECgwYTGxveWRzIEJhbmtp
bmcgR3JvdXAgUExDMS4wLAYDVQQLDCVDb21tZXJjaWFsIENhcmQgJiBBY3F1aXJp
bmcgU29sdXRpb25zMSwwKgYDVQQDDCN0b3VjaHBvaW50Lmxsb3lkc2Jhbmtjb21t
ZXJjaWFsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANDK7ZBw
9o1h9T5QDA0ngYT2Xso+iebICy9x9CRcuEFu4u1BE2ufzFwocrPIcl0xzSo+Iizk
Fhzbq0AA3JcHUY9KXszV5qxvGCOegexfXklQWGuB1Ybg0MVuRgnWt4yut92H51tE
vDDL//9pdifpt1F42G7YZdEwknO7Bo9/Ejy5ruM994E4D0USdv66KqtHYMOUVbPf
E+XQsOVwMcjdohYRUxHftkZfAUp0e9uJEpEmTgXnYry7BX1o9SkC+r6t3IEFAnwh
IszzxbHmFuipJcTC/Rpp2ZhAC2Q1nY8y7q7uXUrBJr5p8mDQj/8ceRZj9oKfumMG
1TaeAsbPN4RynbECAwEAAaOCAccwggHDMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAU
kRlirVsXpzD78N45JbG9jLm4UScwcwYIKwYBBQUHAQEEZzBlMDcGCCsGAQUFBzAC
hitodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL3F2c3NsZzIuY3J0MCoG
CCsGAQUFBzABhh5odHRwOi8vb2NzcC5xdW92YWRpc2dsb2JhbC5jb20wLgYDVR0R
BCcwJYIjdG91Y2hwb2ludC5sbG95ZHNiYW5rY29tbWVyY2lhbC5jb20wUQYDVR0g
BEowSDBGBgwrBgEEAb5YAAJkAQEwNjA0BggrBgEFBQcCARYoaHR0cDovL3d3dy5x
dW92YWRpc2dsb2JhbC5jb20vcmVwb3NpdG9yeTAdBgNVHSUEFjAUBggrBgEFBQcD
AgYIKwYBBQUHAwEwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5xdW92YWRp
c2dsb2JhbC5jb20vcXZzc2xnMi5jcmwwHQYDVR0OBBYEFIaA7ONC8DkR2U8dMPTh
3icjJokOMA4GA1UdDwEB/wQEAwIFoDATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkq
hkiG9w0BAQsFAAOCAQEAVJo11WgUMRBUJf2y+1X03kLHGwAITUfNFiI6ZiiMHsH0
p4B++RuijzvUjo7vYMtlPB6bioSH1Nk/gcDu6G1SJ1fVDU5c+iYx59FFLOJETGon
GF4Hq+kFau9rUxdUe4Z31WGi6W+bbFLFWVhodjzlQccyOksg4n1ke2gu2qZSCToM
IkM3B4rirCUwIj4HxJr9KSfM454uDukO3shGo48r9ZrhyvY7kRNXvRstP9HTXenE
X84o02/5dRVhy8m3zyVHwYMbJ45ze2raBeKG5DEv1hLZZ0nJk3nXX0gUwV7u87yG
8gJZsMtmfJne7iJBb1ufgmnRFJuhcN7HMpYHnVAR6g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MrtkHD2jWH1PlAMDSeB
hPZeyj6J5sgLL3H0JFy4QW7i7UETa5/MXChys8hyXTHNKj4iLOQWHNurQADclwdR
j0pezNXmrG8YI56B7F9eSVBYa4HVhuDQxW5GCda3jK633YfnW0S8MMv//2l2J+m3
UXjYbthl0TCSc7sGj38SPLmu4z33gTgPRRJ2/roqq0dgw5RVs98T5dCw5XAxyN2i
FhFTEd+2Rl8BSnR724kSkSZOBedivLsFfWj1KQL6vq3cgQUCfCEizPPFseYW6Kkl
xML9GmnZmEALZDWdjzLuru5dSsEmvmnyYNCP/xx5FmP2gp+6YwbVNp4Cxs83hHKd
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 573272372815749449724789444590514888766547989380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 09:37:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 09:47:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Card & Acquiring Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'touchpoint.lloydsbankcommercial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26357634952033863610098194879068462265169903138308450025030756741857059843928242593741763381227924962101949123428396988460507158978511568705943565336888787524535214321732806530723709739262603207647543005218394310951662278938887702349378341276255284930555357085924742524847826674628098043234037040772305453574896600851097982278508368573919372817743252477807129194017432474598360043480981043247656790438093797466492704139922058759853072205616672811719934764723279655702483040687684559361919491007782226188156916466592645702187390349030483023499835866502642813895318526129573007577324364663400726105157556112282648485297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 911962ad5b17a730fbf0de3925b1bd8cb9b85127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchpoint.lloydsbankcommercial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8680ece342f03911d94f1d30f4e1de272326890e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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