dcsrd-prod-01.lloydsbanking.com

- Lloyds Banking Group PLC -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 03:17:6d:31:9e:e3:d9:b4:5e:1f:68:b0:9f:55:52:c0 was issued on by DigiCert Inc.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Lloyds Banking Group PLC

Company registration number: SC095000
Organization: Lloyds Banking Group PLC
Locality: Edinburgh
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:17:6d:31:9e:e3:d9:b4:5e:1f:68:b0:9f:55:52:c0
Serial Number (int): 4109321529101895678744387264001168064
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a0:0f:83:04:34:90:b2:ee:e5:39:f5:f1:28:8a:35:1e:c3:61:1c:ef
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): ba:0c:08:27:e7:ba:b8:19:87:f5:39:9a:7b:76:89:41:31:4a:0a:34
Fingerprint (sha256): b0:b9:54:36:99:0e:04:af:6b:46:91:8b:57:01:59:b4:aa:a3:b5:a5:61:3b:35:6f:31:7c:e3:0b:c3:77:aa:7e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate dcsrd-prod-01.lloydsbanking.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dcsrd-prod-01.lloydsbanking.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dcsrd-prod-01.lloydsbanking.com
letsuconnect.co.uk
lloydsbank.co.uk
lloydsbank.com
www.lloydsbank.co.uk
bankofscotland.co.uk
bankofscotland.com
www.bankofscotland.com
halifax.co.uk
halifax.com
www.halifax.com
lloydstsb.co.uk
lloydstsb.com
www.lloydstsb.co.uk
www.lloydstsb.com
secure.lloydstsb.com
help.lloydstsb.com
halifaxpeoplelikeyou.co.uk
halifaxpeoplelikeyou.com
bankofscotlandbusiness.co.uk
lloydsbankcommercial.com
amconline.co.uk
bankofscotlandassets.co.uk
birminghammidshires.co.uk
bmsolutions.co.uk
uklandandfarms.co.uk
blackhorselogo.co.uk
blackhorseoffshore.co.uk
lloydsbankcommercialfinance.co.uk
btlexperts.co.uk
corporateonline.co.uk
bmmortgages.co.uk
bmselfbuildmortgages.co.uk
bankofwales.co.uk
blackhorse.co.uk
lexautolease.co.uk
lexautoleaseinteractive.co.uk
hvfvehiclefinance.co.uk
leasing4business.co.uk
cars4staff.co.uk
bankcardservice.co.uk
bankcardservices.co.uk
www.mbnanetaccess.co.uk
www.bankcardservices.co.uk
www.bankcardservice.co.uk
mbna.co.uk
apply.mbna.co.uk
www.nubacards.co.uk
www.loanfrommbna.co.uk
www.loansfrommbna.co.uk
www.mbna.eu
www.mbnaapp.co.uk
www.mbnaapplication.co.uk
www.mbnaapply.co.uk
mbnaapply.co.uk
www.mbna-applyonline.co.uk
www.mbnaapplytoday.co.uk
www.mbnacard.co.uk
www.mbnacards.co.uk
www.mbnacardservice.co.uk
www.mbnacardservices.co.uk
www.mbnacareers.co.uk
mbnacareers.co.uk
www.mbnaconnect.co.uk
www.mbnacredit.co.uk
www.mbnacustomerservice.co.uk
www.mbnadirect.co.uk
www.mbnafinancialservices.co.uk
www.mbnafinancialserviceslimited.co.uk
www.mbnagoldcard.co.uk
www.mbnainsurance.co.uk
mbnainsurance.co.uk
www.mbnaloan.co.uk
www.mbnaoffers.co.uk
www.mbnapplication.co.uk
www.mbnarewards.co.uk
www.nubacard.co.uk
www.nubacard.com
Halifax-online.co.uk
bbfleetservicesinteractive.co.uk
esavingsaccount.co.uk
onlinebankingdemo.co.uk
yourtmb.co.uk
www.bankofscotlandintermediary.co.uk
www.bankofscotland-international.com
if.com
halifax-intermediaries.co.uk
bmsolutionsmortgages.co.uk
scottishwidows.co.uk
lloydsbankinggroup.com
www.onlinebankingdemo.co.uk
bankofscotlandhalifax.co.uk
www.bankofscotlandhalifax.co.uk
bankofscotlandprivateclients.co.uk
www.bankofscotlandprivateclients.co.uk

Other certificates including the domain name lloydsbanking.com

(limited to 100 certificates)
tpp-developer.lloydsbanking.com
LBGITQMgr.S4UCTZQ2.lloydsbanking.com
lbgibm-apigateway.lloydsbanking.com
LBGITWMQClient.LLL-PROD-APP01.lloydsbanking.com
tpp-developer.lloydsbanking.com
cs-api-pentesterone-PRD.lloydsbanking.com
ms-api-connectedfi-TST.lloydsbanking.com
CDNK00.lloydsbanking.com
CDNK00.lloydsbanking.com
Sharepoint-Hybrid-Search-STS-live.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-702.lloydsbanking.com
cs-api-blueMotor-TST.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-703.lloydsbanking.com
test1-jira.devops.lloydsbanking.com
dre-out.lloydsbanking.com
APPTTVIRTUAL08A-ext.lloydsbanking.com
adfstest01global2.lloydsbanking.com
visanotify-u.lloydsbanking.com
cs-api-chrisspencer-TST.lloydsbanking.com
ms-api-bluemotor.lloydsbanking.com
Sharepoint-Hybrid-Search-STS-test.lloydsbanking.com
debtmanagergonft.lloydsbanking.com
snowinboundapi-tpbt.lloydsbanking.com
cs-api-ume-PRD.lloydsbanking.com
cs-api-afapi-PRD.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-102.lloydsbanking.com
neso.styx.lloydsbanking.com
CD.INFRP1001-to-CALLCREDIT02.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
debtmanagergopre-prod.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-102.lloydsbanking.com
sapd-callsign-dp-prod.lloydsbanking.com
jira.devops.lloydsbanking.com
visanotify-u.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-701.lloydsbanking.com
APPLGVIRTUAL2F5_to_COPLBGCDTL01.lloydsbanking.com
MVSA.lloydsbanking.com
emm-mail-nft.lloydsbanking.com
cs-api-pentesterthree-PRD.lloydsbanking.com
tpp-developer.lloydsbanking.com
CD.UNX.BASPC218-to-REISPRDAPPA387.lloydsbanking.com
BRVSWIDB1080.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
cs-api-1146533-PRD.lloydsbanking.com
CDRLSPET03C001-ext.lloydsbanking.com
sapd-callsign-dp-sit.lloydsbanking.com
developer.lloydsbanking.com
lbg-workday-sign-test.lloydsbanking.com
fuspxx.finance.lloydsbanking.com
ms-api-dcapilab-TST.lloydsbanking.com
debtmanagercommercial.lloydsbanking.com
pilot.styx.lloydsbanking.com
ss-9885991-test.lloydsbanking.com
delta.tpsa.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
bas-d-120.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-701.lloydsbanking.com
BRVSWIDB3086.lloydsbanking.com
CD.UNX.APPLV05B6-EXT.lloydsbanking.com
hybrid.pp.lloydsbanking.com
Prod-G313-REED-Recruitment.lloydsbanking.com
Adfsglobal2.lloydsbanking.com
adfsglobal2.lloydsbanking.com
CD.UNX.BASPC218.EXT.lloydsbanking.com
eia2.digital.lloydsbanking.com
sapd-callsign-dp-oat.lloydsbanking.com
ibmoffpc-lb-b2bout.test.lloydsbanking.com
ms-api-AFTEAM-TST.lloydsbanking.com
currency-ib-pp.lloydsbanking.com
nftinfra-developer.lloydsbanking.com
dexter-int.lloydsbanking.com
luat-lbgibm-microservices-branch.lloydsbanking.com
LBGITWMQClient.LLL-PROD-APP02.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-201.lloydsbanking.com
ms-api-hlpensiontrusteesltd.lloydsbanking.com
syndicate.lloydsbanking.com
CD.UNX.BASPC202-EXT.lloydsbanking.com
snowoutboundapi-tpbt.lloydsbanking.com
dre.extranet.lloydsbanking.com
NLZ-LBG-DESKTOP-PROD-101.lloydsbanking.com
GLZ-IB-LBG-DESKTOP-PROD-101.lloydsbanking.com
snowoutboundapi-tpcc.lloydsbanking.com
pre-secure-channel-api.lloydsbank.com
ms-api-9507391.lloydsbanking.com
www.luc-te5.lloydsbanking.com
debtmanagergo.lloydsbanking.com
APPTGVIRTUAL013-to-SIG.BAS.TCB.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-201.lloydsbanking.com
secure-channel-api.lloydsbank.com
ms-api-newcross.lloydsbanking.com
CD.AIX.BASPC63-to-FTPLCWL001.lloydsbanking.com
cs-api-9406012-PRE.lloydsbanking.com
cs-api-feedzai-TST.lloydsbanking.com
NLZ-LBG-DESKTOP-PREPROD-101.lloydsbanking.com
adfsiaglobal1.lloydsbanking.com
ms-api-feedzai.test.lloydsbanking.com
hybrid.dt.lloydsbanking.com
lbgibm-microservices-branch.lloydsbanking.com
cs-api-8105143-NFT.lloydsbanking.com
APPLGVIRTUAL191-to-SIG.SND.SERV5.lloydsbanking.com

Certificate

The complete raw certificate details for dcsrd-prod-01.lloydsbanking.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgbciaNSm+YhlLAf2mut
D1UhBehpEGUAfqb44maLWD/DoYWwdQY6phGLXIxJVaOTmDlypOf9NQMUF9gMcAJG
O1WBDS0E6BjMM5UC3M80L5hUGKmsY43k7rZXlJUoGJG54qIrStYcSVjamYHVvpig
o6e6HK5Lo67kmGrIfiuuqijEGWYiIvlq/fg5i9zcK1C8b1NYb2thb5lY/HGVyQXr
tYBn/sBTQUlOLevc06JmEHqz0Zrm309gofCdqzl5O7G6pQidHsgR6tJ5SbqK4esG
xNJpYy7d7iklYHTcGJad5PpB7tfZNRFidvOsqLL+Svq1d91hwSwuLDZCFSA4sXZ4
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4109321529101895678744387264001168064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SC095000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Edinburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lloyds Banking Group PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dcsrd-prod-01.lloydsbanking.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21968848583615342712404332591887351224775480478505144708128628801074429629348629812593277816651517704058927429011335401749374138415136665571463951175424214367160927490510725963102092662762275568289152255076410059910124362531270100481362572357765030886408359286737832625778304532010140023406400014046886478948563869572628340006463044743440848043262099224730806680011174970878758152802550539084387883480966747048220637382962655638894167608611338416417690534133498715127980501761077161634056731056408122519263974710307829745949392496199025303218836726578970765667060881234954789296949322630541336718356867248001635481779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a00f83043490b2eee539f5f1288a351ec3611cef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcsrd-prod-01.lloydsbanking.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'letsuconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lloydsbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofscotland.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofscotland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankofscotland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifax.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halifax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydstsb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydstsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lloydstsb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lloydstsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.lloydstsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.lloydstsb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifaxpeoplelikeyou.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifaxpeoplelikeyou.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofscotlandbusiness.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydsbankcommercial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amconline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofscotlandassets.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birminghammidshires.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsolutions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uklandandfarms.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackhorselogo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackhorseoffshore.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydsbankcommercialfinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btlexperts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmmortgages.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmselfbuildmortgages.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofwales.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackhorse.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexautolease.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexautoleaseinteractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvfvehiclefinance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leasing4business.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cars4staff.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankcardservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankcardservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnanetaccess.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankcardservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankcardservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbna.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.mbna.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nubacards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loanfrommbna.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loansfrommbna.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbna.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnaapp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnaapplication.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnaapply.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbnaapply.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbna-applyonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnaapplytoday.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnacard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnacards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnacardservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnacardservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnacareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbnacareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnaconnect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnacredit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnacustomerservice.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnadirect.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnafinancialservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnafinancialserviceslimited.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnagoldcard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnainsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbnainsurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnaloan.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnaoffers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnapplication.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnarewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nubacard.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nubacard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Halifax-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbfleetservicesinteractive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esavingsaccount.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onlinebankingdemo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourtmb.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankofscotlandintermediary.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankofscotland-international.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'if.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halifax-intermediaries.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmsolutionsmortgages.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scottishwidows.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lloydsbankinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onlinebankingdemo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofscotlandhalifax.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankofscotlandhalifax.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankofscotlandprivateclients.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bankofscotlandprivateclients.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00cf546e07cb1c23779caaee9df5b152b37a94597b8679dd12a79c3c43d84dfbcceffb4f12f4662bc1e2abf3d407eeb2d4c1c74e007569a79f779d53c694640aaf74cf4e78c0b28d02b600c36bb5c0c0da58a4027703eacd22ecc0bea650cfcc8893e05083e469ceb039af9ff9b4e0c192c4a3c670acabeec5f43a5116f67e07a18eae94dc39165864f210407453e8ecd427108702038d53c99464e7afd312a352fe603acb2ce60ea7ba292f84ebbdac0730b2ecae3f69149ec7dbd8deb87575a3603561cda71fda15af2b113a9a6ce8c06c6b1e83936c4d52d3639bffd813da62dba053b9198e03547f59661816f4ef0983fc54a59322fd025631c73a826f4c0e