www.smartdata.lloydsbankcommercial.com

- MasterCard International -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 19:1c:22:d5:9b:d9:b0:76:00:00:00:00:50:e6:42:87 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MasterCard International

Organization: MasterCard International
Organization unit: BIP01 DIDC
Locality: Waterloo
Country: BE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 19:1c:22:d5:9b:d9:b0:76:00:00:00:00:50:e6:42:87
Serial Number (int): 33376790732420358429673997975526195847
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 9e:3a:b4:98:cb:f0:3b:a2:19:a3:d1:88:cd:6a:6d:09:ff:af:1f:54
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 8e:dc:23:e2:75:75:d7:26:59:dd:33:28:b1:e5:e3:be:80:6a:0a:bb
Fingerprint (sha256): c1:6f:ac:0c:80:6a:72:0a:62:75:25:2c:bf:cf:5e:90:86:82:34:6d:e4:91:51:aa:8e:83:a1:98:ec:0f:1e:19

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.smartdata.lloydsbankcommercial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.smartdata.lloydsbankcommercial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.smartdata.lloydsbankcommercial.com

Other certificates including the domain name lloydsbankcommercial.com

(limited to 100 certificates)
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
lloydsbankcommercial.com
amconline.co.uk
volunteering.lloydsbankinggroup.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
www.lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.epayvirtual.lloydsbankcommercial.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
www.prepaid.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.smartdata.lloydsbankcommercial.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
international.lloydsbank.com
international.lloydsbank.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
amconline.co.uk
sdg2demo.commerzbank.com
www.amconline.co.uk
customerservice.lloydsbankcommercial.com
amconline.co.uk
amconline.co.uk
www.amconline.co.uk
sdg2.comdata.com
touchpoint.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
customerservice.lloydsbankcommercial.com
sdg2.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.lloydsbankcommercial.com
amconline.co.uk
www.test-smartdata.lloydsbankcommercial.com
www.test-smartdata.lloydsbankcommercial.com
www.lloydsbankcommercial.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
sdg2.comdata.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
customerservice.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
mcincontrol.mastercard.com
amconline.co.uk
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
sdg2.comdata.com
international.lloydsbank.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
www.test-smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
international.lloydsbank.com
amconline.co.uk
customerservice.lloydsbankcommercial.com
international.lloydsbank.com
sdg2demo.comdata.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
dcsrd-prod-01.lloydsbanking.com
international.lloydsbank.com
www.smartdata.lloydsbankcommercial.com
blog.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
www.smartdata.lloydsbankcommercial.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
AZ-LBG-DESKTOP-PROD-702.lloydsbanking.com
touchpoint.lloydsbankcommercial.com
international.lloydsbank.com
international.lloydsbank.com
lloydsbankcommercial.com
customerservice.lloydsbankcommercial.com
www.amconline.co.uk
www.amconline.co.uk
international.lloydsbank.com

Certificate

The complete raw certificate details for www.smartdata.lloydsbankcommercial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE/L9HntGuQeZ2iCBxyL
EcwZOV6tT+Z3lwkbq6pGIhqCI3ZefEao9HGlIym06V37cAblnYvJxvRjLKZ9xPXW
uvsa4Lgygft8m2JncF88d+HchwcfF/FerrsL6mVaPIuoXE17RNh7DxPxp4T+XzcM
kiUBO8hn6/+ORrRn2OvHeukL3M1D/q+9G3Mt7aLD8stSnkzC2Tmz6DVGFRZD7nwP
zl16I2wK4MLL4Dbrhi44ha7Z5rrjXWYwy1bu70joqpWppsuXLDU9IJcp73GrEVxT
3yfwqZVhcFqh4ch6MWc7HXtaMQgr7nwNfMNw8wVmFon3vsxiijBg8765h0PyqGDT
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33376790732420358429673997975526195847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-16 13:08:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-15 13:38:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MasterCard International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIP01 DIDC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.smartdata.lloydsbankcommercial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19227571573763116008164734510626091313930016637425753808586294327895111948449889290163740993656016675980876675659739525452400659028385757625895887854469651947702890296353778577373518545444042679373577778922946782142063123438986709338485659956044208102376865341937358480117034528776260582154362920496502931404963299306948437788903087329658699207702088872722891873961016537414348667453652178249770381633985321737916778163349376520396748606362867774233590388706609367043710114950157228694636027224359815366162796350054961269956196282010261361652392259042309340156818252670111142638592034356550074516932548571023735313157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartdata.lloydsbankcommercial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9e3ab498cbf03ba219a3d188cd6a6d09ffaf1f54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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