www.eserve.avivaservices.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 09:46:ae:7c:a3:0f:56:dd:07:52:80:17:e1:3c:b4:4e was issued on by Amazon.

With 69 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.eserve.avivaservices.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:46:ae:7c:a3:0f:56:dd:07:52:80:17:e1:3c:b4:4e
Serial Number (int): 12330051756189468638512084372208530510
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 31:2c:57:0a:38:88:dc:b9:98:40:22:08:ff:c0:42:a0:c8:45:a1:6f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 63:4a:24:66:b6:21:64:c7:35:69:bc:59:14:ba:5b:e2:07:47:b2:c0
Fingerprint (sha256): 00:8d:e4:8d:7a:3a:eb:a9:ac:03:bc:1a:f2:9a:b5:74:e7:b3:53:43:87:0e:3f:01:36:7e:b4:39:35:ef:b0:3b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate www.eserve.avivaservices.co.uk

69

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.eserve.avivaservices.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.eserve.avivaservices.co.uk
myhealthcounts.co.uk
www.getactive.aviva.co.uk
www.hibernian.ie
tiltai.aviva.lt
login.avivainvestors.com
www.myhealthcounts.co.uk
www.avivatraders.com
www.avivainvestors.nl
www.avivainvestors.be
www.partenaireaviva.ca
www.online.avivaservices.co.uk
www.vendor-lookup.aviva.ca
www.avivainvestors.tel
www.avivainvestors.it
brand.avivainvestors.com
www.avivainvestors.es
www.avivainvestors.at
sg.avivainvestors.com
tw.avivainvestors.com
media.avivainvestors.com
www.avivainvestors.ca
se.avivainvestors.com
www.training.online.avivaservices.co.uk
www.szkolenia.aviva.pl
www.avivafa.com.sg
cas-uat2.aviva.pl
insights.avivainvestors.com
withprofitsfunds.co.uk
www.dom.aviva.pl
www.chmura.aviva.pl
vendor-lookup.aviva.ca
www.avivahealthandwellbeing.co.uk
www.avivainvestors.sg
www.cutredtape.co.uk
www.avivainvestors.se
zycie-i-zdrowie.aviva.pl
aims.avivainvestors.com
www.avivainvestors.com.au
www.friendslife.com
www.avivainvestors.de
us.avivainvestors.com
www.centrumfinansow.aviva.pl
www.avivainvestors.ch
www.withprofitsfunds.co.uk
stadium.aviva.ie
www.adviser.avivaservices.co.uk
www.agrupa.aviva.pl
www.avivapartner.ca
aimsti.avivainvestors.com
www.avivainvestors.co.uk
www.bcmotorcycle.aviva.ca
ustawienia-beta.aviva.com.pl
www.monaviva.avivainsurance.ca
www.aviva.com.sg
www.avivainvestors.ie
uk.avivainvestors.com
www2.aviva.pl
www.ofe.aviva.pl
www.myaviva.avivainsurance.ca
www.login.avivainvestors.com
www.member.avivaservices.co.uk
www.avivacanada.com
www.avivaavantage.com
www.controlyourpension.com
www.regs.avivaservices.co.uk
www.avivainvestors.lu
www.hibernianaviva.ie
avivamicrosite.co.uk

Other certificates including the domain name avivaservices.co.uk

(limited to 100 certificates)
www.eserve.avivaservices.co.uk
cert02.uk.aviva.com
cert10.uk.aviva.com
cert10.uk.aviva.com
cert01.tmp.aviva.com
cert10.uk.aviva.com
cert01.tmp.aviva.com
cert10.uk.aviva.com

cert02.uk.aviva.com
avivaservices.co.uk
cert10.uk.aviva.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
np-cert01.uk.aviva.com
cert01.tmp.aviva.com
regs.avivaservices.co.uk
cert01.tmp.aviva.com
cert01.tmp.aviva.com
cert02.uk.aviva.com
cert01.tmp.aviva.com
*.avivaservices.co.uk
cert02.uk.aviva.com
cert01.tmp.aviva.com
adviser.avivaservices.co.uk
cert02.uk.aviva.com
cert01.tmp.aviva.com
np-cert01.uk.aviva.com
np-cert02.uk.aviva.com
clientauth.aviva.co.uk
cert01.tmp.aviva.com
cert01.tmp.aviva.com
np-cert01.uk.aviva.com
cert02.uk.aviva.com
cert01.tmp.aviva.com
cert02.uk.aviva.com
cert01.tmp.aviva.com
cert02.uk.aviva.com
np-cert01.uk.aviva.com
cert02.uk.aviva.com
cert05.uk.aviva.com
np-cert01.uk.aviva.com
cert02.uk.aviva.com
cert01.tmp.aviva.com
clientauth.aviva.co.uk
cert01.tmp.aviva.com
cert02.uk.aviva.com
clientauth.aviva.co.uk
cert05.uk.aviva.com
cert01.tmp.aviva.com
www43.avivaservices.co.uk
cert02.uk.aviva.com
insights.avivainvestors.com
clientauth.aviva.co.uk
cert01.tmp.aviva.com
cert02.uk.aviva.com
cert05.uk.aviva.com
cert02.uk.aviva.com
clientauth.aviva.co.uk
cert01.tmp.aviva.com
cert01.tmp.aviva.com
eserve.avivaservices.co.uk
np-cert01.uk.aviva.com
cert02.uk.aviva.com
cert01.tmp.aviva.com
member.avivaservices.co.uk
cert01.tmp.aviva.com
cert01.tmp.aviva.com
cert10.uk.aviva.com
np-cert01.uk.aviva.com
clientauth.aviva.co.uk
clientauth.aviva.co.uk
clientauth.aviva.co.uk
cert01.tmp.aviva.com
cert10.uk.aviva.com
cert02.uk.aviva.com
cert02.uk.aviva.com
cert05.uk.aviva.com
cert02.uk.aviva.com
np-cert02.uk.aviva.com
cert02.uk.aviva.com
np-cert01.uk.aviva.com
np-cert01.uk.aviva.com
cert01.tmp.aviva.com
np-cert01.uk.aviva.com
cert10.uk.aviva.com
cert01.tmp.aviva.com
cert10.uk.aviva.com
cert01.tmp.aviva.com
cert02.uk.aviva.com
cert01.tmp.aviva.com
cert02.uk.aviva.com
www.friendslife.com
online.avivaservices.co.uk
cert02.uk.aviva.com
www.avivainvestors.be
cert02.uk.aviva.com
clientauth.aviva.co.uk
*.avivaservices.co.uk
www.avivainvestors.be

Certificate

The complete raw certificate details for www.eserve.avivaservices.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMgDCCC2igAwIBAgIQCUaufKMPVt0HUoAX4Ty0TjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjA1MjUwMDAwMDBaFw0yMzA2MjMy
MzU5NTlaMCkxJzAlBgNVBAMTHnd3dy5lc2VydmUuYXZpdmFzZXJ2aWNlcy5jby51
azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANIIWOBIAYsIB38IiCBC
fydhA0sgLknBgGGbj/h/O/V9UcdJCrPQEhwS9IAhUrBygwP8R+npyw7CEPtzNR2e
D4wmQl28H0TCVUUqgPphVjM/GtUdDNtzxoSVE4E70W6hclWkU9OYe6y2mI581PVK
NwvGgVdmPpcVmlRIhbDJgdlEET5sr0L+we1lkLlDyyHqUq2BqP3ynd75wk4X00T5
VLo+Nsko4aatRJXK3rrL7YzgTDtO+qRLv3mt7s0n60c4wmnE4YMpkQPy6QWEkoWz
TskL7lWHBAuzfHFojwJarymFGxQJR5Tz3ULt3Xcyztcq9HSByyYIAHMrHuu15bWu
7UUCAwEAAaOCCYUwggmBMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q
MB0GA1UdDgQWBBQxLFcKOIjcuZhAIgj/wEKgyEWhbzCCBrIGA1UdEQSCBqkwggal
gh53d3cuZXNlcnZlLmF2aXZhc2VydmljZXMuY28udWuCFG15aGVhbHRoY291bnRz
LmNvLnVrghl3d3cuZ2V0YWN0aXZlLmF2aXZhLmNvLnVrghB3d3cuaGliZXJuaWFu
Lmllgg90aWx0YWkuYXZpdmEubHSCGGxvZ2luLmF2aXZhaW52ZXN0b3JzLmNvbYIY
d3d3Lm15aGVhbHRoY291bnRzLmNvLnVrghR3d3cuYXZpdmF0cmFkZXJzLmNvbYIV
d3d3LmF2aXZhaW52ZXN0b3JzLm5sghV3d3cuYXZpdmFpbnZlc3RvcnMuYmWCFnd3
dy5wYXJ0ZW5haXJlYXZpdmEuY2GCHnd3dy5vbmxpbmUuYXZpdmFzZXJ2aWNlcy5j
by51a4Iad3d3LnZlbmRvci1sb29rdXAuYXZpdmEuY2GCFnd3dy5hdml2YWludmVz
dG9ycy50ZWyCFXd3dy5hdml2YWludmVzdG9ycy5pdIIYYnJhbmQuYXZpdmFpbnZl
c3RvcnMuY29tghV3d3cuYXZpdmFpbnZlc3RvcnMuZXOCFXd3dy5hdml2YWludmVz
dG9ycy5hdIIVc2cuYXZpdmFpbnZlc3RvcnMuY29tghV0dy5hdml2YWludmVzdG9y
cy5jb22CGG1lZGlhLmF2aXZhaW52ZXN0b3JzLmNvbYIVd3d3LmF2aXZhaW52ZXN0
b3JzLmNhghVzZS5hdml2YWludmVzdG9ycy5jb22CJ3d3dy50cmFpbmluZy5vbmxp
bmUuYXZpdmFzZXJ2aWNlcy5jby51a4IWd3d3LnN6a29sZW5pYS5hdml2YS5wbIIS
d3d3LmF2aXZhZmEuY29tLnNnghFjYXMtdWF0Mi5hdml2YS5wbIIbaW5zaWdodHMu
YXZpdmFpbnZlc3RvcnMuY29tghZ3aXRocHJvZml0c2Z1bmRzLmNvLnVrghB3d3cu
ZG9tLmF2aXZhLnBsghN3d3cuY2htdXJhLmF2aXZhLnBsghZ2ZW5kb3ItbG9va3Vw
LmF2aXZhLmNhgiF3d3cuYXZpdmFoZWFsdGhhbmR3ZWxsYmVpbmcuY28udWuCFXd3
dy5hdml2YWludmVzdG9ycy5zZ4IUd3d3LmN1dHJlZHRhcGUuY28udWuCFXd3dy5h
dml2YWludmVzdG9ycy5zZYIYenljaWUtaS16ZHJvd2llLmF2aXZhLnBsghdhaW1z
LmF2aXZhaW52ZXN0b3JzLmNvbYIZd3d3LmF2aXZhaW52ZXN0b3JzLmNvbS5hdYIT
d3d3LmZyaWVuZHNsaWZlLmNvbYIVd3d3LmF2aXZhaW52ZXN0b3JzLmRlghV1cy5h
dml2YWludmVzdG9ycy5jb22CHHd3dy5jZW50cnVtZmluYW5zb3cuYXZpdmEucGyC
FXd3dy5hdml2YWludmVzdG9ycy5jaIIad3d3LndpdGhwcm9maXRzZnVuZHMuY28u
dWuCEHN0YWRpdW0uYXZpdmEuaWWCH3d3dy5hZHZpc2VyLmF2aXZhc2VydmljZXMu
Y28udWuCE3d3dy5hZ3J1cGEuYXZpdmEucGyCE3d3dy5hdml2YXBhcnRuZXIuY2GC
GWFpbXN0aS5hdml2YWludmVzdG9ycy5jb22CGHd3dy5hdml2YWludmVzdG9ycy5j
by51a4IZd3d3LmJjbW90b3JjeWNsZS5hdml2YS5jYYIcdXN0YXdpZW5pYS1iZXRh
LmF2aXZhLmNvbS5wbIIed3d3Lm1vbmF2aXZhLmF2aXZhaW5zdXJhbmNlLmNhghB3
d3cuYXZpdmEuY29tLnNnghV3d3cuYXZpdmFpbnZlc3RvcnMuaWWCFXVrLmF2aXZh
aW52ZXN0b3JzLmNvbYINd3d3Mi5hdml2YS5wbIIQd3d3Lm9mZS5hdml2YS5wbIId
d3d3Lm15YXZpdmEuYXZpdmFpbnN1cmFuY2UuY2GCHHd3dy5sb2dpbi5hdml2YWlu
dmVzdG9ycy5jb22CHnd3dy5tZW1iZXIuYXZpdmFzZXJ2aWNlcy5jby51a4ITd3d3
LmF2aXZhY2FuYWRhLmNvbYIVd3d3LmF2aXZhYXZhbnRhZ2UuY29tghp3d3cuY29u
dHJvbHlvdXJwZW5zaW9uLmNvbYIcd3d3LnJlZ3MuYXZpdmFzZXJ2aWNlcy5jby51
a4IVd3d3LmF2aXZhaW52ZXN0b3JzLmx1ghV3d3cuaGliZXJuaWFuYXZpdmEuaWWC
FGF2aXZhbWljcm9zaXRlLmNvLnVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2Ny
bC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAwwCjAI
BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz
cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu
c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIB
fwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr
7Otp4Xd9bQa9bgAAAYD6rNqUAAAEAwBHMEUCIQDcR3FmrmOqPLMba/pBPiApBMjq
+N/ZW0na16y8LPjLjAIgQUM25QXhqK7gIZuD6WbOWuvbCvEmEd+OKHMRG2PRCPYA
dwA1zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYD6rNqeAAAEAwBI
MEYCIQCHxPAF3O368T1tYpMuE3mizHnySsk/qEcOcVMdSYx+aQIhALCmaohNV810
y7nmgXsGpeJ+R2NVDF6Ph4u1hrNofDgNAHYAtz77JN+cTbp18jnFulj0bF38Qs96
nzXEnh0JgSXttJkAAAGA+qzahAAABAMARzBFAiA/5OEJRs2mrSBpBOH/A7auQxKM
mP+/DWYXgcZq/bh0dQIhAPYysXUZ0QgOz/u6cnJuCEVPgBzMSuVlkuSLh9I50W78
MA0GCSqGSIb3DQEBCwUAA4IBAQCDSegQjqCOuIDthFNAGKZfLSAggQ5+zPLQRUFt
mNlxWgz9Xug1cOpde3UZvMoZq1Kfnb8blyZgg+g58DKpYClbT6rejUrqp0FNuWwB
zISk+6/4wlyeP9FqVlW/Vyom1bduHN+/7Ig4mVk/kwf2KT8aF5Juk0uCQlVNysRg
f790/8cmMxb0S+OYHgBpYGdQg7074+VYX620Wmhoa19EeEi9H0cIL/39Fmkzbar4
mxmgS9mc62cp/x5vQo6xHPB7u0gGJ+NIaoytJgoJg86SKb3sce8Vndtnmo/l/lgF
b6dHcP9fg5KycFdkbZtynzqFQj1BQqlOGmxfVsqR7NN/UcGJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ghY4EgBiwgHfwiIIEJ/
J2EDSyAuScGAYZuP+H879X1Rx0kKs9ASHBL0gCFSsHKDA/xH6enLDsIQ+3M1HZ4P
jCZCXbwfRMJVRSqA+mFWMz8a1R0M23PGhJUTgTvRbqFyVaRT05h7rLaYjnzU9Uo3
C8aBV2Y+lxWaVEiFsMmB2UQRPmyvQv7B7WWQuUPLIepSrYGo/fKd3vnCThfTRPlU
uj42ySjhpq1ElcreusvtjOBMO076pEu/ea3uzSfrRzjCacThgymRA/LpBYSShbNO
yQvuVYcEC7N8cWiPAlqvKYUbFAlHlPPdQu3ddzLO1yr0dIHLJggAcyse67Xlta7t
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12330051756189468638512084372208530510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.eserve.avivaservices.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26514160186924823819800452220585761743907508748187673399223259465441839217453474742554251373888371601728588198078300354696674038258283198758217227779301639604488496863760276497478242146189069005095071594537187400073605486229188251101862061282742121196442615129037068075180716360897208061630274893036631372457298137586596194628444595385104536602732928481276417946408368249910754392656738750479996247533301008195427936208706507742062300405561332033096686247145628442651704598563669921939798147964425048016671117657446319012275265416245196793936626722059859302363550063377269814689048631276512967730698206561625963425093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							312c570a3888dcb998402208ffc042a0c845a16f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1705 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eserve.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthcounts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getactive.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hibernian.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiltai.aviva.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhealthcounts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivatraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partenaireaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendor-lookup.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.training.online.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.szkolenia.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivafa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-uat2.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withprofitsfunds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dom.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chmura.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor-lookup.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivahealthandwellbeing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutredtape.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zycie-i-zdrowie.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aims.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumfinansow.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.withprofitsfunds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadium.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adviser.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrupa.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivapartner.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimsti.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustawienia-beta.aviva.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofe.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.login.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.member.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaavantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regs.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hibernianaviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamicrosite.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000180faacda940000040300473045022100dc477166ae63aa3cb31b6bfa413e202904c8eaf8dfd95b49dad7acbc2cf8cb8c0220414336e505e1a8aee0219b83e966ce5aebdb0af12611df8e2873111b63d108f600770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000180faacda9e000004030048304602210087c4f005dcedfaf13d6d62932e1379a2cc79f24ac93fa8470e71531d498c7e69022100b0a66a884d57cd74cbb9e6817b06a5e27e4763550c5e8f878bb586b3687c380d007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000180faacda84000004030047304502203fe4e10946cda6ad206904e1ff03b6ae43128c98ffbf0d661781c66afdb87475022100f632b17519d1080ecffbba72726e08454f801ccc4ae56592e48b87d239d16efc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008349e8108ea08eb880ed84534018a65f2d2020810e7eccf2d045416d98d9715a0cfd5ee83570ea5d7b7519bcca19ab529f9dbf1b97266083e839f032a960295b4faade8d4aeaa7414db96c01cc84a4fbaff8c25c9e3fd16a5655bf572a26d5b76e1cdfbfec883899593f9307f6293f1a17926e934b8242554dcac4607fbf74ffc7263316f44be3981e006960675083bd3be3e5585fadb45a68686b5f447848bd1f47082ffdfd1669336daaf89b19a04bd99ceb6729ff1e6f428eb11cf07bbb480627e3486a8cad260a0983ce9229bdec71ef159ddb679a8fe5fe58056fa74770ff5f8392b27057646d9b729f3a85423d4142a94e1a6c5f56ca91ecd37f51c189