cert11.uk.aviva.com

- Aviva PLC -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 1d:f0:ae:ec:fa:5f:ac:ef:38:08:d2:d5:16:35:5b:d3 was issued on by Sectigo Limited.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Aviva PLC

Company registration number: 02468686
Organization: Aviva PLC
State / Province: London, City of
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 1d:f0:ae:ec:fa:5f:ac:ef:38:08:d2:d5:16:35:5b:d3
Serial Number (int): 39797311038415224770139415792170916819
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: f0:58:8f:cc:d8:39:5d:e8:9b:65:14:f2:11:55:71:f3:60:dd:88:46
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): ee:1f:97:14:4b:e1:05:c9:b9:9e:91:91:fa:01:a2:f3:b7:da:de:77
Fingerprint (sha256): 02:3e:24:0d:c1:c9:ea:e1:cb:cd:5b:b0:e6:8b:1a:20:07:46:9f:a7:cc:c8:1d:5c:f8:82:47:7a:77:0d:99:31

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate cert11.uk.aviva.com

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert11.uk.aviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cert11.uk.aviva.com
admin.avivamymoney.co.uk
adminfnz.aviva.co.uk
allianz.avivamymoney.co.uk
api.aviva.ie
bakerhughes.avivamymoney.co.uk
bridon.avivamymoney.co.uk
britishairways.avivamymoney.co.uk
brokerfirst.friendsfirst.ie
business.aviva.co.uk
chat.avivab2b.co.uk
cisco.avivamymoney.co.uk
coral.avivamymoney.co.uk
crisp.avivamymoney.co.uk
dssmith.avivamymoney.co.uk
flaeadmin.avivamymoney.co.uk
fnz.avivamymoney.co.uk
galabingo.avivamymoney.co.uk
galacoralgroup.avivamymoney.co.uk
h-pod.aviva.co.uk
hca.avivamymoney.co.uk
hermanmiller.avivamymoney.co.uk
iag.avivamymoney.co.uk
ihsmarkit.avivamymoney.co.uk
knorr-bremse.avivamymoney.co.uk
marketingelevator.avivab2b.co.uk
marshalls.avivamymoney.co.uk
mmco.avivamymoney.co.uk
molsoncoors.avivamymoney.co.uk
morrisons.avivamymoney.co.uk
nab.avivamymoney.co.uk
nationwide.avivamymoney.co.uk
nuffieldhealth.avivamymoney.co.uk
oauth.aviva.co.uk
platform.avivab2b.co.uk
pwc.avivamymoney.co.uk
rollsroyce.avivamymoney.co.uk
rsm.avivamymoney.co.uk
rugbyfootballunion.avivamymoney.co.uk
service.friendsfirst.ie
servisair.avivamymoney.co.uk
sharedservice-live.aviva.ie
sharedservice.aviva.ie
sse.avivamymoney.co.uk
tcharrison.avivamymoney.co.uk
tools.friendsfirst.ie
training.friendsfirst.ie
tsp.avivamymoney.co.uk
universityoflaw.avivamymoney.co.uk
williams.avivamymoney.co.uk
www-commissioning.avivainvestors.com
www.brokerfirst.friendsfirst.ie
www.brokerfirst.ie
www.friendsfirst.ie
www.service.friendsfirst.ie

Other certificates including the domain name aviva.com

(limited to 100 certificates)
aviva-swi-amp-fs-01.globalapps.aviva.com
incapsula.com
at.aviva.com
community-fund-italia.aviva.com
avivaprivacy.uk
cert02.uk.aviva.com
cert03.uk.aviva.com
cert06.uk.aviva.com
cert01.as.aviva.com
avivaprivacy.uk
np-cert02.uk.aviva.com
in.aviva.com
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
cert06.uk.aviva.com
idmadmin.globalapps.aviva.com
mpower.non.prod.ana.corp.aviva.com
cert01.ca.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
digital.aviva.com
cert01.ca.aviva.com
redirects.aviva.com
agility-europe.globalapps.aviva.com
icare-uat.globalapps.aviva.com
cert06.uk.aviva.com
incapsula.com
cert04.uk.aviva.com
cms.aviva.com
sv.nonprod.ana.corp.aviva.com
avivaprivacy.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
cert10.uk.aviva.com
boson-services-gateway.globalapps.aviva.com
cert01.tmp.aviva.com
lafabrique-france.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
np-cert02.uk.aviva.com
incapsula.com
cert10.uk.aviva.com
camppe.external.globalapps.aviva.com
proinvest.com.sg
cert01.uk.aviva.com
avivaprivacy.uk
suretyngweb.qa.ana.corp.aviva.com
avivaprivacy.uk
cert01.uk.aviva.com
mpower.non.prod.ana.corp.aviva.com
vaultqa.ana.corp.aviva.com
bigd-kafkadev2.globalapps.aviva.com
cert08.uk.aviva.com
yyzbac1sis1.ana.corp.aviva.com
cyberark-uat.globalapps.aviva.com
www.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
rewards.aviva.com
workbench.prod-globalapps.aviva.com
cx2.globalapps.aviva.com
redirects.aviva.com
yyzsql3047.ana.corp.aviva.com
cert01.ca.aviva.com
mail.aviva.com
cert03.uk.aviva.com
empower.preprod.ana.corp.aviva.com
cert01.as.aviva.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert07.uk.aviva.com
cert01.tmp.aviva.com
cert05.uk.aviva.com
yyzbsm1011.ana.corp.aviva.com
iaccess.ana.corp.aviva.com
www.aviva.co.uk
cert03.uk.aviva.com
cert01.as.aviva.com
yyzcpm1201.ana.corp.aviva.com
shareplans.aviva.com
incapsula.com
ci-master.ana.corp.aviva.com
cert04.uk.aviva.com
community-fund-italia.aviva.com
incapsula.com
cert05.uk.aviva.com

arc.globalapps.aviva.com
cert10.uk.aviva.com
avivaprivacy.uk
incapsula.com
nonprod.ratabasecat.ana.corp.aviva.com
redirects.aviva.com
yyzetl1003.ana.corp.aviva.com
cert04.uk.aviva.com
cert08.uk.aviva.com
nationalhomewarranty.com

Certificate

The complete raw certificate details for cert11.uk.aviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZr3+9Wt2IrsJayWjVFd
U6D8HAOU6/nHKSXT/1FDHusp4MEjtbU0+n28/4VPFK7yp7c5mxyPq6QhZwBSq3K0
o9V6tpXagfsFnOVBi6k9GyXvn3/a3V51QuW6UBPTOksm7DII5gxDSxXkb9ZHeZGI
7Sf8AZxNTs3UPtwSYnmP1PA13bwoN3G3JFnylp74yxubuvjOj0orb45mR7qRS8hq
JSCcSq+ukczJykqtWX6pF+XtNERFHkBd3SGlXTcgqURqBPr+9YDv9Iuy6d4BvNUb
HkMxnlTA2T2vroABbSMNgN5q2NVMnS5bm0z1EnOcTVcF9uJ8sSgacJzLBcwn5Kr7
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 39797311038415224770139415792170916819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02468686'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert11.uk.aviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19390878567226091046821292171494489271739796758983907543758336978577450782688763453753668798788723749117438140763362561236996672748911712724257820455812002135105948554285168839325213204182052933576445149045041924351900625190142081877358079140691710950816195667007241286296864565180277754942200680883826276024049709647756540971881218949294409726409651635431649440980292217699830760568014343423914808224212612771738391991953647705928699264982083465608102455132161907410520766433274900740331505504306073259858159115138870131639455100721118936471243141739035963338979192907596187818447151967095871041409095893538042477449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0588fccd8395de89b6514f2115571f360dd8846
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1514 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert11.uk.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfnz.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bakerhughes.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridon.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britishairways.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokerfirst.friendsfirst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cisco.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coral.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crisp.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dssmith.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaeadmin.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fnz.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galabingo.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'galacoralgroup.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h-pod.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hca.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hermanmiller.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iag.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ihsmarkit.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knorr-bremse.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketingelevator.avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marshalls.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmco.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'molsoncoors.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morrisons.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nab.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationwide.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuffieldhealth.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwc.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollsroyce.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsm.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfootballunion.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.friendsfirst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servisair.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedservice-live.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharedservice.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sse.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tcharrison.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.friendsfirst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.friendsfirst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tsp.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universityoflaw.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williams.avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-commissioning.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokerfirst.friendsfirst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brokerfirst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendsfirst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.service.friendsfirst.ie'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f360ba498ba9e65588a9aa5bb3563d334f02675681c780e770a2dd3e5bfd421c8f8ceff210879a4bd507cdd6dd621abf5f8a53eaba8aa23b3a3854a9cce5ea2c938ca594d06816a1773588041c22cd6cc42453471d84deee8a331485f8d49d94a565ac88459fdee1a5237a3d33d4c2af8ad8c4361afacf4e5656c0ffb0e88b9e774f03139040dc29d735e6f03964e05fcba00f1c7c18b1bef61d1ae12f408ae69d0ffcd20a42c371b773fc6b5bdaaf29a28ed7ac6faba7d8f893ac771f34dac92886baa4b7228fa9eae43ee4db5d427086fddc81a425d5d52a8c38b2de25aa3b72491796307b5758f39713711d2f166e68fd84317a129605dfe21cb5ef2a0bc