np-cert02.uk.aviva.com

- Aviva PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number fa:ad:c8:70:41:ce:0f:2f:da:02:d1:1e:97:e2:18:fd was issued on by Sectigo Limited.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Organization: Aviva PLC
Organization unit: Digital
Address: 1 Undershaft
Address: St Helens
Postal code: EC3P 3DQ
State / Province: London
Locality: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): fa:ad:c8:70:41:ce:0f:2f:da:02:d1:1e:97:e2:18:fd
Serial Number (int): 333209331678596061412809746827897346301
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 67:b3:f1:6f:99:0e:2e:74:71:cb:cd:d5:4f:70:bd:8d:69:c5:ff:09
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 6b:77:d2:63:3a:b5:4a:58:c9:1c:bb:8c:27:6a:ed:b8:12:fc:b2:63
Fingerprint (sha256): 07:3a:99:a5:39:82:9c:dc:28:91:20:b7:70:8a:f7:59:23:63:36:cf:79:1d:f9:4e:a0:dc:5e:3a:4c:65:ba:87

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate np-cert02.uk.aviva.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for np-cert02.uk.aviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

np-cert02.uk.aviva.com
*.accounts.aviva.fr
*.afer-prevoyance.aviva.fr
*.api.aviva.fr
*.auto-enrolmentmanagerpp.co.uk
*.av.qs.dev-online-insure.com
*.av.qs.pre-online-insure.com
*.av.qs.rwy-online-insure.com
*.av.qs.stg-online-insure.com
*.av.qs.sys-online-insure.com
*.aviva-assurances-clients.com
*.aviva-box-courtage.com
*.aviva-life.fr
*.aviva-partenaires.com
*.aviva.com.pl
*.aviva.fr
*.aviva.ie
*.aviva.pl
*.avivab2b.co.uk
*.avivabroker.ie
*.avivadirect.fr
*.avivainvestors.com
*.avivaitalia.it
*.avivaplus.it
*.avivasa.com.tr
*.cgpe-apporteur.aviva.fr
*.clienthsbc.aviva.fr
*.demo.auto-enrolmentmanager.co.uk
*.dev-aviva.io
*.dev-avivab2b.co.uk
*.dev-avivainvestors.com
*.dev-erfunding.co.uk
*.dev-friendslife.co.uk
*.dev-spotlightrecognition.me
*.eurofil.com
*.hsbc.aviva.fr
*.iquo.co.uk
*.italia.aviva.com
*.mybusiness.dev-aviva.co.uk
*.mybusiness.pre-aviva.co.uk
*.mybusiness.rwy-aviva.co.uk
*.mybusiness.stg-aviva.co.uk
*.mybusiness.sys-aviva.co.uk
*.nieruchomosci.expander.pl
*.practice-autoenrolmentmanager.co.uk
*.pre-aviva.io
*.pre-avivab2b.co.uk
*.pre-avivainvestors.com
*.pre-commissioning-aviva.co.uk
*.pre-erfunding.co.uk
*.pre-friendslife.co.uk
*.pre-spotlightrecognition.me
*.protection-training-preview.qs.aviva.co.uk
*.protectionjuridique.aviva.fr
*.rect.aviva.fr
*.rectweur.com
*.rwy-aviva.io
*.rwy-avivab2b.co.uk
*.rwy-avivainvestors.com
*.rwy-erfunding.co.uk
*.rwy-friendslife.co.uk
*.rwy-spotlightrecognition.me
*.santander-preview.qs.aviva.co.uk
*.santander.aviva.pl
*.santanderadvised-preview.qs.aviva.co.uk
*.santandertelephony-preview.qs.aviva.co.uk
*.sante-individuelle.aviva.fr
*.sc-lifecustomer.dev-aviva.co.uk
*.sc-lifecustomer.pre-aviva.co.uk
*.sc-lifecustomer.rwy-aviva.co.uk
*.sc-lifecustomer.stg-aviva.co.uk
*.sc-lifecustomer.sys-aviva.co.uk
*.services.aviva.fr
*.stg-aviva.io
*.stg-avivab2b.co.uk
*.stg-avivainvestors.com
*.stg-erfunding.co.uk
*.stg-friendslife.co.uk
*.stg-spotlightrecognition.me
*.sys-aviva.io
*.sys-avivab2b.co.uk
*.sys-avivainvestors.com
*.sys-erfunding.co.uk
*.sys-friendslife.co.uk
*.sys-spotlightrecognition.me
*.uff.net
*.wsg-preview.qs.aviva.co.uk

Other certificates including the domain name aviva.com

(limited to 100 certificates)
aviva-swi-amp-fs-01.globalapps.aviva.com
incapsula.com
at.aviva.com
community-fund-italia.aviva.com
avivaprivacy.uk
cert02.uk.aviva.com
cert03.uk.aviva.com
cert06.uk.aviva.com
cert01.as.aviva.com
avivaprivacy.uk
np-cert02.uk.aviva.com
in.aviva.com
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
cert06.uk.aviva.com
idmadmin.globalapps.aviva.com
mpower.non.prod.ana.corp.aviva.com
cert01.ca.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
digital.aviva.com
cert01.ca.aviva.com
redirects.aviva.com
agility-europe.globalapps.aviva.com
icare-uat.globalapps.aviva.com
cert06.uk.aviva.com
incapsula.com
cert04.uk.aviva.com
cms.aviva.com
sv.nonprod.ana.corp.aviva.com
avivaprivacy.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
cert10.uk.aviva.com
boson-services-gateway.globalapps.aviva.com
cert01.tmp.aviva.com
lafabrique-france.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
np-cert02.uk.aviva.com
incapsula.com
cert10.uk.aviva.com
camppe.external.globalapps.aviva.com
proinvest.com.sg
cert01.uk.aviva.com
avivaprivacy.uk
suretyngweb.qa.ana.corp.aviva.com
avivaprivacy.uk
cert01.uk.aviva.com
mpower.non.prod.ana.corp.aviva.com
vaultqa.ana.corp.aviva.com
bigd-kafkadev2.globalapps.aviva.com
cert08.uk.aviva.com
yyzbac1sis1.ana.corp.aviva.com
cyberark-uat.globalapps.aviva.com
www.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
rewards.aviva.com
workbench.prod-globalapps.aviva.com
cx2.globalapps.aviva.com
redirects.aviva.com
yyzsql3047.ana.corp.aviva.com
cert01.ca.aviva.com
mail.aviva.com
cert03.uk.aviva.com
empower.preprod.ana.corp.aviva.com
cert01.as.aviva.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert07.uk.aviva.com
cert01.tmp.aviva.com
cert05.uk.aviva.com
yyzbsm1011.ana.corp.aviva.com
iaccess.ana.corp.aviva.com
www.aviva.co.uk
cert03.uk.aviva.com
cert01.as.aviva.com
yyzcpm1201.ana.corp.aviva.com
shareplans.aviva.com
incapsula.com
ci-master.ana.corp.aviva.com
cert04.uk.aviva.com
community-fund-italia.aviva.com
incapsula.com
cert05.uk.aviva.com

arc.globalapps.aviva.com
cert10.uk.aviva.com
avivaprivacy.uk
incapsula.com
nonprod.ratabasecat.ana.corp.aviva.com
redirects.aviva.com
yyzetl1003.ana.corp.aviva.com
cert04.uk.aviva.com
cert08.uk.aviva.com
nationalhomewarranty.com

Certificate

The complete raw certificate details for np-cert02.uk.aviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFkAJXa+3TOIJ4mPwcS7
hZMCn11GAryncyv4R6KgACWUczkhOMWXtpA/p5BnNTJJLnTing32OIDe1lbSArfu
WeuX0RI2joBALhnd4/WsvDSB5XB++cxxcavWN0zQnA0l5K9s/5+4I9qlcXqWM6w/
pz5NnTL5ueF8eZgc9t7Tf2fe2P0nWnxgRQc00lm0vX/PpYuhxrBxi2fk7q2vGWPV
i4naS3nFtN4+Hk4Db69D6rZ5Qc1r4VBFEK/CF/eaDg9DdcmhY9qKcHVxw503OV/X
2oGpsY4EKrv+lIE6XOxIkmKkW9/nRwsz2riV4sqqE6yrcBXxTmErFPdIgCYTDyRi
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333209331678596061412809746827897346301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC3P 3DQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Undershaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'np-cert02.uk.aviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23271735931358234717356880804370810137392155325782231747085375700315437008695593308686924425510934394239643891940802998907708647955992130794710511305710019981143642039944269874559767182631509268224315913269259373222661509560066024907617131208519044901512260757804902710831521669778156143475500666446595055559788961848937578561688743416629825372918087809106021580905409563938278878673653605987743437337661640306330983376446842940206526207329968600566609301831934447615522249758855532037766309767458291911664366400176128906388419871057930169933516372496855557740527100136300058627779608646189251481304834423718053962453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67b3f16f990e2e7471cbcdd54f70bd8d69c5ff09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-cert02.uk.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accounts.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afer-prevoyance.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.auto-enrolmentmanagerpp.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.av.qs.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.av.qs.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.av.qs.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.av.qs.stg-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.av.qs.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva-assurances-clients.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva-box-courtage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva-life.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva-partenaires.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivabroker.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivadirect.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaplus.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivasa.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cgpe-apporteur.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clienthsbc.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.demo.auto-enrolmentmanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eurofil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iquo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.italia.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybusiness.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybusiness.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybusiness.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybusiness.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybusiness.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nieruchomosci.expander.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.practice-autoenrolmentmanager.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-commissioning-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protection-training-preview.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.protectionjuridique.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rect.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rectweur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander-preview.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santander.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santanderadvised-preview.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santandertelephony-preview.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sante-individuelle.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc-lifecustomer.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc-lifecustomer.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc-lifecustomer.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc-lifecustomer.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc-lifecustomer.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.aviva.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivab2b.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsg-preview.qs.aviva.co.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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