cert01.tmp.aviva.com

- Aviva PLC -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number 38:8d:21:89:7f:9e:ff:90:e1:88:a5:64:cd:61:33:83 was issued on by Sectigo Limited.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Company registration number: 02468686
Organization: Aviva PLC
Organization unit: Digital
Organization unit: Hosted by AVIVA CENTRAL SERVICES UK LIMITED
Organization unit: COMODO EV Multi-Domain SSL
Address: 1 Undershaft
Address: St Helens
Postal code: EC3P 3DQ
State / Province: London
Locality: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 38:8d:21:89:7f:9e:ff:90:e1:88:a5:64:cd:61:33:83
Serial Number (int): 75169561834280697940419870552016106371
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 24:45:c1:f6:b3:5e:e9:0b:71:27:82:6b:48:fb:f3:e0:a6:a8:08:3f
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): 31:0a:29:42:9c:31:fa:57:ac:ea:1c:b6:58:eb:59:b4:d0:e7:e8:fd
Fingerprint (sha256): 28:ff:36:7f:a3:62:41:d5:1c:31:57:76:8b:c1:b0:ac:0a:b6:2a:5c:c0:79:2a:fe:5a:8e:c5:f4:6e:c3:11:1a

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate cert01.tmp.aviva.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cert01.tmp.aviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cert01.tmp.aviva.com
acpt.api.aviva.ca
adviser.avivaservices.co.uk
advisers.fpinternational.com
agsts.globalapps.aviva.com
api.aviva.ca
broker.aviva.co.uk
careers.avivainvestors.com
cas.uff.net
commerciallines.avivacanada.com
community-fund-italia.aviva.com
community-fund.aviva.co.uk
confluence.aviva.co.uk
cosmic.aviva.co.uk
dev.api.aviva.ca
dokumenty-uat.aviva.pl
dokumenty.aviva.pl
eserve.avivaservices.co.uk
hackathon.avivapartner.ca
healthpoint.aviva.co.uk
heritage.aviva.com
insights.avivainvestors.com
jira.aviva.co.uk
lafabrique-france.aviva.com
mobiledirect.qs.aviva.co.uk
mobiledirect.qs.pre-aviva.co.uk
monaviva.avivaassurance.ca
myaviva.avivainsurance.ca
odyssee.uff.net
offshore.fpinternational.com
online.avivaservices.co.uk
poc.unionfinancieredefrance.fr
portail.uff.net
portailbis.uff.net
prexcas.uff.net
prexportail.uff.net
protection-medical.aviva.co.uk
rectcas.uff.net
regs.avivaservices.co.uk
services.aviva.ie
systest.broker.aviva.co.uk
training.online.avivaservices.co.uk
uk.avivainvestors.com
www.acs.qs.aviva.co.uk
www.aviva-for-advisers.co.uk
www.aviva-for-messaging.co.uk
www.aviva.ca
www.aviva.co.uk
www.aviva.com
www.aviva.ie
www.aviva.pl
www.avivaassurance.ca
www.avivaavantage.ca
www.avivacanada.com
www.avivacommunityfund.co.uk
www.avivacommunityfund.org
www.avivadigitalgarage.ca
www.avivahealth.qs.aviva.co.uk
www.avivainsurance.ca
www.avivainvestors.com
www.avivapartner.ca
www.avivapitchday.ca
www.fpinternational.ae
www.fpinternational.com
www.fpinternational.com.hk
www.friendslife.co.uk
www.leafsinsurance.com
www.nationalhomewarranty.com
www.protection.qs.aviva.co.uk
www.qaavantage.ca
www.raptorsinsurance.com
www.santander.aviva.co.uk
www.santandertelephony.aviva.co.uk
www.tesla.avivainsurance.ca
www.travelinsurance.firstdirect.qs.online-insure.com
www.wsg.qs.aviva.co.uk
www17.friendsprovident.co.uk
www2.wsg.qs.aviva.co.uk
www3.friendslife.co.uk
www3.wsg.qs.aviva.co.uk
www43.avivaservices.co.uk
www61.friendsprovident.co.uk

Other certificates including the domain name aviva.com

(limited to 100 certificates)
aviva-swi-amp-fs-01.globalapps.aviva.com
incapsula.com
at.aviva.com
community-fund-italia.aviva.com
avivaprivacy.uk
cert02.uk.aviva.com
cert03.uk.aviva.com
cert06.uk.aviva.com
cert01.as.aviva.com
avivaprivacy.uk
np-cert02.uk.aviva.com
in.aviva.com
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
cert06.uk.aviva.com
idmadmin.globalapps.aviva.com
mpower.non.prod.ana.corp.aviva.com
cert01.ca.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
digital.aviva.com
cert01.ca.aviva.com
redirects.aviva.com
agility-europe.globalapps.aviva.com
icare-uat.globalapps.aviva.com
cert06.uk.aviva.com
incapsula.com
cert04.uk.aviva.com
cms.aviva.com
sv.nonprod.ana.corp.aviva.com
avivaprivacy.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
cert10.uk.aviva.com
boson-services-gateway.globalapps.aviva.com
cert01.tmp.aviva.com
lafabrique-france.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
np-cert02.uk.aviva.com
incapsula.com
cert10.uk.aviva.com
camppe.external.globalapps.aviva.com
proinvest.com.sg
cert01.uk.aviva.com
avivaprivacy.uk
suretyngweb.qa.ana.corp.aviva.com
avivaprivacy.uk
cert01.uk.aviva.com
mpower.non.prod.ana.corp.aviva.com
vaultqa.ana.corp.aviva.com
bigd-kafkadev2.globalapps.aviva.com
cert08.uk.aviva.com
yyzbac1sis1.ana.corp.aviva.com
cyberark-uat.globalapps.aviva.com
www.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
rewards.aviva.com
workbench.prod-globalapps.aviva.com
cx2.globalapps.aviva.com
redirects.aviva.com
yyzsql3047.ana.corp.aviva.com
cert01.ca.aviva.com
mail.aviva.com
cert03.uk.aviva.com
empower.preprod.ana.corp.aviva.com
cert01.as.aviva.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert07.uk.aviva.com
cert01.tmp.aviva.com
cert05.uk.aviva.com
yyzbsm1011.ana.corp.aviva.com
iaccess.ana.corp.aviva.com
www.aviva.co.uk
cert03.uk.aviva.com
cert01.as.aviva.com
yyzcpm1201.ana.corp.aviva.com
shareplans.aviva.com
incapsula.com
ci-master.ana.corp.aviva.com
cert04.uk.aviva.com
community-fund-italia.aviva.com
incapsula.com
cert05.uk.aviva.com

arc.globalapps.aviva.com
cert10.uk.aviva.com
avivaprivacy.uk
incapsula.com
nonprod.ratabasecat.ana.corp.aviva.com
redirects.aviva.com
yyzetl1003.ana.corp.aviva.com
cert04.uk.aviva.com
cert08.uk.aviva.com
nationalhomewarranty.com

Certificate

The complete raw certificate details for cert01.tmp.aviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzb/B8cB56XlVcqAjnM/
FFQlFlcgAOc3dtAemWpuUz+SGrq0XB0Ew3VGmdxrYHg09pOyznSns3baLzrmIuid
kPdQAtJdaXYera+461DEF9Nzk4i2o5NoDkQMAmSQlZ4GI/h2CienXTT+WMJHIxqP
a5sna6pP/zAK3+4DtVSmJBee8Wsm1En32aIMNC/l05BxUcSb7g9grwp7CuPB6U65
eT35DR1DQVv0x5vHq5R8ZJFy7FVsBKmi6w+WD53QWxnb0u/4XXYXdiJO+CeQ0MB6
CwjpMZQ7174WUkbtbJuDn5YUkZiH9PASUnfcbiejxFIZNvtfV4KZfECO+n7eFJn2
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75169561834280697940419870552016106371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02468686'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC3P 3DQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Undershaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by AVIVA CENTRAL SERVICES UK LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO EV Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cert01.tmp.aviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19089103692983717525434476633599892375965102265106431198168753291077252589209393241316554440043702551453212587093968177861278106442698487564915632357717042395776844590672378193318684937316679414511008015841928274732374413777574538984984640887909215953871657380621218023400877720526549083176074513235605812358116057946786410334098487760823668283144818157299033659319953751370592701991980900356309123437488573905039877080452382199407131707209348305674309508798572449480142508566173490469033988903588008854140678663198424650400751004672420668479360270883433688967065397533327471525731972193183916167880823227077275285111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2445c1f6b35ee90b7127826b48fbf3e0a6a8083f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2057 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert01.tmp.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acpt.api.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adviser.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsts.globalapps.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.uff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerciallines.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community-fund-italia.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community-fund.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosmic.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.api.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumenty-uat.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumenty.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eserve.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hackathon.avivapartner.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthpoint.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heritage.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lafabrique-france.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiledirect.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobiledirect.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monaviva.avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odyssee.uff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshore.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poc.unionfinancieredefrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.uff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portailbis.uff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prexcas.uff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prexportail.uff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protection-medical.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rectcas.uff.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regs.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systest.broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.online.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acs.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva-for-messaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaavantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivadigitalgarage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivahealth.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivapartner.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivapitchday.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpinternational.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leafsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationalhomewarranty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protection.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qaavantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raptorsinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santander.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.santandertelephony.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tesla.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelinsurance.firstdirect.qs.online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsg.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www17.friendsprovident.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.wsg.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www3.wsg.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www43.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www61.friendsprovident.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016ab67a775000000403004830460221009484a476e498aa866098b17245b953368ac56c2c7123b0bcf3ef436958318452022100b6754479f7786d69b5c7b8732a7818257ee7e9b1aeb9650fd331cc455abf18360077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ab67a776b0000040300483046022100b5d4fdce59a419f66636b02872155de639953eed2e2d5df57e97c08344b0eebc022100c773b806370d91c3eb47f8f54e8ee2b19961c495854787a0b82ca22e618e7eb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0039714099d52d6ad5821791a762dcd17d1152c1715840d4b40207f2ae9ac2025d98e6bd2583ba3434fb99cca6e328aa3ad19773eb8acdc4c5f5e52d7d37922be7c50d95dc938caf4331be224a6373f10508814013717d1ce6610c0402ae7b4d0b3a26e273ac7e39708b217ad0b58d27fb869fde518b8569ecf11d1c13efc19d6c95cd5cc9646b17b8158f229a9b19b9aa9fcb119b2d2e34cdef378607b837df7c01cfe41c10f9c55e8ae2d712b65bb8eb5fed580a9f88aaa1e9830dcd1f2d7c98b270574e286a358724c337d7dec28d4e06d14908fe5ee23ce583f8fce401b8241967c5eaf960a4a2fdc04fa364bef26ec842aa2df32ac61e7dd5fa087adccfa8