no.avivainvestors.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:e5:d1:70:1f:5d:41:6f:7c:72:30:53:14:a4:31:34 was issued on by Amazon.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=no.avivainvestors.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:e5:d1:70:1f:5d:41:6f:7c:72:30:53:14:a4:31:34
Serial Number (int): 14485563845321773468759089008485871924
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 25:a5:e4:d0:66:9b:c5:dd:14:63:3a:c4:ed:2e:23:67:d8:10:19:64
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 2d:e0:d0:32:64:20:5e:6b:c9:37:4d:31:cc:2f:dc:8b:d8:a0:38:70
Fingerprint (sha256): 2c:58:dc:c5:13:e3:02:cd:ba:45:37:4a:d4:61:33:8c:15:33:95:34:81:c3:f4:b1:34:fb:54:c4:08:80:1d:eb

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate no.avivainvestors.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for no.avivainvestors.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

no.avivainvestors.com
salescloud-test-bg.aviva.pl
aviva.pl
avivainvestors.ca
avivainvestors.ch
aimstr.avivainvestors.com
fr.avivainvestors.com
quotemehappy.claims
hibernian.ie
aviva.com.pl
m.avivacanada.com
chmura.aviva.pl
de.avivainvestors.com
avivainvestors.sg
at.avivainvestors.com
avivatriallawyers.com
avivainvestors.se
avivaavantage.ca
partenaireaviva.ca
avivamymoney.co.uk
avivahealthandwellbeing.co.uk
avivainvestors.de
aviva.ie
avivainvestors.com.au
avivaavantage.com
aviva-for-messaging.co.uk
qaavantage.ca
avivainvestors.lu
avivacanada.com
ie.avivainvestors.com
bic.avivacanada.com
avivatransfers.co.uk
avivaeserve.co.uk
bloginwestycyjny.aviva.pl
controlyourpension.com
avivatrusteeplatform.co.uk
it.avivainvestors.com
avivainvestors.co.uk
doradca.aviva.pl
avivacorporateplatform.co.uk
kariera.aviva.pl
avivapartner.ca
avivacommunityfund.co.uk
napodroz.bzwbk.aviva.pl
be.avivainvestors.com
bcmotorcycle.aviva.ca
commerciallines.avivacanada.com
nl.avivainvestors.com
avivainvestors.it
salescloud-dev-bg.aviva.pl
es.avivainvestors.com
avivatraders.com
monaviva.avivainsurance.ca
salescloud-bg.aviva.pl
hibernianaviva.ie
avivainvestors.com
centrumfinansow.aviva.pl
logowanie-beta.aviva.com.pl
fi.avivainvestors.com
avivainvestors.ie
leisureandlifestyle.avivacanada.com
blogmotoryzacyjny.aviva.pl
avivainvestors.nl
ch.avivainvestors.com
avivadigitaldivision.ca
avivaae.co.uk
aviva.ca
avivainvestors.be
lu.avivainvestors.com
au.avivainvestors.com
avivacustomer.co.uk
combinedpolicy.avivacanada.com
ca.avivainvestors.com
doradcy.aviva.pl
avivainvestors.es
cutredtape.co.uk
defensibleclaims.avivacanada.com
m.aviva.pl
avivainvestors.at
santander.aviva.pl
blog.avivacanada.com
aviva-for-advisers.co.uk
partner.qs.online-insure.co.uk
friendslife.com
podrozne.aviva.pl
avivainvestors.tel
qa.avivainsurance.ca
agrupa.aviva.pl

Other certificates including the domain name avivainvestors.com

(limited to 100 certificates)
f6.shared.global.fastly.net
www.eserve.avivaservices.co.uk
cert06.uk.aviva.com
f6.shared.global.fastly.net
cert11.uk.aviva.com
remote.na.avivainvestors.com
avivainvestors.com
cert06.uk.aviva.com
cert06.uk.aviva.com
securelogin.avivainvestors.com
cert06.uk.aviva.com
cert01.tmp.aviva.com
ibmwebspheremqukjpmb1p.avivainvestors.com
apps.avivainvestors.com
np-cert02.uk.aviva.com
avivainvestors.com
tw.avivainvestors.com
vault.uk.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
t.notifications.avivainvestors.com
f6.shared.global.fastly.net
avivainvestors.com
cert03.uk.aviva.com
avivainvestors.com
cert01.tmp.aviva.com
f6.shared.global.fastly.net
alb.investors-qliksense.dev.aws-euw1-np.avivacloud.com
avivainvestors.com
avivainvestors.com

f6.shared.global.fastly.net
remote.na.avivainvestors.com
f6.shared.global.fastly.net
fpcidc01.avivagroup.com
avivainvestors.com
f6.shared.global.fastly.net
tw.avivainvestors.com
tw.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com

www.avivainvestors.com
reach.uk.avivainvestors.com
cert06.uk.aviva.com
np-cert02.uk.aviva.com

avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com

f6.shared.global.fastly.net
ibmwebspheremqukextb1p.avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
tw.avivainvestors.com
cert03.uk.aviva.com
np-cert02.uk.aviva.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
sam.uk.avivainvestors.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
www.avivainvestors.com
avivainvestors.com
at.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
mail.sg.avivainvestors.com
appsstage.avivainvestors.com
avivainvestors.com
ibmwebspheremqukjpmb1u.avivainvestors.com
avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
np-cert02.uk.aviva.com
ibmwebspheremqukextb1p.avivainvestors.com
f6.shared.global.fastly.net
fplidc01.avivagroup.com

f6.shared.global.fastly.net
avivainvestors.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
tw.avivainvestors.com
f6.shared.global.fastly.net
www.aviva.co.uk
avivainvestors.com

f6.shared.global.fastly.net
remote.na.avivainvestors.com
f6.shared.global.fastly.net

Certificate

The complete raw certificate details for no.avivainvestors.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1g01wU48oCyRao5J2pE
/PSO7YS8C633S2RxTWbt1bVEGyLg8lpEa4lpMg7Ghti5Goijfp5hZNpPP2K9/Fm7
LIjeYgQjmb9/CVBkC2uwcqGNPzgMe7i6lZ5hxdOIUdSdVtRvblXvXtlS1eWCtdTr
hP3LaHRbakUDxD6iYohHTcpgMVD8Fq9bvVzJ1NBpMRW8dP96drrRlYvk1D4cajMe
rGC0+Sd36wF7v2UsHR6j2CQ19yvydLIuJC3evGIRI+qQ+BGHUStaSd9Jd/FIU6LG
+01/SETasqi34ldgghENVb/2cofTEmZ4YOnNFSTgmirkBdIVbUsp3GxLuTbpiQp8
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14485563845321773468759089008485871924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'no.avivainvestors.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24155012448417171704372844425601992955357189500515647898414826518507361316302290694140591469733431224661339256784547088706422877704791274289266036101894618643366141163027927084319663337316415123409915593079843923863796696397002800030897400678488291326225214021246115363483447771249288634234902007215644395896810877396557498280266457672342772514364624647633343020314596516860260350640437835341231576299017725113420678274042374416393581873351213055355465474707479924840531382644477049936142333221450517684308869828433178902211057267953156933354292715139037335938931343214261484909361220157538236915400174357908416003187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25a5e4d0669bc5dd14633ac4ed2e2367d8101964
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1918 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salescloud-test-bg.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimstr.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotemehappy.claims'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibernian.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chmura.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatriallawyers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaavantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaireaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamymoney.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivahealthandwellbeing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaavantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-for-messaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaavantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bic.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatransfers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaeserve.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bloginwestycyjny.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatrusteeplatform.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doradca.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacorporateplatform.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kariera.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivapartner.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napodroz.bzwbk.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerciallines.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salescloud-dev-bg.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salescloud-bg.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibernianaviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centrumfinansow.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logowanie-beta.aviva.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leisureandlifestyle.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogmotoryzacyjny.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivadigitaldivision.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaae.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'combinedpolicy.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doradcy.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutredtape.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'defensibleclaims.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santander.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.qs.online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'podrozne.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrupa.aviva.pl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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