np-cert01.uk.aviva.com

- Aviva PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ad:a1:06:b1:b2:21:8a:ae:a8:5c:5b:5d:6c:46:0f:d2 was issued on by Sectigo Limited.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Organization: Aviva PLC
Organization unit: Digital
Organization unit: Hosted by AVIVA CENTRAL SERVICES UK LIMITED
Organization unit: Multi-Domain SSL
Address: 1 Undershaft
Address: St Helens
Postal code: EC3P 3DQ
State / Province: London
Locality: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ad:a1:06:b1:b2:21:8a:ae:a8:5c:5b:5d:6c:46:0f:d2
Serial Number (int): 230792538837985821404048810863604666322
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f2:9b:0c:67:cd:1d:1f:7d:29:ad:1a:97:16:7c:82:d4:a8:86:a4:fb
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): a1:96:1a:34:67:f9:6b:f1:90:d3:75:93:73:14:bf:21:b5:d7:9e:3a
Fingerprint (sha256): 39:af:91:22:bb:af:9e:3f:8a:00:6f:60:f1:74:6e:ad:0e:ed:3a:25:0f:3d:45:f5:7c:76:7d:0c:dc:4d:39:e2

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate np-cert01.uk.aviva.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for np-cert01.uk.aviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

np-cert01.uk.aviva.com
*.acs.qs.pre-aviva.co.uk
*.aviva.co.uk
*.aviva.com
*.avivaeserve.co.uk
*.avivahealth.qs.pre-aviva.co.uk
*.avivamicrosite.co.uk
*.avivaservices.co.uk
*.broker.aviva.co.uk
*.dev-applyforcover.co.uk
*.dev-aviva-for-advisers.co.uk
*.dev-aviva.co.uk
*.dev-aviva.com
*.dev-avivacommunityfund.co.uk
*.dev-avivacommunityfund.org
*.dev-avivacustomer.co.uk
*.dev-avivaforpartners.co.uk
*.dev-fondscommunautaireaviva.org
*.dev-insuranceclaimsonline.co.uk
*.dev-online-insure.co.uk
*.dev-online-insure.com
*.firstdirect.dev-online-insure.com
*.firstdirect.pre-online-insure.com
*.firstdirect.rwy-online-insure.com
*.firstdirect.sys-online-insure.com
*.globalapps.aviva.com
*.globalapps.dev-aviva.com
*.globalapps.pre-aviva.com
*.hsbc.dev-aviva.co.uk
*.hsbc.dev-online-insure.com
*.hsbc.pre-aviva.co.uk
*.hsbc.pre-online-insure.com
*.hsbc.rwy-aviva.co.uk
*.hsbc.rwy-online-insure.com
*.hsbc.stg-aviva.co.uk
*.hsbc.stg-online-insure.com
*.hsbc.sys-aviva.co.uk
*.hsbc.sys-online-insure.com
*.nuimotorscheduling.com
*.pre-applyforcover.co.uk
*.pre-aviva-for-advisers.co.uk
*.pre-aviva.co.uk
*.pre-aviva.com
*.pre-avivacommunityfund.co.uk
*.pre-avivacommunityfund.org
*.pre-avivacustomer.co.uk
*.pre-avivaforpartners.co.uk
*.pre-fondscommunautaireaviva.org
*.pre-insuranceclaimsonline.co.uk
*.pre-online-insure.co.uk
*.pre-online-insure.com
*.qs.dev-aviva.co.uk
*.qs.pre-aviva.co.uk
*.qs.rwy-aviva.co.uk
*.qs.stg-aviva.co.uk
*.qs.sys-aviva.co.uk
*.rwy-applyforcover.co.uk
*.rwy-aviva-for-advisers.co.uk
*.rwy-aviva.co.uk
*.rwy-aviva.com
*.rwy-avivacommunityfund.co.uk
*.rwy-avivacommunityfund.org
*.rwy-avivacustomer.co.uk
*.rwy-avivaforpartners.co.uk
*.rwy-fondscommunautaireaviva.org
*.rwy-insuranceclaimsonline.co.uk
*.rwy-online-insure.co.uk
*.rwy-online-insure.com
*.staff.dev-applyforcover.co.uk
*.staff.pre-applyforcover.co.uk
*.staff.rwy-applyforcover.co.uk
*.staff.stg-applyforcover.co.uk
*.staff.sys-applyforcover.co.uk
*.stg-applyforcover.co.uk
*.stg-aviva-for-advisers.co.uk
*.stg-aviva.co.uk
*.stg-aviva.com
*.stg-avivacommunityfund.co.uk
*.stg-avivacommunityfund.org
*.stg-avivacustomer.co.uk
*.stg-avivaforpartners.co.uk
*.stg-fondscommunautaireaviva.org
*.stg-insuranceclaimsonline.co.uk
*.stg-online-insure.co.uk
*.stg-online-insure.com
*.sys-applyforcover.co.uk
*.sys-aviva-for-advisers.co.uk
*.sys-aviva.co.uk
*.sys-aviva.com
*.sys-avivacommunityfund.co.uk
*.sys-avivacommunityfund.org
*.sys-avivacustomer.co.uk
*.sys-avivaforpartners.co.uk
*.sys-fondscommunautaireaviva.org
*.sys-insuranceclaimsonline.co.uk
*.sys-online-insure.co.uk
*.sys-online-insure.com
*.wsg-preview.qs.aviva.co.uk

Other certificates including the domain name aviva.com

(limited to 100 certificates)
aviva-swi-amp-fs-01.globalapps.aviva.com
incapsula.com
at.aviva.com
community-fund-italia.aviva.com
avivaprivacy.uk
cert02.uk.aviva.com
cert03.uk.aviva.com
cert06.uk.aviva.com
cert01.as.aviva.com
avivaprivacy.uk
np-cert02.uk.aviva.com
in.aviva.com
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
cert06.uk.aviva.com
idmadmin.globalapps.aviva.com
mpower.non.prod.ana.corp.aviva.com
cert01.ca.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
digital.aviva.com
cert01.ca.aviva.com
redirects.aviva.com
agility-europe.globalapps.aviva.com
icare-uat.globalapps.aviva.com
cert06.uk.aviva.com
incapsula.com
cert04.uk.aviva.com
cms.aviva.com
sv.nonprod.ana.corp.aviva.com
avivaprivacy.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
cert10.uk.aviva.com
boson-services-gateway.globalapps.aviva.com
cert01.tmp.aviva.com
lafabrique-france.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
np-cert02.uk.aviva.com
incapsula.com
cert10.uk.aviva.com
camppe.external.globalapps.aviva.com
proinvest.com.sg
cert01.uk.aviva.com
avivaprivacy.uk
suretyngweb.qa.ana.corp.aviva.com
avivaprivacy.uk
cert01.uk.aviva.com
mpower.non.prod.ana.corp.aviva.com
vaultqa.ana.corp.aviva.com
bigd-kafkadev2.globalapps.aviva.com
cert08.uk.aviva.com
yyzbac1sis1.ana.corp.aviva.com
cyberark-uat.globalapps.aviva.com
www.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
rewards.aviva.com
workbench.prod-globalapps.aviva.com
cx2.globalapps.aviva.com
redirects.aviva.com
yyzsql3047.ana.corp.aviva.com
cert01.ca.aviva.com
mail.aviva.com
cert03.uk.aviva.com
empower.preprod.ana.corp.aviva.com
cert01.as.aviva.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert07.uk.aviva.com
cert01.tmp.aviva.com
cert05.uk.aviva.com
yyzbsm1011.ana.corp.aviva.com
iaccess.ana.corp.aviva.com
www.aviva.co.uk
cert03.uk.aviva.com
cert01.as.aviva.com
yyzcpm1201.ana.corp.aviva.com
shareplans.aviva.com
incapsula.com
ci-master.ana.corp.aviva.com
cert04.uk.aviva.com
community-fund-italia.aviva.com
incapsula.com
cert05.uk.aviva.com

arc.globalapps.aviva.com
cert10.uk.aviva.com
avivaprivacy.uk
incapsula.com
nonprod.ratabasecat.ana.corp.aviva.com
redirects.aviva.com
yyzetl1003.ana.corp.aviva.com
cert04.uk.aviva.com
cert08.uk.aviva.com
nationalhomewarranty.com

Certificate

The complete raw certificate details for np-cert01.uk.aviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRjjCCEHagAwIBAgIRAK2hBrGyIYquqFxbXWxGD9IwDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0xOTA3MTEwMDAwMDBaFw0yMDAzMDYyMzU5NTlaMIIBBTELMAkG
A1UEBhMCR0IxETAPBgNVBBETCEVDM1AgM0RRMQ8wDQYDVQQIEwZMb25kb24xDzAN
BgNVBAcTBkxvbmRvbjEVMBMGA1UECRMMMSBVbmRlcnNoYWZ0MRIwEAYDVQQJEwlT
dCBIZWxlbnMxEjAQBgNVBAoTCUF2aXZhIFBMQzEQMA4GA1UECxMHRGlnaXRhbDE0
MDIGA1UECxMrSG9zdGVkIGJ5IEFWSVZBIENFTlRSQUwgU0VSVklDRVMgVUsgTElN
SVRFRDEZMBcGA1UECxMQTXVsdGktRG9tYWluIFNTTDEfMB0GA1UEAxMWbnAtY2Vy
dDAxLnVrLmF2aXZhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
ALxvaZjA4hzAlumQImcw1NvFdYpvCSVu0mou61/V/fPxOMZ5TzeqXpMvRC0HL18+
N02wWbVG5UVrqi1IMIJYD/+OGAKKKqs8XMzDvMQhbmqWt4ZbPWOQDEzlCbuolgWd
cwLtE0YO40AJiGzANQj5QcHQhF6xZHtIzv1j8weBXCPPeXW0pLOceeuO1QGeIKwf
Z3DF/K3fSmOLwA1DQHlUkSkUuTDHC7uv1bypqIna/+lP30FZkYtIvKriesY40pqe
A0styFvBZBB4O1afS/AaTv67rN2hrUUtbwJqThcBL/wP8WuxUWdOn9s1KYulGBYM
RDbIv6YZ9LVurAeefqbhERsCAwEAAaOCDWQwgg1gMB8GA1UdIwQYMBaAFBfZ1iUn
Z/kxwklD2TA2RIxsqU/rMB0GA1UdDgQWBBTymwxnzR0ffSmtGpcWfILUqIak+zAO
BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgwrBgEEAbIxAQIBAwQwJTAjBggrBgEF
BQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMFoGA1UdHwRT
MFEwT6BNoEuGSWh0dHA6Ly9jcmwuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2Fu
aXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcmwwgYoGCCsGAQUFBwEB
BH4wfDBVBggrBgEFBQcwAoZJaHR0cDovL2NydC5zZWN0aWdvLmNvbS9TZWN0aWdv
UlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNydDAjBggr
BgEFBQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wggqkBgNVHREEggqbMIIK
l4IWbnAtY2VydDAxLnVrLmF2aXZhLmNvbYIYKi5hY3MucXMucHJlLWF2aXZhLmNv
LnVrgg0qLmF2aXZhLmNvLnVrggsqLmF2aXZhLmNvbYITKi5hdml2YWVzZXJ2ZS5j
by51a4IgKi5hdml2YWhlYWx0aC5xcy5wcmUtYXZpdmEuY28udWuCFiouYXZpdmFt
aWNyb3NpdGUuY28udWuCFSouYXZpdmFzZXJ2aWNlcy5jby51a4IUKi5icm9rZXIu
YXZpdmEuY28udWuCGSouZGV2LWFwcGx5Zm9yY292ZXIuY28udWuCHiouZGV2LWF2
aXZhLWZvci1hZHZpc2Vycy5jby51a4IRKi5kZXYtYXZpdmEuY28udWuCDyouZGV2
LWF2aXZhLmNvbYIeKi5kZXYtYXZpdmFjb21tdW5pdHlmdW5kLmNvLnVrghwqLmRl
di1hdml2YWNvbW11bml0eWZ1bmQub3JnghkqLmRldi1hdml2YWN1c3RvbWVyLmNv
LnVrghwqLmRldi1hdml2YWZvcnBhcnRuZXJzLmNvLnVrgiEqLmRldi1mb25kc2Nv
bW11bmF1dGFpcmVhdml2YS5vcmeCISouZGV2LWluc3VyYW5jZWNsYWltc29ubGlu
ZS5jby51a4IZKi5kZXYtb25saW5lLWluc3VyZS5jby51a4IXKi5kZXYtb25saW5l
LWluc3VyZS5jb22CIyouZmlyc3RkaXJlY3QuZGV2LW9ubGluZS1pbnN1cmUuY29t
giMqLmZpcnN0ZGlyZWN0LnByZS1vbmxpbmUtaW5zdXJlLmNvbYIjKi5maXJzdGRp
cmVjdC5yd3ktb25saW5lLWluc3VyZS5jb22CIyouZmlyc3RkaXJlY3Quc3lzLW9u
bGluZS1pbnN1cmUuY29tghYqLmdsb2JhbGFwcHMuYXZpdmEuY29tghoqLmdsb2Jh
bGFwcHMuZGV2LWF2aXZhLmNvbYIaKi5nbG9iYWxhcHBzLnByZS1hdml2YS5jb22C
FiouaHNiYy5kZXYtYXZpdmEuY28udWuCHCouaHNiYy5kZXYtb25saW5lLWluc3Vy
ZS5jb22CFiouaHNiYy5wcmUtYXZpdmEuY28udWuCHCouaHNiYy5wcmUtb25saW5l
LWluc3VyZS5jb22CFiouaHNiYy5yd3ktYXZpdmEuY28udWuCHCouaHNiYy5yd3kt
b25saW5lLWluc3VyZS5jb22CFiouaHNiYy5zdGctYXZpdmEuY28udWuCHCouaHNi
Yy5zdGctb25saW5lLWluc3VyZS5jb22CFiouaHNiYy5zeXMtYXZpdmEuY28udWuC
HCouaHNiYy5zeXMtb25saW5lLWluc3VyZS5jb22CGCoubnVpbW90b3JzY2hlZHVs
aW5nLmNvbYIZKi5wcmUtYXBwbHlmb3Jjb3Zlci5jby51a4IeKi5wcmUtYXZpdmEt
Zm9yLWFkdmlzZXJzLmNvLnVrghEqLnByZS1hdml2YS5jby51a4IPKi5wcmUtYXZp
dmEuY29tgh4qLnByZS1hdml2YWNvbW11bml0eWZ1bmQuY28udWuCHCoucHJlLWF2
aXZhY29tbXVuaXR5ZnVuZC5vcmeCGSoucHJlLWF2aXZhY3VzdG9tZXIuY28udWuC
HCoucHJlLWF2aXZhZm9ycGFydG5lcnMuY28udWuCISoucHJlLWZvbmRzY29tbXVu
YXV0YWlyZWF2aXZhLm9yZ4IhKi5wcmUtaW5zdXJhbmNlY2xhaW1zb25saW5lLmNv
LnVrghkqLnByZS1vbmxpbmUtaW5zdXJlLmNvLnVrghcqLnByZS1vbmxpbmUtaW5z
dXJlLmNvbYIUKi5xcy5kZXYtYXZpdmEuY28udWuCFCoucXMucHJlLWF2aXZhLmNv
LnVrghQqLnFzLnJ3eS1hdml2YS5jby51a4IUKi5xcy5zdGctYXZpdmEuY28udWuC
FCoucXMuc3lzLWF2aXZhLmNvLnVrghkqLnJ3eS1hcHBseWZvcmNvdmVyLmNvLnVr
gh4qLnJ3eS1hdml2YS1mb3ItYWR2aXNlcnMuY28udWuCESoucnd5LWF2aXZhLmNv
LnVrgg8qLnJ3eS1hdml2YS5jb22CHioucnd5LWF2aXZhY29tbXVuaXR5ZnVuZC5j
by51a4IcKi5yd3ktYXZpdmFjb21tdW5pdHlmdW5kLm9yZ4IZKi5yd3ktYXZpdmFj
dXN0b21lci5jby51a4IcKi5yd3ktYXZpdmFmb3JwYXJ0bmVycy5jby51a4IhKi5y
d3ktZm9uZHNjb21tdW5hdXRhaXJlYXZpdmEub3JngiEqLnJ3eS1pbnN1cmFuY2Vj
bGFpbXNvbmxpbmUuY28udWuCGSoucnd5LW9ubGluZS1pbnN1cmUuY28udWuCFyou
cnd5LW9ubGluZS1pbnN1cmUuY29tgh8qLnN0YWZmLmRldi1hcHBseWZvcmNvdmVy
LmNvLnVrgh8qLnN0YWZmLnByZS1hcHBseWZvcmNvdmVyLmNvLnVrgh8qLnN0YWZm
LnJ3eS1hcHBseWZvcmNvdmVyLmNvLnVrgh8qLnN0YWZmLnN0Zy1hcHBseWZvcmNv
dmVyLmNvLnVrgh8qLnN0YWZmLnN5cy1hcHBseWZvcmNvdmVyLmNvLnVrghkqLnN0
Zy1hcHBseWZvcmNvdmVyLmNvLnVrgh4qLnN0Zy1hdml2YS1mb3ItYWR2aXNlcnMu
Y28udWuCESouc3RnLWF2aXZhLmNvLnVrgg8qLnN0Zy1hdml2YS5jb22CHiouc3Rn
LWF2aXZhY29tbXVuaXR5ZnVuZC5jby51a4IcKi5zdGctYXZpdmFjb21tdW5pdHlm
dW5kLm9yZ4IZKi5zdGctYXZpdmFjdXN0b21lci5jby51a4IcKi5zdGctYXZpdmFm
b3JwYXJ0bmVycy5jby51a4IhKi5zdGctZm9uZHNjb21tdW5hdXRhaXJlYXZpdmEu
b3JngiEqLnN0Zy1pbnN1cmFuY2VjbGFpbXNvbmxpbmUuY28udWuCGSouc3RnLW9u
bGluZS1pbnN1cmUuY28udWuCFyouc3RnLW9ubGluZS1pbnN1cmUuY29tghkqLnN5
cy1hcHBseWZvcmNvdmVyLmNvLnVrgh4qLnN5cy1hdml2YS1mb3ItYWR2aXNlcnMu
Y28udWuCESouc3lzLWF2aXZhLmNvLnVrgg8qLnN5cy1hdml2YS5jb22CHiouc3lz
LWF2aXZhY29tbXVuaXR5ZnVuZC5jby51a4IcKi5zeXMtYXZpdmFjb21tdW5pdHlm
dW5kLm9yZ4IZKi5zeXMtYXZpdmFjdXN0b21lci5jby51a4IcKi5zeXMtYXZpdmFm
b3JwYXJ0bmVycy5jby51a4IhKi5zeXMtZm9uZHNjb21tdW5hdXRhaXJlYXZpdmEu
b3JngiEqLnN5cy1pbnN1cmFuY2VjbGFpbXNvbmxpbmUuY28udWuCGSouc3lzLW9u
bGluZS1pbnN1cmUuY28udWuCFyouc3lzLW9ubGluZS1pbnN1cmUuY29tghwqLndz
Zy1wcmV2aWV3LnFzLmF2aXZhLmNvLnVrMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu
AHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFr4ahc7AAABAMA
RjBEAiBP7FnMTUPuXj5hrZpH/6mEEGUjODHmQyEgpXkqveBnrQIgY0jdyz6/LnYt
OfvENh/xxmXJcF1E8NSpBELgIYEnwUgAdQBep3P531bA57U2SH3QSeAyepGaDISh
EhKEGHWWgXFFWAAAAWvhqF0SAAAEAwBGMEQCIDm9OQnNEnGifFWqzZopQCEmZT2I
om6XDtS4FZAPqqphAiAwGNcL8N6YGNs2UirAGiQwpuLeBvbHajdWduT7AR4YzDAN
BgkqhkiG9w0BAQsFAAOCAQEAU+8sjwunEoBKO2kZOQ1I+ySQcs2P/JN2QQ4VZ0j1
CpQS5VnWj1eMNCINb61EnqVrkgjJ+mzu3YKkGigCoqwMvjzTTBmnpsmbtT8l9x4Y
v1xj/gEXRVJE+OVwhQB12Nbwn4dA2xXqieWNn0UrR9y610L7iBlEUShlPPEy76sw
ojVeeHuhTlGDzVzDlJgqkepFq5htScNQvcAyu8nITTEVlQZiOLfpxMZVKvxyHQ8F
xAFyY7i++8sWzx4FJvOeNZfrq+wzs8mSShx8LiINIzmgGI5EK7sZBmu/PK0kD2xn
3879KhdDf7OXfx/kpyxdJmV7/skhcK2xO7g+1Jz0sAyq0Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9pmMDiHMCW6ZAiZzDU
28V1im8JJW7Sai7rX9X98/E4xnlPN6peky9ELQcvXz43TbBZtUblRWuqLUgwglgP
/44YAooqqzxczMO8xCFuapa3hls9Y5AMTOUJu6iWBZ1zAu0TRg7jQAmIbMA1CPlB
wdCEXrFke0jO/WPzB4FcI895dbSks5x5647VAZ4grB9ncMX8rd9KY4vADUNAeVSR
KRS5MMcLu6/VvKmoidr/6U/fQVmRi0i8quJ6xjjSmp4DSy3IW8FkEHg7Vp9L8BpO
/rus3aGtRS1vAmpOFwEv/A/xa7FRZ06f2zUpi6UYFgxENsi/phn0tW6sB55+puER
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 230792538837985821404048810863604666322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC3P 3DQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Undershaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by AVIVA CENTRAL SERVICES UK LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'np-cert01.uk.aviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23787740878624371827565037569146779396714992703861969773173860398408603575500939584632855288994993033226145259831266803204961729825918247749314119680155597678033354369411976290203363106017112459501033000554938257176155283013349096489481086702434146383433535541229234569432808060464920509653995444847466999696885220061306942629812751686454562825128765551219770363074429530797166044919502037587759143873636060952971181185360258977923806765109354938289946848255474766426039710254196598014140320158983108432604794283755949026730765818430629824988323974339356004673776118697203792055338284332576697206592482002026488729883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f29b0c67cd1d1f7d29ad1a97167c82d4a886a4fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2715 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-cert01.uk.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acs.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaeserve.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivahealth.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivamicrosite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.stg-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuimotorscheduling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.dev-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.pre-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.rwy-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.stg-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.sys-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsg-preview.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016be1a85cec000004030046304402204fec59cc4d43ee5e3e61ad9a47ffa9841065233831e6432120a5792abde067ad02206348ddcb3ebf2e762d39fbc4361ff1c665c9705d44f0d4a90442e0218127c1480075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016be1a85d120000040300463044022039bd3909cd1271a27c55aacd9a29402126653d88a26e970ed4b815900faaaa6102203018d70bf0de9818db36522ac01a2430a6e2de06f6c76a375676e4fb011e18cc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053ef2c8f0ba712804a3b6919390d48fb249072cd8ffc9376410e156748f50a9412e559d68f578c34220d6fad449ea56b9208c9fa6ceedd82a41a2802a2ac0cbe3cd34c19a7a6c99bb53f25f71e18bf5c63fe0117455244f8e570850075d8d6f09f8740db15ea89e58d9f452b47dcbad742fb8819445128653cf132efab30a2355e787ba14e5183cd5cc394982a91ea45ab986d49c350bdc032bbc9c84d311595066238b7e9c4c6552afc721d0f05c4017263b8befbcb16cf1e0526f39e3597ebabec33b3c9924a1c7c2e220d2339a0188e442bbb19066bbf3cad240f6c67dfcefd2a17437fb3977f1fe4a72c5d26657bfec92170adb13bb83ed49cf4b00caad1