www.avivatransfer.co.uk

- Aviva PLC -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number e4:14:62:ae:e8:d4:c2:7d:3c:5b:4a:eb:a6:78:76:96 was issued on by Sectigo Limited.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Company registration number: 02468686
Organization: Aviva PLC
State / Province: London, City of
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): e4:14:62:ae:e8:d4:c2:7d:3c:5b:4a:eb:a6:78:76:96
Serial Number (int): 303169830510030683921935103272955704982
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 99:ae:50:2b:6e:fd:55:03:42:28:38:16:b1:ec:0c:cb:ad:58:c7:98
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): 88:56:5a:f7:52:bc:2a:87:01:e7:7f:8a:4b:08:b5:ce:55:b6:2c:70
Fingerprint (sha256): 5f:00:2a:7b:c0:d9:e1:6f:56:1e:ae:23:5c:44:f6:12:cf:28:50:b8:81:61:40:02:a8:61:ec:21:ff:02:95:6c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate www.avivatransfer.co.uk

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.avivatransfer.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.avivatransfer.co.uk
adviser.friendslife.co.uk
cdn.aviva.com
eserve.friendslife.co.uk
help.generalaccident.com
member.friendslife.co.uk
online.friendslife.co.uk
runtime.generalaccident.com
runtime.quotemehappy.com
servlets.generalaccident.com
servlets.quotemehappy.com
training.online.friendslife.co.uk
workplacebenefits.friendslife.co.uk
www.avivatransfers.co.uk
www.erfunding.co.uk
www17.friendsprovident.co.uk

Other certificates including the domain name avivatransfer.co.uk

(limited to 100 certificates)
www.avivatransfer.co.uk
www.aviva.co.uk
www.avivatransfer.co.uk

www.aviva.co.uk
avivaadvantage.com
www.avivapartenaire.ca
www.aviva.co.uk
43.fpinternational.com
avivatransfer.co.uk
uat.aviva.co.uk
uat.aviva.co.uk
uat.aviva.co.uk
www.bcmotorcycle.com
uat.aviva.co.uk
www.aviva.co.uk
www.avivatransfer.co.uk
www.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.aviva.co.uk
www.avantageaviva.com
www.avivatransfer.co.uk
uat.aviva.co.uk
avivatransfer.co.uk
uat.aviva.co.uk
uat.aviva.co.uk
uat.aviva.co.uk
avivaadvantage.com
www.avivatransfer.co.uk
uat.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.aviva.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk
avivatransfer.co.uk
www.avivatransfer.co.uk
avivahealth.ie
uat.aviva.co.uk
avivatransfer.co.uk
uat.aviva.co.uk
aviva-digital.co.uk
www.bcmotorcycle.com
www.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk


www.avantageaviva.com
www.aviva.co.uk
avivatransfer.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
www.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk
uat.aviva.co.uk
avivatransfer.co.uk
www.avivatransfer.co.uk
www.avivatransfer.co.uk

Certificate

The complete raw certificate details for www.avivatransfer.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmMpQlMCGo6k8C/2C6qz
+2z3qIubk5rV1Wc8pKhFXiCXgxcrsgpjD5JmuT/qMqe+fvojrktyKpMbm0wlfNAT
sNzuPoGYl+tx7nM235V0YkxUbsfpgb+9tyeW6SMmiFuQ8Pb/tgaYXfUXL8KAIZjQ
47WFtBQhZQ0byNp+2Z2QFusWGes8VfyNEWchs55uFBr+5OSBBrcSv7x2KuIzsh/s
2LRZZO+6yntG5jRdqfZWzDauHKr222uwRUqoOrbnKpZzJtDfds+2ioEilYGseGRN
10eg+trD66DQMBZ/LIJ13qtOQ3fH8q/tuszDkA03gskX/tUHvPsSgV7zWhv/WTS3
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303169830510030683921935103272955704982
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02468686'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London, City of'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.avivatransfer.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24539129357953801231244954006250665605778722973558561210179018133259587357889544120345157686843698366074696734342141119190344211308617185627046767376482111659604112369936357156132700801181726754956173678940330986227276958447854855019342032119750303917246588056755292128579023643671668233439744532951924959325929431023603164289297116654071718376247395802077129620624100503053255104055588781158183215183459981920933615615874737693609285593741631363807898826494822440285542218556830810982092007923141281405433646657583403451474399070303056866972285992157282341146432337618225433520282700586875883273763920530424521340697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99ae502b6efd550342283816b1ec0ccbad58c798
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (436 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adviser.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eserve.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.generalaccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'member.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runtime.generalaccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runtime.quotemehappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servlets.generalaccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servlets.quotemehappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.online.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplacebenefits.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivatransfers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www17.friendsprovident.co.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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