insights.avivainvestors.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:2d:c4:61:39:15:5a:df:b9:60:f1:3b:2c:e5:91:43 was issued on by Amazon.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=insights.avivainvestors.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:2d:c4:61:39:15:5a:df:b9:60:f1:3b:2c:e5:91:43
Serial Number (int): 16188372363133599471167301859714371907
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 56:68:47:77:6f:5e:1c:20:c1:3e:93:de:7e:d8:05:46:12:d2:24:59
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 86:6b:2a:bf:df:62:a5:25:96:4c:3f:75:d7:fa:ae:64:16:ea:c8:0a
Fingerprint (sha256): 6c:41:3d:3d:9b:c2:6a:e9:ec:91:bd:74:02:19:c3:3a:0f:33:7a:db:ce:39:28:6a:57:c1:68:bb:0f:9f:6c:49

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate insights.avivainvestors.com

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for insights.avivainvestors.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

insights.avivainvestors.com
myhealthcounts.co.uk
www.getactive.aviva.co.uk
www.hibernian.ie
login.avivainvestors.com
www.myhealthcounts.co.uk
www.avivatraders.com
www.avivainvestors.nl
www.avivainvestors.be
www.partenaireaviva.ca
www.vendor-lookup.aviva.ca
www.online.avivaservices.co.uk
www.eserve.avivaservices.co.uk
www.avivainvestors.tel
www.avivainvestors.it
brand.avivainvestors.com
www.avivainvestors.es
www.avivainvestors.at
sg.avivainvestors.com
tw.avivainvestors.com
media.avivainvestors.com
www.avivainvestors.ca
se.avivainvestors.com
www.szkolenia.aviva.pl
cas-uat2.aviva.pl
withprofitsfunds.co.uk
www.dom.aviva.pl
www.chmura.aviva.pl
vendor-lookup.aviva.ca
www.avivahealthandwellbeing.co.uk
www.avivainvestors.sg
www.cutredtape.co.uk
www.avivainvestors.se
zycie-i-zdrowie.aviva.pl
aims.avivainvestors.com
www.avivainvestors.com.au
www.friendslife.com
www.avivainvestors.de
us.avivainvestors.com
www.centrumfinansow.aviva.pl
www.avivainvestors.ch
www.withprofitsfunds.co.uk
stadium.aviva.ie
www.adviser.avivaservices.co.uk
www.agrupa.aviva.pl
www.avivapartner.ca
aimsti.avivainvestors.com
www.avivainvestors.co.uk
www.bcmotorcycle.aviva.ca
ustawienia-beta.aviva.com.pl
www.monaviva.avivainsurance.ca
www.avivainvestors.ie
www2.aviva.pl
uk.avivainvestors.com
www.myaviva.avivainsurance.ca
www.ofe.aviva.pl
www.login.avivainvestors.com
www.member.avivaservices.co.uk
www.avivacanada.com
www.avivaavantage.com
www.controlyourpension.com
www.avivainvestors.lu
www.regs.avivaservices.co.uk
www.hibernianaviva.ie
avivamicrosite.co.uk

Other certificates including the domain name avivainvestors.com

(limited to 100 certificates)
f6.shared.global.fastly.net
www.eserve.avivaservices.co.uk
cert06.uk.aviva.com
f6.shared.global.fastly.net
cert11.uk.aviva.com
remote.na.avivainvestors.com
avivainvestors.com
cert06.uk.aviva.com
cert06.uk.aviva.com
securelogin.avivainvestors.com
cert06.uk.aviva.com
cert01.tmp.aviva.com
ibmwebspheremqukjpmb1p.avivainvestors.com
apps.avivainvestors.com
np-cert02.uk.aviva.com
avivainvestors.com
tw.avivainvestors.com
vault.uk.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
t.notifications.avivainvestors.com
f6.shared.global.fastly.net
avivainvestors.com
cert03.uk.aviva.com
avivainvestors.com
cert01.tmp.aviva.com
f6.shared.global.fastly.net
avivainvestors.com
avivainvestors.com

f6.shared.global.fastly.net
remote.na.avivainvestors.com
f6.shared.global.fastly.net
fpcidc01.avivagroup.com
avivainvestors.com
f6.shared.global.fastly.net
tw.avivainvestors.com
tw.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com

www.avivainvestors.com
reach.uk.avivainvestors.com
cert06.uk.aviva.com
np-cert02.uk.aviva.com

avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com

f6.shared.global.fastly.net
ibmwebspheremqukextb1p.avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
tw.avivainvestors.com
cert03.uk.aviva.com
np-cert02.uk.aviva.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
sam.uk.avivainvestors.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
www.avivainvestors.com
avivainvestors.com
at.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
mail.sg.avivainvestors.com
appsstage.avivainvestors.com
avivainvestors.com
ibmwebspheremqukjpmb1u.avivainvestors.com
avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
np-cert02.uk.aviva.com
ibmwebspheremqukextb1p.avivainvestors.com
f6.shared.global.fastly.net
fplidc01.avivagroup.com

f6.shared.global.fastly.net
avivainvestors.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
tw.avivainvestors.com
f6.shared.global.fastly.net
www.aviva.co.uk
avivainvestors.com

f6.shared.global.fastly.net
remote.na.avivainvestors.com
f6.shared.global.fastly.net
remote.na.avivainvestors.com

Certificate

The complete raw certificate details for insights.avivainvestors.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMETCCCvmgAwIBAgIQDC3EYTkVWt+5YPE7LOWRQzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDMwOTAwMDAwMFoXDTI0MDQwNjIzNTk1OVowJjEk
MCIGA1UEAxMbaW5zaWdodHMuYXZpdmFpbnZlc3RvcnMuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri1fL5FIGvIazL1pFfUjl6KSFcsqUy9NrrSB
rINfS3LzvqSf9QS5nkbFRWXBPvlu11+uwlJhED5uaNJ3v85neojBjIMSCLuB8WG8
zwDVYm76+fGXaWLVlpfznURu+MsBgazRnl81t/RcwPduYWShuekDMlAFn1qMOSow
kPd3lqug3MHqygJcxOsHq1c60IelGQ3Kd3A2k5+dzZ3oRuva2GKjErs0SMIvKPtr
lTvfE6IRHOfkXLG0JASJC98F+VgnWmtFhE2OhGyoHF43Y5mQt73e7aB5LrTFGL7r
P+XHVehexI1BxR2EVN11BGZ5WvcEg1RwH4QWUtjWvaLtBOJ2qQIDAQABo4IJIzCC
CR8wHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFFZo
R3dvXhwgwT6T3n7YBUYS0iRZMIIGUgYDVR0RBIIGSTCCBkWCG2luc2lnaHRzLmF2
aXZhaW52ZXN0b3JzLmNvbYIUbXloZWFsdGhjb3VudHMuY28udWuCGXd3dy5nZXRh
Y3RpdmUuYXZpdmEuY28udWuCEHd3dy5oaWJlcm5pYW4uaWWCGGxvZ2luLmF2aXZh
aW52ZXN0b3JzLmNvbYIYd3d3Lm15aGVhbHRoY291bnRzLmNvLnVrghR3d3cuYXZp
dmF0cmFkZXJzLmNvbYIVd3d3LmF2aXZhaW52ZXN0b3JzLm5sghV3d3cuYXZpdmFp
bnZlc3RvcnMuYmWCFnd3dy5wYXJ0ZW5haXJlYXZpdmEuY2GCGnd3dy52ZW5kb3It
bG9va3VwLmF2aXZhLmNhgh53d3cub25saW5lLmF2aXZhc2VydmljZXMuY28udWuC
Hnd3dy5lc2VydmUuYXZpdmFzZXJ2aWNlcy5jby51a4IWd3d3LmF2aXZhaW52ZXN0
b3JzLnRlbIIVd3d3LmF2aXZhaW52ZXN0b3JzLml0ghhicmFuZC5hdml2YWludmVz
dG9ycy5jb22CFXd3dy5hdml2YWludmVzdG9ycy5lc4IVd3d3LmF2aXZhaW52ZXN0
b3JzLmF0ghVzZy5hdml2YWludmVzdG9ycy5jb22CFXR3LmF2aXZhaW52ZXN0b3Jz
LmNvbYIYbWVkaWEuYXZpdmFpbnZlc3RvcnMuY29tghV3d3cuYXZpdmFpbnZlc3Rv
cnMuY2GCFXNlLmF2aXZhaW52ZXN0b3JzLmNvbYIWd3d3LnN6a29sZW5pYS5hdml2
YS5wbIIRY2FzLXVhdDIuYXZpdmEucGyCFndpdGhwcm9maXRzZnVuZHMuY28udWuC
EHd3dy5kb20uYXZpdmEucGyCE3d3dy5jaG11cmEuYXZpdmEucGyCFnZlbmRvci1s
b29rdXAuYXZpdmEuY2GCIXd3dy5hdml2YWhlYWx0aGFuZHdlbGxiZWluZy5jby51
a4IVd3d3LmF2aXZhaW52ZXN0b3JzLnNnghR3d3cuY3V0cmVkdGFwZS5jby51a4IV
d3d3LmF2aXZhaW52ZXN0b3JzLnNlghh6eWNpZS1pLXpkcm93aWUuYXZpdmEucGyC
F2FpbXMuYXZpdmFpbnZlc3RvcnMuY29tghl3d3cuYXZpdmFpbnZlc3RvcnMuY29t
LmF1ghN3d3cuZnJpZW5kc2xpZmUuY29tghV3d3cuYXZpdmFpbnZlc3RvcnMuZGWC
FXVzLmF2aXZhaW52ZXN0b3JzLmNvbYIcd3d3LmNlbnRydW1maW5hbnNvdy5hdml2
YS5wbIIVd3d3LmF2aXZhaW52ZXN0b3JzLmNoghp3d3cud2l0aHByb2ZpdHNmdW5k
cy5jby51a4IQc3RhZGl1bS5hdml2YS5pZYIfd3d3LmFkdmlzZXIuYXZpdmFzZXJ2
aWNlcy5jby51a4ITd3d3LmFncnVwYS5hdml2YS5wbIITd3d3LmF2aXZhcGFydG5l
ci5jYYIZYWltc3RpLmF2aXZhaW52ZXN0b3JzLmNvbYIYd3d3LmF2aXZhaW52ZXN0
b3JzLmNvLnVrghl3d3cuYmNtb3RvcmN5Y2xlLmF2aXZhLmNhghx1c3Rhd2llbmlh
LWJldGEuYXZpdmEuY29tLnBsgh53d3cubW9uYXZpdmEuYXZpdmFpbnN1cmFuY2Uu
Y2GCFXd3dy5hdml2YWludmVzdG9ycy5pZYINd3d3Mi5hdml2YS5wbIIVdWsuYXZp
dmFpbnZlc3RvcnMuY29tgh13d3cubXlhdml2YS5hdml2YWluc3VyYW5jZS5jYYIQ
d3d3Lm9mZS5hdml2YS5wbIIcd3d3LmxvZ2luLmF2aXZhaW52ZXN0b3JzLmNvbYIe
d3d3Lm1lbWJlci5hdml2YXNlcnZpY2VzLmNvLnVrghN3d3cuYXZpdmFjYW5hZGEu
Y29tghV3d3cuYXZpdmFhdmFudGFnZS5jb22CGnd3dy5jb250cm9seW91cnBlbnNp
b24uY29tghV3d3cuYXZpdmFpbnZlc3RvcnMubHWCHHd3dy5yZWdzLmF2aXZhc2Vy
dmljZXMuY28udWuCFXd3dy5oaWJlcm5pYW5hdml2YS5pZYIUYXZpdmFtaWNyb3Np
dGUuY28udWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpv
bnRydXN0LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYB
BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250
cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1
c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSC
AW8EggFrAWkAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYbI
NC/3AAAEAwBGMEQCIAx9++EqRYko+33khIWJ/6NQ1o5w9TecHTW/c8wTOWcwAiAv
sSIi2Z3OFiG6tFDNR7dgBH8EZqkk/WwnfPECVNYBaQB3AEiw42vapkc0D+VqAvqd
MOscUgHLVt0sgdm7v6s52IRzAAABhsg0MCIAAAQDAEgwRgIhAK8H0IIxTV707ZA7
QyTfNrRe3f9f9yQpd3U2iD9RLzQzAiEAiSLiFnUKpubKsHF0LZqEhHLiK95oBq+R
ZPwrs4hCJtQAdwA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYbI
NDAhAAAEAwBIMEYCIQCY0sGoZ9jMuy18BQcldoJ/oXwoFBGKOOK+YLw68Vz6gQIh
AJhXPwCS/gjF7rZcdpAkPxL1AYpz8BzhPhv0cIKen/MnMA0GCSqGSIb3DQEBCwUA
A4IBAQBHCuq4HW7SsNUzjKiI/woW0gFZFXhBY3sx1/XgXJF3dLR6wCTnCxnSQa1V
dbSUCehGtE00c+1xhk/jvxkkvZNyzpbYvXcIedp/3DmehRTlYSKDWPEPbc78bsOy
L7otpW7mVoMvtUlmYCI6Tfy0JA4qZJK3c+IvNXw8mjqBYLMXb9bx1N53gsi8hXU4
KCbHtwZpLgek3IBVDM9iM/UeOW9nTS1yhNMLWx2dR5Sm6B+Y7072dWygK5zEvPTn
zBntynxylArj2SjU6kR3dRxhmOuo6hXtv2ypq82BmxhKVHEDtZY056egIm5YwfDd
m9/+oOGQzQegIxn+XG9QRUvuA0Cw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri1fL5FIGvIazL1pFfUj
l6KSFcsqUy9NrrSBrINfS3LzvqSf9QS5nkbFRWXBPvlu11+uwlJhED5uaNJ3v85n
eojBjIMSCLuB8WG8zwDVYm76+fGXaWLVlpfznURu+MsBgazRnl81t/RcwPduYWSh
uekDMlAFn1qMOSowkPd3lqug3MHqygJcxOsHq1c60IelGQ3Kd3A2k5+dzZ3oRuva
2GKjErs0SMIvKPtrlTvfE6IRHOfkXLG0JASJC98F+VgnWmtFhE2OhGyoHF43Y5mQ
t73e7aB5LrTFGL7rP+XHVehexI1BxR2EVN11BGZ5WvcEg1RwH4QWUtjWvaLtBOJ2
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16188372363133599471167301859714371907
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'insights.avivainvestors.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21987838742203826327731764178619155128157155819321713486963422160884646728112045742361241163179583439066678046927461631164285655586628252114480688132342609541879815000749536416109617998678299105144469322404296188809746148666119447215317110834083664761735487048964593983178163870449693902772676788770843854054438591948744529508419513055338594044747702441326542079757664986606925222825678081727776987388125876761097796557167394071897787228362531992670351009006696520713548986233710643258067415727068359763814933732384538167392598211595119700765031614713283442952296870877657730951069292428995457624407371476832943765161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							566847776f5e1c20c13e93de7ed8054612d22459
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthcounts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getactive.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hibernian.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhealthcounts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivatraders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partenaireaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vendor-lookup.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.online.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eserve.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.tel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.szkolenia.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-uat2.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withprofitsfunds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dom.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chmura.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor-lookup.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivahealthandwellbeing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cutredtape.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zycie-i-zdrowie.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aims.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrumfinansow.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.withprofitsfunds.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stadium.aviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adviser.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrupa.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivapartner.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimsti.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ustawienia-beta.aviva.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofe.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.login.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.member.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaavantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regs.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hibernianaviva.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamicrosite.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000186c8342ff7000004030046304402200c7dfbe12a458928fb7de4848589ffa350d68e70f5379c1d35bf73cc1339673002202fb12222d99dce1621bab450cd47b760047f0466a924fd6c277cf10254d6016900770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000186c83430220000040300483046022100af07d082314d5ef4ed903b4324df36b45eddff5ff72429777536883f512f34330221008922e216750aa6e6cab071742d9a848472e22bde6806af9164fc2bb3884226d40077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad41700000186c8343021000004030048304602210098d2c1a867d8ccbb2d7c05072576827fa17c2814118a38e2be60bc3af15cfa8102210098573f0092fe08c5eeb65c7690243f12f5018a73f01ce13e1bf470829e9ff327
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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