avivahealth.ie

Issued by Amazon

About this certificate

This digital certificate with serial number 07:ba:ae:6b:09:88:3c:c0:f7:2f:86:3b:c4:f2:d0:9e was issued on by Amazon.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avivahealth.ie

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ba:ae:6b:09:88:3c:c0:f7:2f:86:3b:c4:f2:d0:9e
Serial Number (int): 10273900805816379367606343229892645022
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 29:a4:2d:19:5c:f6:73:27:af:0c:62:16:82:13:b4:25:b5:e4:89:80
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e0:ea:4f:b5:7c:da:0f:e5:f6:bd:cf:b9:1f:b1:13:f8:4c:0f:f9:83
Fingerprint (sha256): 7c:1f:6d:40:be:47:09:b0:cf:85:1b:e4:e9:3b:a2:a3:f4:b6:64:0f:6b:5b:65:74:0a:23:4e:d0:6d:b3:0d:70

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate avivahealth.ie

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avivahealth.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avivahealth.ie
apprentices.aviva.co.uk
avivabroker.ie
avivastaffpensions.co.uk
avivaequine.ca
aviva-labs.co.uk
avivasurety.biz
avivadirect.ie
bcmotorcycle.com
bcmotorcycle.uk
avivawellbeingrewards.co.uk
aviva-digital.net
advantageaviva.ca
aviva.co.uk
brokertechlaunchpad.com
avivasurety.com
avivaassurance.ca
avantageaviva.com
avivaresults.com
aviva-ebh.com
avivapartenaire.ca
avivaworld.at.aviva.com
brokertechlaunchpad.ca
43.fpinternational.com
avivawellbeingrewards.com
aviva-digital.co.uk
avivawaterprotection.ca
advantageaviva.com
avivacorpsite.at.aviva.com
aviva-digital.com
aviva-digital.uk
bcmotorcycle.co.uk
avivawaterprotection.com
avivasaleshub.com
avivastaffpension.co.uk
aviva-labs.uk
avivatrouduncoup.com
bcmotorcycle.ca
avivademosauto-enrolment.co.uk
avivasavesmarter.co.uk
avivawebcast.com
avivamerchandise.com
avivaadvantage.ca
avivatransfer.co.uk
aviva-direct.ie
autoenrolmentplanner.co.uk
avantageaviva.ca
aviva.com
avivashareplans.at.aviva.com
avivafa.com.sg
bcmotorcycle.net
avivaadvantage.com
avivabrand.com
avivascholarships.com
avivasurety.ca
avivamarine.com
avivasurety.net

Other certificates including the domain name avivahealth.ie

(limited to 100 certificates)

Certificate

The complete raw certificate details for avivahealth.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKTTCCCTWgAwIBAgIQB7quawmIPMD3L4Y7xPLQnjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA4MDQwMDAwMDBaFw0yMjA5MDIy
MzU5NTlaMBkxFzAVBgNVBAMTDmF2aXZhaGVhbHRoLmllMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAu7WMLi+WVFCcPbdYWapJrBDfJtdKB/HfTkAt4whf
A92sIMELl1JblW9/PILmnPOMGS7ay3rkRN3D9x7ptLcgsQ2Hleg/4P5WEMhIAtVC
UWF+CBFPrONa9+VRCGrEWVAl2Q1oMB+YqPtvoGUCukzjYdS9zHj9FhfL+R/p30rN
3TAUX01Gl2bIdRpXZUxqLVBsS7IUbYght7iGBc+mLI6z0mlCHfrod7RSzw6qXbFr
e51+iVJ355sMZKp+dHuYyPSBxBOpe0l40YQ9kUaeNTLkP+5RHf3qIU7QgQfp+ljV
ljVzzqsrVNekjfwrYbrS09Q8KJ1wWoVLXPX1ECT9V2sefQIDAQABo4IHYjCCB14w
HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFCmkLRlc
9nMnrwxiFoITtCW15ImAMIIEkQYDVR0RBIIEiDCCBISCDmF2aXZhaGVhbHRoLmll
ghdhcHByZW50aWNlcy5hdml2YS5jby51a4IOYXZpdmFicm9rZXIuaWWCGGF2aXZh
c3RhZmZwZW5zaW9ucy5jby51a4IOYXZpdmFlcXVpbmUuY2GCEGF2aXZhLWxhYnMu
Y28udWuCD2F2aXZhc3VyZXR5LmJpeoIOYXZpdmFkaXJlY3QuaWWCEGJjbW90b3Jj
eWNsZS5jb22CD2JjbW90b3JjeWNsZS51a4IbYXZpdmF3ZWxsYmVpbmdyZXdhcmRz
LmNvLnVrghFhdml2YS1kaWdpdGFsLm5ldIIRYWR2YW50YWdlYXZpdmEuY2GCC2F2
aXZhLmNvLnVrghdicm9rZXJ0ZWNobGF1bmNocGFkLmNvbYIPYXZpdmFzdXJldHku
Y29tghFhdml2YWFzc3VyYW5jZS5jYYIRYXZhbnRhZ2Vhdml2YS5jb22CEGF2aXZh
cmVzdWx0cy5jb22CDWF2aXZhLWViaC5jb22CEmF2aXZhcGFydGVuYWlyZS5jYYIX
YXZpdmF3b3JsZC5hdC5hdml2YS5jb22CFmJyb2tlcnRlY2hsYXVuY2hwYWQuY2GC
FjQzLmZwaW50ZXJuYXRpb25hbC5jb22CGWF2aXZhd2VsbGJlaW5ncmV3YXJkcy5j
b22CE2F2aXZhLWRpZ2l0YWwuY28udWuCF2F2aXZhd2F0ZXJwcm90ZWN0aW9uLmNh
ghJhZHZhbnRhZ2Vhdml2YS5jb22CGmF2aXZhY29ycHNpdGUuYXQuYXZpdmEuY29t
ghFhdml2YS1kaWdpdGFsLmNvbYIQYXZpdmEtZGlnaXRhbC51a4ISYmNtb3RvcmN5
Y2xlLmNvLnVrghhhdml2YXdhdGVycHJvdGVjdGlvbi5jb22CEWF2aXZhc2FsZXNo
dWIuY29tghdhdml2YXN0YWZmcGVuc2lvbi5jby51a4INYXZpdmEtbGFicy51a4IU
YXZpdmF0cm91ZHVuY291cC5jb22CD2JjbW90b3JjeWNsZS5jYYIeYXZpdmFkZW1v
c2F1dG8tZW5yb2xtZW50LmNvLnVrghZhdml2YXNhdmVzbWFydGVyLmNvLnVrghBh
dml2YXdlYmNhc3QuY29tghRhdml2YW1lcmNoYW5kaXNlLmNvbYIRYXZpdmFhZHZh
bnRhZ2UuY2GCE2F2aXZhdHJhbnNmZXIuY28udWuCD2F2aXZhLWRpcmVjdC5pZYIa
YXV0b2Vucm9sbWVudHBsYW5uZXIuY28udWuCEGF2YW50YWdlYXZpdmEuY2GCCWF2
aXZhLmNvbYIcYXZpdmFzaGFyZXBsYW5zLmF0LmF2aXZhLmNvbYIOYXZpdmFmYS5j
b20uc2eCEGJjbW90b3JjeWNsZS5uZXSCEmF2aXZhYWR2YW50YWdlLmNvbYIOYXZp
dmFicmFuZC5jb22CFWF2aXZhc2Nob2xhcnNoaXBzLmNvbYIOYXZpdmFzdXJldHku
Y2GCD2F2aXZhbWFyaW5lLmNvbYIPYXZpdmFzdXJldHkubmV0MA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAw
oC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3Js
MBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw
AYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC
hipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYD
VR0TAQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHUAKXm+8J45OSHw
VnOfY6V35b5XfZxgCvj5TV0mXCVdx4QAAAF7ESR+ogAABAMARjBEAiAyQXX696hU
izZBib2Igplznewmf4NNOEfHRfVKkRSCeQIgPI1+Eylz0WMrml0wu9h3F4Way1EP
f2jfwvBaeX33VHcAdwBRo7D1/QF5nFZtuDd4jwykeswbJ8v3nohCmg3+1IsF5QAA
AXsRJH8LAAAEAwBIMEYCIQCVoWkUHGlc321REvOcdldTgbV69MIRf7HilJtEEPHq
UQIhAL/1/KqoxL1J4QD2VzMg8Vbb7MBlVFzVd5clsbYQjsiQAHcAQcjKsd8iRkoQ
xqE6CUKHXk4xixsD6+tLx2jwkGKWBvYAAAF7ESR+4AAABAMASDBGAiEApXISth4m
XJFVSUui0QxtTBHV0CPkJZCmqIcRkImZWDsCIQDwz2Kq4p6du5XccyIBrmBBGk8V
5HeXisKzjjNmmOj91DANBgkqhkiG9w0BAQsFAAOCAQEAYNvx11DrHaooQC3ca0YM
MWf2GZs4KnU5ZHbny3TvusC2AN3j7c4lpuigARSaRytaG7vyHXWKPOtod0l4/8oR
+iBElkJjWgzW3BJiV8/8jhgksdCv7sI7bqQyELo1uqEd0k4C9UoVE1IOg0R9vcs5
+X/xuPrAiuoQOKN278jnHKs64awnQ6r9LT5wkJSB7RhVqlQ2hpU9Jnoh2KITjjyW
OuyZI/qXu0IkaOhPFWFb/WmaA8u2gCSZdig7GmtEBhBcNPkdlCY6jvme/XMiWC4+
v2h/p+K5FFZ8BdYDhXGWLQMCITHMizlO2M0AAETrUkW0zubQZ54GBJvHPbwwtdll
BA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7WMLi+WVFCcPbdYWapJ
rBDfJtdKB/HfTkAt4whfA92sIMELl1JblW9/PILmnPOMGS7ay3rkRN3D9x7ptLcg
sQ2Hleg/4P5WEMhIAtVCUWF+CBFPrONa9+VRCGrEWVAl2Q1oMB+YqPtvoGUCukzj
YdS9zHj9FhfL+R/p30rN3TAUX01Gl2bIdRpXZUxqLVBsS7IUbYght7iGBc+mLI6z
0mlCHfrod7RSzw6qXbFre51+iVJ355sMZKp+dHuYyPSBxBOpe0l40YQ9kUaeNTLk
P+5RHf3qIU7QgQfp+ljVljVzzqsrVNekjfwrYbrS09Q8KJ1wWoVLXPX1ECT9V2se
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10273900805816379367606343229892645022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avivahealth.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23696087476844987404847007569045124504787643517566315103201086010431560634532228793048327879603734570289398369187404281538340910824753592055250700775635657639087395795011732512418929577185242031827071680053049562923956836069191581778380767122413467008617909522905687206845601133421824664324771562200276902374806665808680215286630231313497364110198055844670314318829181798738067940374204717118614511564597937133930725296881013514051940360228277187883186267110799045445523789147887002835877563092054333004194624769691495016817799886762118873714409420939243233720199487972343182962542330648762688957733143577821396541053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29a42d195cf67327af0c62168213b425b5e48980
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1160 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivahealth.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apprentices.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivabroker.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivastaffpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaequine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-labs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivadirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawellbeingrewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokertechlaunchpad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaresults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-ebh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivapartenaire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaworld.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokertechlaunchpad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '43.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawellbeingrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawaterprotection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacorpsite.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawaterprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivastaffpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-labs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatrouduncoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivademosauto-enrolment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasavesmarter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawebcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamerchandise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaadvantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-direct.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoenrolmentplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivashareplans.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivafa.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivascholarships.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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