np-cert01.uk.aviva.com

- Aviva PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ad:a1:06:b1:b2:21:8a:ae:a8:5c:5b:5d:6c:46:0f:d2 was issued on by Sectigo Limited.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Organization: Aviva PLC
Organization unit: Digital
Organization unit: Hosted by AVIVA CENTRAL SERVICES UK LIMITED
Organization unit: Multi-Domain SSL
Address: 1 Undershaft
Address: St Helens
Postal code: EC3P 3DQ
State / Province: London
Locality: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): ad:a1:06:b1:b2:21:8a:ae:a8:5c:5b:5d:6c:46:0f:d2
Serial Number (int): 230792538837985821404048810863604666322
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f2:9b:0c:67:cd:1d:1f:7d:29:ad:1a:97:16:7c:82:d4:a8:86:a4:fb
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): c8:f2:76:88:0b:6f:db:8b:f9:44:6d:d7:f1:9a:7b:d6:32:03:da:22
Fingerprint (sha256): 86:5c:75:73:6d:f8:d5:9c:6f:8b:9e:0a:db:14:a6:58:9e:7e:be:7d:52:93:5a:90:12:8c:4d:b1:15:0b:64:4c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate np-cert01.uk.aviva.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for np-cert01.uk.aviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

np-cert01.uk.aviva.com
*.acs.qs.pre-aviva.co.uk
*.aviva.co.uk
*.aviva.com
*.avivaeserve.co.uk
*.avivahealth.qs.pre-aviva.co.uk
*.avivamicrosite.co.uk
*.avivaservices.co.uk
*.broker.aviva.co.uk
*.dev-applyforcover.co.uk
*.dev-aviva-for-advisers.co.uk
*.dev-aviva.co.uk
*.dev-aviva.com
*.dev-avivacommunityfund.co.uk
*.dev-avivacommunityfund.org
*.dev-avivacustomer.co.uk
*.dev-avivaforpartners.co.uk
*.dev-fondscommunautaireaviva.org
*.dev-insuranceclaimsonline.co.uk
*.dev-online-insure.co.uk
*.dev-online-insure.com
*.firstdirect.dev-online-insure.com
*.firstdirect.pre-online-insure.com
*.firstdirect.rwy-online-insure.com
*.firstdirect.sys-online-insure.com
*.globalapps.aviva.com
*.globalapps.dev-aviva.com
*.globalapps.pre-aviva.com
*.hsbc.dev-aviva.co.uk
*.hsbc.dev-online-insure.com
*.hsbc.pre-aviva.co.uk
*.hsbc.pre-online-insure.com
*.hsbc.rwy-aviva.co.uk
*.hsbc.rwy-online-insure.com
*.hsbc.stg-aviva.co.uk
*.hsbc.stg-online-insure.com
*.hsbc.sys-aviva.co.uk
*.hsbc.sys-online-insure.com
*.nuimotorscheduling.com
*.pre-applyforcover.co.uk
*.pre-aviva-for-advisers.co.uk
*.pre-aviva.co.uk
*.pre-aviva.com
*.pre-avivacommunityfund.co.uk
*.pre-avivacommunityfund.org
*.pre-avivacustomer.co.uk
*.pre-avivaforpartners.co.uk
*.pre-fondscommunautaireaviva.org
*.pre-insuranceclaimsonline.co.uk
*.pre-online-insure.co.uk
*.pre-online-insure.com
*.qs.dev-aviva.co.uk
*.qs.pre-aviva.co.uk
*.qs.rwy-aviva.co.uk
*.qs.stg-aviva.co.uk
*.qs.sys-aviva.co.uk
*.rwy-applyforcover.co.uk
*.rwy-aviva-for-advisers.co.uk
*.rwy-aviva.co.uk
*.rwy-aviva.com
*.rwy-avivacommunityfund.co.uk
*.rwy-avivacommunityfund.org
*.rwy-avivacustomer.co.uk
*.rwy-avivaforpartners.co.uk
*.rwy-fondscommunautaireaviva.org
*.rwy-insuranceclaimsonline.co.uk
*.rwy-online-insure.co.uk
*.rwy-online-insure.com
*.staff.dev-applyforcover.co.uk
*.staff.pre-applyforcover.co.uk
*.staff.rwy-applyforcover.co.uk
*.staff.stg-applyforcover.co.uk
*.staff.sys-applyforcover.co.uk
*.stg-applyforcover.co.uk
*.stg-aviva-for-advisers.co.uk
*.stg-aviva.co.uk
*.stg-aviva.com
*.stg-avivacommunityfund.co.uk
*.stg-avivacommunityfund.org
*.stg-avivacustomer.co.uk
*.stg-avivaforpartners.co.uk
*.stg-fondscommunautaireaviva.org
*.stg-insuranceclaimsonline.co.uk
*.stg-online-insure.co.uk
*.stg-online-insure.com
*.sys-applyforcover.co.uk
*.sys-aviva-for-advisers.co.uk
*.sys-aviva.co.uk
*.sys-aviva.com
*.sys-avivacommunityfund.co.uk
*.sys-avivacommunityfund.org
*.sys-avivacustomer.co.uk
*.sys-avivaforpartners.co.uk
*.sys-fondscommunautaireaviva.org
*.sys-insuranceclaimsonline.co.uk
*.sys-online-insure.co.uk
*.sys-online-insure.com
*.wsg-preview.qs.aviva.co.uk

Other certificates including the domain name aviva.com

(limited to 100 certificates)
aviva-swi-amp-fs-01.globalapps.aviva.com
incapsula.com
at.aviva.com
community-fund-italia.aviva.com
avivaprivacy.uk
cert02.uk.aviva.com
cert03.uk.aviva.com
cert06.uk.aviva.com
cert01.as.aviva.com
avivaprivacy.uk
np-cert02.uk.aviva.com
in.aviva.com
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
cert06.uk.aviva.com
idmadmin.globalapps.aviva.com
mpower.non.prod.ana.corp.aviva.com
cert01.ca.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
digital.aviva.com
cert01.ca.aviva.com
redirects.aviva.com
agility-europe.globalapps.aviva.com
icare-uat.globalapps.aviva.com
cert06.uk.aviva.com
incapsula.com
cert04.uk.aviva.com
cms.aviva.com
sv.nonprod.ana.corp.aviva.com
avivaprivacy.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
cert10.uk.aviva.com
boson-services-gateway.globalapps.aviva.com
cert01.tmp.aviva.com
lafabrique-france.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
np-cert02.uk.aviva.com
incapsula.com
cert10.uk.aviva.com
camppe.external.globalapps.aviva.com
proinvest.com.sg
cert01.uk.aviva.com
avivaprivacy.uk
suretyngweb.qa.ana.corp.aviva.com
avivaprivacy.uk
cert01.uk.aviva.com
mpower.non.prod.ana.corp.aviva.com
vaultqa.ana.corp.aviva.com
bigd-kafkadev2.globalapps.aviva.com
cert08.uk.aviva.com
yyzbac1sis1.ana.corp.aviva.com
cyberark-uat.globalapps.aviva.com
www.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
rewards.aviva.com
workbench.prod-globalapps.aviva.com
cx2.globalapps.aviva.com
redirects.aviva.com
yyzsql3047.ana.corp.aviva.com
cert01.ca.aviva.com
mail.aviva.com
cert03.uk.aviva.com
empower.preprod.ana.corp.aviva.com
cert01.as.aviva.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert07.uk.aviva.com
cert01.tmp.aviva.com
cert05.uk.aviva.com
yyzbsm1011.ana.corp.aviva.com
iaccess.ana.corp.aviva.com
www.aviva.co.uk
cert03.uk.aviva.com
cert01.as.aviva.com
yyzcpm1201.ana.corp.aviva.com
shareplans.aviva.com
incapsula.com
ci-master.ana.corp.aviva.com
cert04.uk.aviva.com
community-fund-italia.aviva.com
incapsula.com
cert05.uk.aviva.com

arc.globalapps.aviva.com
cert10.uk.aviva.com
avivaprivacy.uk
incapsula.com
nonprod.ratabasecat.ana.corp.aviva.com
redirects.aviva.com
yyzetl1003.ana.corp.aviva.com
cert04.uk.aviva.com
cert08.uk.aviva.com
nationalhomewarranty.com

Certificate

The complete raw certificate details for np-cert01.uk.aviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9pmMDiHMCW6ZAiZzDU
28V1im8JJW7Sai7rX9X98/E4xnlPN6peky9ELQcvXz43TbBZtUblRWuqLUgwglgP
/44YAooqqzxczMO8xCFuapa3hls9Y5AMTOUJu6iWBZ1zAu0TRg7jQAmIbMA1CPlB
wdCEXrFke0jO/WPzB4FcI895dbSks5x5647VAZ4grB9ncMX8rd9KY4vADUNAeVSR
KRS5MMcLu6/VvKmoidr/6U/fQVmRi0i8quJ6xjjSmp4DSy3IW8FkEHg7Vp9L8BpO
/rus3aGtRS1vAmpOFwEv/A/xa7FRZ06f2zUpi6UYFgxENsi/phn0tW6sB55+puER
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 230792538837985821404048810863604666322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC3P 3DQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Undershaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by AVIVA CENTRAL SERVICES UK LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'np-cert01.uk.aviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23787740878624371827565037569146779396714992703861969773173860398408603575500939584632855288994993033226145259831266803204961729825918247749314119680155597678033354369411976290203363106017112459501033000554938257176155283013349096489481086702434146383433535541229234569432808060464920509653995444847466999696885220061306942629812751686454562825128765551219770363074429530797166044919502037587759143873636060952971181185360258977923806765109354938289946848255474766426039710254196598014140320158983108432604794283755949026730765818430629824988323974339356004673776118697203792055338284332576697206592482002026488729883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f29b0c67cd1d1f7d29ad1a97167c82d4a886a4fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2715 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-cert01.uk.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acs.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaeserve.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivahealth.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivamicrosite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.stg-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nuimotorscheduling.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.dev-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.pre-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.rwy-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.stg-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.sys-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wsg-preview.qs.aviva.co.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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