www.avivainvestors.com

- Aviva PLC -

Issued by Sectigo RSA Extended Validation Secure Server CA

About this certificate

This digital certificate with serial number eb:dc:7a:35:c4:37:1d:21:40:e7:c8:21:18:23:62:47 was issued on by Sectigo Limited.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Company registration number: 02468686
Organization: Aviva PLC
Organization unit: Digital
Organization unit: Hosted by AVIVA CENTRAL SERVICES UK LIMITED
Organization unit: COMODO EV Multi-Domain SSL
Address: 1 Undershaft
Address: St Helens
Postal code: EC3P 3DQ
State / Province: London
Locality: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): eb:dc:7a:35:c4:37:1d:21:40:e7:c8:21:18:23:62:47
Serial Number (int): 313513363032122841377582904890099982919
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f0:94:3f:7f:f9:55:7e:43:cb:21:ed:eb:68:a1:63:55:b2:fb:10:d9
AuthorityKeyId: 2c:69:ff:80:c9:87:90:ae:34:e1:b4:e7:4c:93:85:99:40:e9:a7:b2

Fingerprint (sha1): 52:b8:a5:11:e7:fb:cd:38:57:3f:a4:8a:3d:5d:8c:74:97:0e:20:a3
Fingerprint (sha256): 87:b0:74:83:94:08:5f:87:7e:ee:43:d5:ca:ca:70:98:7f:be:a0:19:fb:bd:51:12:df:fe:cc:0d:43:c1:4e:86

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl

Check the revocation status for certificate www.avivainvestors.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.avivainvestors.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.avivainvestors.com
advisers-offshore.fpinternational.com
advisers-zh.fpinternational.com.hk
advisers.fpinternational.ae
advisers.fpinternational.com.hk
advisers.fpinternational.sg
aims.avivainvestors.com
aimsti.avivainvestors.com
aimstr.avivainvestors.com
at.avivainvestors.com
au.avivainvestors.com
aviva.com.sg
avivainvestors.com
be.avivainvestors.com
brand.avivainvestors.com
ca.avivainvestors.com
careers.avivainvestors.com
ch.avivainvestors.com
customers.friendslife.com
de.avivainvestors.com
es.avivainvestors.com
fi.avivainvestors.com
fr.avivainvestors.com
ie.avivainvestors.com
insights.avivainvestors.com
it.avivainvestors.com
ja.fpinternational.co.jp
library.friendslife.com
lu.avivainvestors.com
media.avivainvestors.com
nl.avivainvestors.com
no.avivainvestors.com
offshore.fpinternational.com
resources.aviva.com
se.avivainvestors.com
services.friendslife.com
sg.avivainvestors.com
tw.avivainvestors.com
uk.avivainvestors.com
us.avivainvestors.com
workplacebenefits.friendslife.co.uk
www.aviva.com.sg
www.fpinternational.ae
www.fpinternational.co.jp
www.fpinternational.com.hk
www.fpinternational.sg
www.friendslife.com
www26.friendsprovident.co.uk
www29.friendsprovident.co.uk
www61.friendsprovident.co.uk
www88.friendsprovident.com
zh.fpinternational.com.hk

Other certificates including the domain name avivainvestors.com

(limited to 100 certificates)
f6.shared.global.fastly.net
www.eserve.avivaservices.co.uk
cert06.uk.aviva.com
f6.shared.global.fastly.net
cert11.uk.aviva.com
remote.na.avivainvestors.com
avivainvestors.com
cert06.uk.aviva.com
cert06.uk.aviva.com
securelogin.avivainvestors.com
cert06.uk.aviva.com
cert01.tmp.aviva.com
ibmwebspheremqukjpmb1p.avivainvestors.com
apps.avivainvestors.com
np-cert02.uk.aviva.com
avivainvestors.com
tw.avivainvestors.com
vault.uk.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
t.notifications.avivainvestors.com
f6.shared.global.fastly.net
avivainvestors.com
cert03.uk.aviva.com
avivainvestors.com
cert01.tmp.aviva.com
f6.shared.global.fastly.net
alb.investors-qliksense.dev.aws-euw1-np.avivacloud.com
avivainvestors.com
avivainvestors.com

f6.shared.global.fastly.net
remote.na.avivainvestors.com
f6.shared.global.fastly.net
fpcidc01.avivagroup.com
avivainvestors.com
f6.shared.global.fastly.net
tw.avivainvestors.com
tw.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com

www.avivainvestors.com
reach.uk.avivainvestors.com
cert06.uk.aviva.com
np-cert02.uk.aviva.com

avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com

f6.shared.global.fastly.net
ibmwebspheremqukextb1p.avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
digital-investor-web-app.prod.kea.ifdsfs.com
tw.avivainvestors.com
cert03.uk.aviva.com
np-cert02.uk.aviva.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
sam.uk.avivainvestors.com
f6.shared.global.fastly.net
f6.shared.global.fastly.net
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
www.avivainvestors.com
avivainvestors.com
at.avivainvestors.com
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
mail.sg.avivainvestors.com
appsstage.avivainvestors.com
avivainvestors.com
ibmwebspheremqukjpmb1u.avivainvestors.com
avivainvestors.com
f6.shared.global.fastly.net
digital-investor-web-app.prod.kea.ifdsfs.com
f6.shared.global.fastly.net
np-cert02.uk.aviva.com
ibmwebspheremqukextb1p.avivainvestors.com
f6.shared.global.fastly.net
fplidc01.avivagroup.com

f6.shared.global.fastly.net
avivainvestors.com
cert01.tmp.aviva.com
cert01.tmp.aviva.com
tw.avivainvestors.com
f6.shared.global.fastly.net
www.aviva.co.uk
avivainvestors.com

f6.shared.global.fastly.net
remote.na.avivainvestors.com
f6.shared.global.fastly.net

Certificate

The complete raw certificate details for www.avivainvestors.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKOjm/Jf2miFFjS+kM2B
d11FhONCXYA1ZLRvRh7PzDnRd4knVjGWLD5Eokheo32P1KN0rsuMjDs/u0KQs9B9
4jpulLAv60NF1TR+B72nGgIbmGapIMyEExyl5LJH8mQx0SVXZ5Ka+ajScKL/jSPN
g2/R8YF7itbiWORiP96k2lAYO7GAnsIi4BKDJtTD8sGvt67jUC6j5KldZJyURJFi
b317Q5wfBDiT4LIyCDRYkiSt1PyRdBGcBNiRxfiyO+KPf8TEV1MelVu3CtRSKf/h
nbhP6tvCtVx5iw/4K2pMecOof4MmSx13f/qjaODjUKgBRZ1eSJKHpvHFU0CZvOtv
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313513363032122841377582904890099982919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Extended Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02468686'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC3P 3DQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Undershaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by AVIVA CENTRAL SERVICES UK LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO EV Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.avivainvestors.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24823401220209582182201652140771240211818720165670443249193388439656285987757342846095313021596720692598561844518902211146221191639044000502862909247551784321142197068578002147059120670333050053631589058509088328747229783914869134627879295950233664587223320040423507503730465609002530894397175586974215480245218931305127256646701644942457167059710107903264385560049019249741782238639271589577612622859211160846240077092266211166149052855655615798266491922051307841279661980027468063124831716475476498384267700770261831364244419023737573838311623109893375113187909687560459034662131995152325242860225747328033283075937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2c69ff80c98790ae34e1b4e74c93859940e9a7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0943f7ff9557e43cb21edeb68a16355b2fb10d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAExtendedValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers-offshore.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers-zh.fpinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers.fpinternational.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers.fpinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisers.fpinternational.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aims.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimsti.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aimstr.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customers.friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fi.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ja.fpinternational.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'no.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offshore.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resources.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.avivainvestors.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workplacebenefits.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpinternational.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpinternational.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fpinternational.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www26.friendsprovident.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www29.friendsprovident.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www61.friendsprovident.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www88.friendsprovident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zh.fpinternational.com.hk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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