np-cert01.uk.aviva.com

- Aviva PLC -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 8e:de:35:62:51:8d:c7:7c:83:9f:7d:2f:e7:f6:fe:82 was issued on by COMODO CA Limited.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Organization: Aviva PLC
Organization unit: Digital
Organization unit: Hosted by AVIVA CENTRAL SERVICES UK LIMITED
Organization unit: Multi-Domain SSL
Address: 1 Undershaft
Address: St Helens
Postal code: EC3P 3DQ
State / Province: London
Locality: London
Country: GB

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8e:de:35:62:51:8d:c7:7c:83:9f:7d:2f:e7:f6:fe:82
Serial Number (int): 189904148061361392006217332581218057858
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a2:a3:a3:b9:a5:c9:61:b4:1a:9f:c0:08:7a:49:d8:9b:97:c9:3a:70
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): d2:95:98:cc:81:4f:0c:d8:20:84:a0:a2:97:f4:e8:b0:b0:27:26:61
Fingerprint (sha256): 8b:d4:56:bd:09:7b:13:12:f6:6e:d6:4e:07:03:a4:67:32:54:10:39:4c:e3:9c:a4:9a:4e:b2:67:d4:9e:95:d8

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate np-cert01.uk.aviva.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for np-cert01.uk.aviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

np-cert01.uk.aviva.com
*.acs.qs.pre-aviva.co.uk
*.aviva.co.uk
*.aviva.com
*.avivaeserve.co.uk
*.avivahealth.qs.pre-aviva.co.uk
*.avivamicrosite.co.uk
*.avivaservices.co.uk
*.broker.aviva.co.uk
*.cms.aviva.com
*.dev-applyforcover.co.uk
*.dev-aviva-for-advisers.co.uk
*.dev-aviva.co.uk
*.dev-aviva.com
*.dev-avivacommunityfund.co.uk
*.dev-avivacommunityfund.org
*.dev-avivacustomer.co.uk
*.dev-avivaforpartners.co.uk
*.dev-fondscommunautaireaviva.org
*.dev-insuranceclaimsonline.co.uk
*.dev-online-insure.co.uk
*.dev-online-insure.com
*.firstdirect.dev-online-insure.com
*.firstdirect.pre-online-insure.com
*.firstdirect.rwy-online-insure.com
*.firstdirect.sys-online-insure.com
*.globalapps.aviva.com
*.globalapps.dev-aviva.com
*.globalapps.pre-aviva.com
*.hsbc.dev-aviva.co.uk
*.hsbc.dev-online-insure.com
*.hsbc.pre-aviva.co.uk
*.hsbc.pre-online-insure.com
*.hsbc.rwy-aviva.co.uk
*.hsbc.rwy-online-insure.com
*.hsbc.stg-aviva.co.uk
*.hsbc.sys-aviva.co.uk
*.hsbc.sys-online-insure.com
*.pre-applyforcover.co.uk
*.pre-aviva-for-advisers.co.uk
*.pre-aviva.co.uk
*.pre-aviva.com
*.pre-avivacommunityfund.co.uk
*.pre-avivacommunityfund.org
*.pre-avivacustomer.co.uk
*.pre-avivaforpartners.co.uk
*.pre-fondscommunautaireaviva.org
*.pre-insuranceclaimsonline.co.uk
*.pre-online-insure.co.uk
*.pre-online-insure.com
*.qs.dev-aviva.co.uk
*.qs.pre-aviva.co.uk
*.qs.rwy-aviva.co.uk
*.qs.stg-aviva.co.uk
*.qs.sys-aviva.co.uk
*.rwy-applyforcover.co.uk
*.rwy-aviva-for-advisers.co.uk
*.rwy-aviva.co.uk
*.rwy-aviva.com
*.rwy-avivacommunityfund.co.uk
*.rwy-avivacommunityfund.org
*.rwy-avivacustomer.co.uk
*.rwy-avivaforpartners.co.uk
*.rwy-fondscommunautaireaviva.org
*.rwy-insuranceclaimsonline.co.uk
*.rwy-online-insure.co.uk
*.rwy-online-insure.com
*.staff.dev-applyforcover.co.uk
*.staff.pre-applyforcover.co.uk
*.staff.rwy-applyforcover.co.uk
*.staff.stg-applyforcover.co.uk
*.staff.sys-applyforcover.co.uk
*.stg-applyforcover.co.uk
*.stg-aviva-for-advisers.co.uk
*.stg-aviva.co.uk
*.stg-aviva.com
*.stg-avivacommunityfund.co.uk
*.stg-avivacommunityfund.org
*.stg-avivacustomer.co.uk
*.stg-avivaforpartners.co.uk
*.stg-fondscommunautaireaviva.org
*.stg-insuranceclaimsonline.co.uk
*.stg-online-insure.co.uk
*.stg-online-insure.com
*.sys-applyforcover.co.uk
*.sys-aviva-for-advisers.co.uk
*.sys-aviva.co.uk
*.sys-aviva.com
*.sys-avivacommunityfund.co.uk
*.sys-avivacommunityfund.org
*.sys-avivacustomer.co.uk
*.sys-avivaforpartners.co.uk
*.sys-fondscommunautaireaviva.org
*.sys-insuranceclaimsonline.co.uk
*.sys-online-insure.co.uk
*.sys-online-insure.com

Other certificates including the domain name aviva.com

(limited to 100 certificates)
aviva-swi-amp-fs-01.globalapps.aviva.com
incapsula.com
at.aviva.com
community-fund-italia.aviva.com
avivaprivacy.uk
cert02.uk.aviva.com
cert03.uk.aviva.com
cert06.uk.aviva.com
cert01.as.aviva.com
avivaprivacy.uk
np-cert02.uk.aviva.com
in.aviva.com
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
cert06.uk.aviva.com
idmadmin.globalapps.aviva.com
mpower.non.prod.ana.corp.aviva.com
cert01.ca.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
digital.aviva.com
cert01.ca.aviva.com
redirects.aviva.com
agility-europe.globalapps.aviva.com
icare-uat.globalapps.aviva.com
cert06.uk.aviva.com
incapsula.com
cert04.uk.aviva.com
cms.aviva.com
sv.nonprod.ana.corp.aviva.com
avivaprivacy.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
cert10.uk.aviva.com
boson-services-gateway.globalapps.aviva.com
cert01.tmp.aviva.com
lafabrique-france.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
np-cert02.uk.aviva.com
incapsula.com
cert10.uk.aviva.com
camppe.external.globalapps.aviva.com
proinvest.com.sg
cert01.uk.aviva.com
avivaprivacy.uk
suretyngweb.qa.ana.corp.aviva.com
avivaprivacy.uk
cert01.uk.aviva.com
mpower.non.prod.ana.corp.aviva.com
vaultqa.ana.corp.aviva.com
bigd-kafkadev2.globalapps.aviva.com
cert08.uk.aviva.com
yyzbac1sis1.ana.corp.aviva.com
cyberark-uat.globalapps.aviva.com
www.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
rewards.aviva.com
workbench.prod-globalapps.aviva.com
cx2.globalapps.aviva.com
redirects.aviva.com
yyzsql3047.ana.corp.aviva.com
cert01.ca.aviva.com
mail.aviva.com
cert03.uk.aviva.com
empower.preprod.ana.corp.aviva.com
cert01.as.aviva.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert07.uk.aviva.com
cert01.tmp.aviva.com
cert05.uk.aviva.com
yyzbsm1011.ana.corp.aviva.com
iaccess.ana.corp.aviva.com
www.aviva.co.uk
cert03.uk.aviva.com
cert01.as.aviva.com
yyzcpm1201.ana.corp.aviva.com
shareplans.aviva.com
incapsula.com
ci-master.ana.corp.aviva.com
cert04.uk.aviva.com
community-fund-italia.aviva.com
incapsula.com
cert05.uk.aviva.com

arc.globalapps.aviva.com
cert10.uk.aviva.com
avivaprivacy.uk
incapsula.com
nonprod.ratabasecat.ana.corp.aviva.com
redirects.aviva.com
yyzetl1003.ana.corp.aviva.com
cert04.uk.aviva.com
cert08.uk.aviva.com
nationalhomewarranty.com

Certificate

The complete raw certificate details for np-cert01.uk.aviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2WcJLZr0OoGd4wkxD6Z
rz3dEBtS/YWWGczrt+dXunvn/ojKBNNBv/zLKx/synb7a/HwcFIp3mYkVKr5rS3v
Cu/eZtaVQ8Y1Igzb44pol4Nm9oCuQzuJ6qjOS/hiPa2mXfOAErXiuEbyd6tsh8pl
ZVhmdzr/S9uBRXyQhmA8WzGxocCbRnIJQqykr+OqMu4tbIbAHe6vrw8Nykn6AkFl
dofb+4ZcxOfhGU8QJeAgsCi4fEqMyExlgy9BbXEQ1FjXKxzfS/3dzsXoRl72x7b/
rF3rpAQcC0kjdrQOKMFuiPPYX1QgzdyIkCR3w6HGaF0HnTWVy6dztI8XPob9zz08
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189904148061361392006217332581218057858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC3P 3DQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Undershaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by AVIVA CENTRAL SERVICES UK LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'np-cert01.uk.aviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25171528414753636263499048567231130136812371483936468320774352718996567107767096406169880898443568399857605944257791743045127053423993271020783993204337839085798157616521050453949491958773185132058964678920182552810723572085259965072185942886535665037560724937519059749494273050384704565092978605592515563301212981803711299811471700508244210276520637538230641429387395207512263718139048809043901528044104441654281051357095524001748083759479173721412701864653412596150061046382972497765097625148572931795948320496260523847364529711411929195995100378321797068500760846655620733304263529821501733727639657154677305064519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2a3a3b9a5c961b41a9fc0087a49d89b97c93a70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-cert01.uk.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acs.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaeserve.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivahealth.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivamicrosite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.dev-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.pre-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.rwy-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.stg-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.sys-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-online-insure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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