np-cert01.uk.aviva.com

- Aviva PLC -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number e8:2c:55:4d:b3:d0:2b:aa:26:d9:79:71:43:d9:a6:85 was issued on by COMODO CA Limited.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Organization: Aviva PLC
Organization unit: Digital
Organization unit: Hosted by AVIVA CENTRAL SERVICES UK LIMITED
Organization unit: Multi-Domain SSL
Address: 1 Undershaft
Address: St Helens
Postal code: EC3P 3DQ
State / Province: London
Locality: London
Country: GB

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e8:2c:55:4d:b3:d0:2b:aa:26:d9:79:71:43:d9:a6:85
Serial Number (int): 308611086244910318448683878308975847045
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ce:f4:34:3c:9a:17:58:c0:53:b1:6c:f0:75:44:c5:c0:85:99:41:12
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 90:8f:43:b8:7d:2a:10:63:33:6f:f1:e6:18:70:9b:76:3e:39:c5:d5
Fingerprint (sha256): a4:f3:d2:48:aa:3c:c0:9b:89:7a:2e:f4:73:1c:77:a6:a8:fd:9b:e2:5e:b8:94:72:7a:fe:d7:22:d4:8b:1b:af

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate np-cert01.uk.aviva.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for np-cert01.uk.aviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

np-cert01.uk.aviva.com
*.acs.qs.pre-aviva.co.uk
*.aviva.co.uk
*.aviva.com
*.avivaeserve.co.uk
*.avivahealth.qs.pre-aviva.co.uk
*.avivamicrosite.co.uk
*.avivaservices.co.uk
*.broker.aviva.co.uk
*.cms.aviva.com
*.dev-applyforcover.co.uk
*.dev-aviva-for-advisers.co.uk
*.dev-aviva-for-messaging.co.uk
*.dev-aviva.co.uk
*.dev-aviva.com
*.dev-avivacommunityfund.co.uk
*.dev-avivacommunityfund.org
*.dev-avivacustomer.co.uk
*.dev-avivaforpartners.co.uk
*.dev-fondscommunautaireaviva.org
*.dev-insuranceclaimsonline.co.uk
*.dev-online-insure.co.uk
*.dev-online-insure.com
*.firstdirect.dev-online-insure.com
*.firstdirect.pre-online-insure.com
*.firstdirect.rwy-online-insure.com
*.firstdirect.sys-online-insure.com
*.globalapps.aviva.com
*.hsbc.dev-aviva.co.uk
*.hsbc.dev-online-insure.com
*.hsbc.pre-aviva.co.uk
*.hsbc.pre-online-insure.com
*.hsbc.rwy-aviva.co.uk
*.hsbc.rwy-online-insure.com
*.hsbc.stg-aviva.co.uk
*.hsbc.sys-aviva.co.uk
*.hsbc.sys-online-insure.com
*.pre-applyforcover.co.uk
*.pre-aviva-for-advisers.co.uk
*.pre-aviva-for-messaging.co.uk
*.pre-aviva.co.uk
*.pre-aviva.com
*.pre-avivacommunityfund.co.uk
*.pre-avivacommunityfund.org
*.pre-avivacustomer.co.uk
*.pre-avivaforpartners.co.uk
*.pre-fondscommunautaireaviva.org
*.pre-insuranceclaimsonline.co.uk
*.pre-online-insure.co.uk
*.pre-online-insure.com
*.qs.dev-aviva.co.uk
*.qs.pre-aviva.co.uk
*.qs.rwy-aviva.co.uk
*.qs.stg-aviva.co.uk
*.qs.sys-aviva.co.uk
*.rwy-applyforcover.co.uk
*.rwy-aviva-for-advisers.co.uk
*.rwy-aviva-for-messaging.co.uk
*.rwy-aviva.co.uk
*.rwy-aviva.com
*.rwy-avivacommunityfund.co.uk
*.rwy-avivacommunityfund.org
*.rwy-avivacustomer.co.uk
*.rwy-avivaforpartners.co.uk
*.rwy-fondscommunautaireaviva.org
*.rwy-insuranceclaimsonline.co.uk
*.rwy-online-insure.co.uk
*.rwy-online-insure.com
*.stg-applyforcover.co.uk
*.stg-aviva-for-advisers.co.uk
*.stg-aviva-for-messaging.co.uk
*.stg-aviva.co.uk
*.stg-aviva.com
*.stg-avivacommunityfund.co.uk
*.stg-avivacommunityfund.org
*.stg-avivaforpartners.co.uk
*.stg-fondscommunautaireaviva.org
*.stg-insuranceclaimsonline.co.uk
*.stg-online-insure.co.uk
*.stg-online-insure.com
*.sys-applyforcover.co.uk
*.sys-aviva-for-advisers.co.uk
*.sys-aviva-for-messaging.co.uk
*.sys-aviva.co.uk
*.sys-aviva.com
*.sys-avivacommunityfund.co.uk
*.sys-avivacommunityfund.org
*.sys-avivacustomer.co.uk
*.sys-avivaforpartners.co.uk
*.sys-fondscommunautaireaviva.org
*.sys-insuranceclaimsonline.co.uk
*.sys-online-insure.co.uk
*.sys-online-insure.com

Other certificates including the domain name aviva.com

(limited to 100 certificates)
aviva-swi-amp-fs-01.globalapps.aviva.com
incapsula.com
at.aviva.com
community-fund-italia.aviva.com
avivaprivacy.uk
cert02.uk.aviva.com
cert03.uk.aviva.com
cert06.uk.aviva.com
cert01.as.aviva.com
avivaprivacy.uk
np-cert02.uk.aviva.com
in.aviva.com
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
cert06.uk.aviva.com
idmadmin.globalapps.aviva.com
mpower.non.prod.ana.corp.aviva.com
cert01.ca.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
digital.aviva.com
cert01.ca.aviva.com
redirects.aviva.com
agility-europe.globalapps.aviva.com
icare-uat.globalapps.aviva.com
cert06.uk.aviva.com
incapsula.com
cert04.uk.aviva.com
cms.aviva.com
sv.nonprod.ana.corp.aviva.com
avivaprivacy.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
cert10.uk.aviva.com
boson-services-gateway.globalapps.aviva.com
cert01.tmp.aviva.com
lafabrique-france.aviva.com
cert08.uk.aviva.com
cert01.uk.aviva.com
np-cert02.uk.aviva.com
incapsula.com
cert10.uk.aviva.com
camppe.external.globalapps.aviva.com
proinvest.com.sg
cert01.uk.aviva.com
avivaprivacy.uk
suretyngweb.qa.ana.corp.aviva.com
avivaprivacy.uk
cert01.uk.aviva.com
mpower.non.prod.ana.corp.aviva.com
vaultqa.ana.corp.aviva.com
bigd-kafkadev2.globalapps.aviva.com
cert08.uk.aviva.com
yyzbac1sis1.ana.corp.aviva.com
cyberark-uat.globalapps.aviva.com
www.aviva.co.uk
uat.aviva.co.uk
www.avivatransfer.co.uk
rewards.aviva.com
workbench.prod-globalapps.aviva.com
cx2.globalapps.aviva.com
redirects.aviva.com
yyzsql3047.ana.corp.aviva.com
cert01.ca.aviva.com
mail.aviva.com
cert03.uk.aviva.com
empower.preprod.ana.corp.aviva.com
cert01.as.aviva.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert07.uk.aviva.com
cert01.tmp.aviva.com
cert05.uk.aviva.com
yyzbsm1011.ana.corp.aviva.com
iaccess.ana.corp.aviva.com
www.aviva.co.uk
cert03.uk.aviva.com
cert01.as.aviva.com
yyzcpm1201.ana.corp.aviva.com
shareplans.aviva.com
incapsula.com
ci-master.ana.corp.aviva.com
cert04.uk.aviva.com
community-fund-italia.aviva.com
incapsula.com
cert05.uk.aviva.com

arc.globalapps.aviva.com
cert10.uk.aviva.com
avivaprivacy.uk
incapsula.com
nonprod.ratabasecat.ana.corp.aviva.com
redirects.aviva.com
yyzetl1003.ana.corp.aviva.com
cert04.uk.aviva.com
cert08.uk.aviva.com
nationalhomewarranty.com

Certificate

The complete raw certificate details for np-cert01.uk.aviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo1qCucHViZrI/D+DQvG
u5H83Pj5xqvIIBMjHxdUmB+ZPF0OEJGoHNziEgp/+QkzVIkEuwkMx+mHYT/dkdxg
eioRuYSNjo00uZLVOVT+Rb4IpO3bux54OdxhsFDhksznzXS5KQFz6wD3wX2SwcZ2
lspVX88t6O4P1hw8aRmMUpFYcco3ZLogFOXgIAeQxGYLSWGtQkySNjhDLl7ffNYO
+oz4uEYHnQLT0djob/fajAdSHvZdwq30p9wudidOVft3iz5hkbyDLBfUMjeSCGj3
FPuYjA9ub++T3B3ljJcZaBaS56sxMQ5fdLdNIuVWZS2OFf7Rklps3Nes3zRxbBF0
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308611086244910318448683878308975847045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC3P 3DQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Undershaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by AVIVA CENTRAL SERVICES UK LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'np-cert01.uk.aviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26074824778278195387997970405766179582400603652173510154455747176199779290723863894624144353623448223745068737334599731483528144131725584570188989265095959636441489588916559562238310547043249715957626915927356179494788195980585049649201140983537375970720900954829854248657870749904173162749885115043693722668581749617632514563847012521029004452129741135343693833552452852315099645146416327529818788707244155946122213124562142906927096720581539117056701062780975379997800739545408598807166212365348538202399078250688030843437612925724048779265629771700095764415097975746887521613896955582375595972515061355900721787991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cef4343c9a1758c053b16cf07544c5c085994112
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2563 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-cert01.uk.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acs.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaeserve.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivahealth.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivamicrosite.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaservices.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva-for-messaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.firstdirect.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.globalapps.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.dev-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hsbc.sys-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva-for-messaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva-for-messaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva-for-messaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-applyforcover.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva-for-advisers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva-for-messaging.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacommunityfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacommunityfund.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivacustomer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivaforpartners.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-fondscommunautaireaviva.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-insuranceclaimsonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-online-insure.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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