uat.aviva.co.uk

- Aviva PLC -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number f4:f9:c8:f3:4d:55:72:e6:c5:6f:11:84:1c:0e:a5:0d was issued on by Sectigo Limited.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Aviva PLC

Organization: Aviva PLC
Organization unit: Digital
Organization unit: Hosted by AVIVA CENTRAL SERVICES UK LIMITED
Organization unit: Multi-Domain SSL
Address: 1 Undershaft
Address: St Helens
Postal code: EC3P 3DQ
State / Province: London
Locality: London
Country: GB

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f4:f9:c8:f3:4d:55:72:e6:c5:6f:11:84:1c:0e:a5:0d
Serial Number (int): 325628588647592513426019447847217177869
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 28:9e:1c:67:be:f3:3a:bf:1f:5b:31:37:64:f8:90:9a:28:09:67:a2
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): fd:ed:d9:75:57:20:0e:1e:c8:df:93:cc:3c:78:52:48:49:4b:6a:d0
Fingerprint (sha256): c6:de:a0:40:aa:ed:7a:ed:62:55:8e:8d:01:b0:08:44:ea:ef:b4:69:d4:c4:71:35:ef:2e:37:90:11:ac:52:51

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate uat.aviva.co.uk

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat.aviva.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat.aviva.co.uk
*.admin.aviva.co.uk
*.api.aviva.ca
*.aviva.ca
*.aviva.co.uk
*.aviva.com
*.aviva.pl
*.avivaaem.com
*.avivacanada.com
*.avivainsurance.ca
*.avivapartner.ca
*.avivapitchday.ca
*.avivaquebec.com
*.avivatransfer.co.uk
*.broker.aviva.co.uk
*.brokertech.ca
*.cdn.aviva.com
*.cms.aviva.co.uk
*.cms.heritage.aviva.com
*.controlyourpension.com
*.dev-aviva.co.uk
*.dev-aviva.com
*.dev-avivatransfer.co.uk
*.dev-controlyourpension.com
*.dev-erfunding.co.uk
*.dev-myavivaflex.co.uk
*.dev-spotlightrecognition.me
*.dev.quotemehappy.com
*.dev1.dev.generalaccident.com
*.dev1.dev.quotemehappy.com
*.erfunding.co.uk
*.faq.online-insure.com
*.friendslife.co.uk
*.friendslife.com
*.friendsprovident.co.uk
*.generalaccident.com
*.h-dinsurance.ca
*.heritage.aviva.com
*.heritage.dev-aviva.com
*.heritage.pre-aviva.com
*.heritage.rwy-aviva.com
*.heritage.stg-aviva.com
*.heritage.sys-aviva.com
*.login.aviva.com.sg
*.m.avivacanada.com
*.media.aviva.co.uk
*.media.aviva.com
*.myaviva.avivainsurance.ca
*.myavivaflex.co.uk
*.netquotes-preview.qs.aviva.co.uk
*.partnertracking.aviva.co.uk
*.pre-aviva.co.uk
*.pre-aviva.com
*.pre-avivatransfer.co.uk
*.pre-controlyourpension.com
*.pre-erfunding.co.uk
*.pre-myavivaflex.co.uk
*.pre-spotlightrecognition.me
*.prototypes.aviva.com
*.qa.avivadigitalgarage.ca
*.qaavantage.ca
*.qs.aviva.co.uk
*.qs.online-insure.co.uk
*.quotemehappy.com
*.redirects.aviva.co.uk
*.requests.aviva.co.uk
*.rwy-aviva.co.uk
*.rwy-aviva.com
*.rwy-avivatransfer.co.uk
*.rwy-controlyourpension.com
*.rwy-erfunding.co.uk
*.rwy-myavivaflex.co.uk
*.rwy-spotlightrecognition.me
*.services.aviva.co.uk
*.services.aviva.com
*.spotlightrecognition.me
*.standards.aviva.com
*.stg-aviva.co.uk
*.stg-aviva.com
*.stg-avivatransfer.co.uk
*.stg-controlyourpension.com
*.stg-erfunding.co.uk
*.stg-myavivaflex.co.uk
*.stg-spotlightrecognition.me
*.sys-aviva.co.uk
*.sys-aviva.com
*.sys-avivatransfer.co.uk
*.sys-controlyourpension.com
*.sys-erfunding.co.uk
*.sys-myavivaflex.co.uk
*.sys-spotlightrecognition.me
*.test.dev.generalaccident.com
*.test.dev.quotemehappy.com
*.uat.dev.generalaccident.com
*.uat.dev.quotemehappy.com
*.vrtarif.com
prototypes.aviva.com
www.avivahealth-preview.qs.aviva.co.uk
www.direct-aviva-preview.qs.aviva.co.uk

Other certificates including the domain name aviva.co.uk

(limited to 100 certificates)
www.healthpoint.qs.aviva.co.uk
www.aviva-platform.aviva.co.uk
avivaprivacy.uk
www.eserve.avivaservices.co.uk
cert02.uk.aviva.com
www.nationwide.qs.aviva.co.uk
xmlnj.qs.aviva.co.uk
barclayssaml.qs.aviva.co.uk
aviva.co.uk
www.xmlquote.qs.aviva.co.uk
footyfinance.aviva.co.uk
cert03.uk.aviva.com
cert06.uk.aviva.com
avivaprivacy.uk
identitysecure.hsbc.aviva.co.uk
jira-pp.aviva.co.uk
np-cert02.uk.aviva.com
www.insurance.qs.aviva.co.uk
avivaprivacy.uk
cert11.uk.aviva.com
cert03.uk.aviva.com
avivaprivacy.uk
www.direct.aviva.co.uk
www.avivahealth.qs.aviva.co.uk
footyfinance.football
rmdapi1.aviva.co.uk
poet.qs.aviva.co.uk
rmdapi4.aviva.co.uk
cert08.uk.aviva.com
cert01.uk.aviva.com
www.avivahealth.qs.aviva.co.uk
aviva.co.uk
aviva.co.uk
www.selfservice.qs.aviva.co.uk
secure.qs.aviva.co.uk
cert06.uk.aviva.com
aviva.co.uk
www.apb.qs.aviva.co.uk
www.certlogin.aviva.co.uk
www2.wsg.qs.aviva.co.uk
avivaprivacy.uk
aviva.co.uk
cert10.uk.aviva.com
cert06.uk.aviva.com
intquote.aviva.co.uk
rmdapi1.aviva.co.uk
jira.aviva.co.uk
cert10.uk.aviva.com
cert01.tmp.aviva.com
www.ukdi.qs.aviva.co.uk
cert08.uk.aviva.com
cert01.uk.aviva.com
incapsula.com
np-cert02.uk.aviva.com
cert10.uk.aviva.com
www.realitycheckaccount.aviva.co.uk
www.isup.preview.qs.aviva.co.uk
www.apb.qs.aviva.co.uk
intquote.aviva.co.uk
www.insuranceportal-tsbhome-branch.qs.aviva.co.uk
incapsula.com
cert01.uk.aviva.com
avivaprivacy.uk
graduates.aviva.co.uk
incapsula.com
aviva.co.uk
careers.aviva.co.uk
aviva.co.uk
avivaprivacy.uk
referral.aviva.co.uk
cert01.uk.aviva.com
www.wsg.qs.aviva.co.uk
rmdapi2.data.aviva.co.uk
cert08.uk.aviva.com
footyfinance.aviva.co.uk
t.notifications.aviva.co.uk
services.aviva.co.uk
www.quotehc.qs.aviva.co.uk
www.creditor.qs.aviva.co.uk
www.aviva.co.uk
www.hre.qs.aviva.co.uk
www.hsol.qs.aviva.co.uk
uat.aviva.co.uk
aviva.co.uk
www.avivatransfer.co.uk
aviva.co.uk
rmdapi3.aviva.co.uk
hawkeye.qs.aviva.co.uk
incapsula.com
www.mas.qs.aviva.co.uk
www.dsfhe.qs.aviva.co.uk
incapsula.com
mail.aviva.com
cert03.uk.aviva.com
incapsula.com
uat.aviva.co.uk
e-learningportal.at.aviva.com
cert01.tmp.aviva.com
mybusiness.aviva.co.uk
cert05.uk.aviva.com

Certificate

The complete raw certificate details for uat.aviva.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujoRO3cLfd0cUpm6nBj2
Toxeb8Q01D3xxIn0ePj+/cN6j0el1mvWt44Rn3NRUDfQCyEI0PT6uPhjKfQfuoiU
uzx9ZRKpfMpQCmgu3n7YdbPC86Hrx+9chMCdL9wC7nKECUVgJOCGTzK+cIOPTZBj
oEabbjHteko7yJ4BySkacSQOa75PSzj+xH3dC+Qs6b18XW7ohaChOKBKAC08fgZj
sQqa9V7QBWxPeqt5KdJw1gqL1Z7iPvDHPzLJGLAn4DyN31u7oV0yeVfXz6qzfFl6
5BcX6+SMfljp4/y53+jbKEzgtTsv+DnpxWD3DmPD4qo1lnLDY5OqLm86I+zDhtin
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325628588647592513426019447847217177869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EC3P 3DQ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1 Undershaft'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aviva PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by AVIVA CENTRAL SERVICES UK LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Multi-Domain SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat.aviva.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23508958783236071728018797352806215046226803945709031350452646360353888831568434120243004684944114465970950548300177282116195753745901763210256082316326664193648496753002147982243488561895803631308435221028082748517751849269479933235707259132657656585380108420362727166710352897218641370459704413324584577851261987536283142157156059032406001983259188206072123870059176772063014179890046776167910483358637828490358366508632688775965697593660414969201262073755018297638307555328707707794553365406914639722534587698181527116125826159531789504587008943599466705655473565959092679693726009712407791186280751644511380744117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							289e1c67bef33abf1f5b313764f8909a280967a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2339 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admin.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aviva.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaaem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivapartner.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivapitchday.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivaquebec.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brokertech.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cms.heritage.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.quotemehappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev1.dev.generalaccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev1.dev.quotemehappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faq.online-insure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.friendsprovident.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.generalaccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.h-dinsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritage.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritage.dev-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritage.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritage.rwy-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritage.stg-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heritage.sys-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.login.aviva.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.m.avivacanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myaviva.avivainsurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netquotes-preview.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.partnertracking.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prototypes.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.avivadigitalgarage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qaavantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qs.online-insure.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quotemehappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.redirects.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.requests.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rwy-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.services.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.standards.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-controlyourpension.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-erfunding.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sys-spotlightrecognition.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.generalaccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.dev.quotemehappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.dev.generalaccident.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.dev.quotemehappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vrtarif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prototypes.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivahealth-preview.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.direct-aviva-preview.qs.aviva.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bfa00114b0000040300473045022072cddf46ec20c64d966421cea7b436b560762173419f6f6b1353be689df02e7602210089d31ae907f7b8c2588a6f70f0149c8163c930180f2e467c83e420358bfdf4af007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016bfa00116e0000040300473045022100a883e8b751d8464f8db4eeef67b33cb86c35a942edd69c4273b29bd133764d1202204241d64b66ced1f22f4ee45f98167fd1bb3810f13a66bda431b669d6846296f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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