perf-www.liucanada.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 49:40:31:44:11:dc:e2:36:62:bb:58:e9:ff:d5:2c:e2 was issued on by Entrust, Inc..

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 49:40:31:44:11:dc:e2:36:62:bb:58:e9:ff:d5:2c:e2
Serial Number (int): 97366949922358994697371367847132212450
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: dc:b3:3b:b3:9c:d1:41:6a:be:ab:fc:31:7c:71:5b:f3:cb:46:db:3d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6c:ab:f2:5d:3b:17:b9:f7:67:1d:94:4e:23:91:2e:5e:d1:d9:28:65
Fingerprint (sha256): 00:f0:4a:2f:7a:e6:d4:85:5c:ed:2b:e4:7e:90:be:d1:cb:00:e5:4c:d0:14:ff:24:ef:a0:ea:a5:c4:c2:85:fd

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate perf-www.liucanada.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf-www.liucanada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf-www.liucanada.com
icomp-np.eberlevivian.com
manuscript-dev.lmig.com
auth0-ecr-poc.lmauth.com
passport-test.lmig.com
perf-agents.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-qi.libertymutualsurety.com
perf-www.ae-libertyiu.com
perf-www.liu-usa.com
perf-www.lms.ae-libertyiu.com
ps-bfl.libertymutualsurety.com
ps-qi.libertymutualsurety.com
qa-qi.libertymutualsurety.com
qa-qiservicing.libertymutualsurety.com
test.primerofianzas.info
uat-www.liu-latinamerica.com
uat.liu-eil.com
uat.liucargo.com
dev2-lfanalytics.aws.lmig.com
uat-agents.libertymutualsurety.com
dev-www.liuquote.com
test-mstr.libertyfianzas.com
test-www.libertyfianzas.com
staging.helmsmantpa.com
test.helmsmantpa.com
unqork-ironshore.lmig.com
archivus.lmig.com
dev-marinecargo.liuquote.com
DEV.liuquote.com
DEV-libertycargo.liuquote.com
uat.libertyquote.ca
dev.eventsatlibertymutual.com
DEV.libertyquote.com.au
dev.libertycargo.com.au
csobooking-develop.lmig.com
csobooking-staging.lmig.com
dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
globalclaimcenter-batch-sit1-cloud.lmig.com
tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
dev-sofia.libertyfianzas.com
uat-wcclaims.iso.lmig.com
sit.libertymutualcargo.com
perf-wcclaims.iso.lmig.com
globalclaimcenter-batch-uat-cloud.lmig.com
dev.libertymutualprovidersupport.com
test-surety-ip-bie-intake.lmig.com
dev-serf.aws.libertyfianzas.com
test-icasemanager-ext-ping.lmig.com
hold-test-icasemanagersecure.libertymutual.com
UAT-Cloud.libertymutualcargo.com
devnaymu.libertymutual.com
authorization-policy-api-development.lmig.com
testnaymu.libertymutual.com
authorization-policy-api-test.lmig.com
test-serf.aws.libertyfianzas.com
test-www.borgonline.nl
grs-lsm-auth0-external-web-site.lmig.com
testing.libertyspecialtymarkets.com.au
test-validador.libertyfianzas.com
www.test-contratafianza.libertyfianzas.com
sit-www.libertylink.co.uk
staging-seguro-garantia.libertyseguros.com.br
test-cotizador.libertyfianzas.com
staging-agents.libertymutualsurety.com
grs-portal-redirect-staging.libertymutual.com
staging-enroll.libertymutualsurety.com
uat-agents-surety.libertymutual.com
testing.libertyspecialtymarketsap.com
tst-enroll.libertymutualsurety.com
authorization-policy-api-training.lmig.com
csobooking-development.lmig.com
auth0.libertymutual.com
test.review.id3e.lmig.com
testassets.libertyspecialtymarkets.com
dev.review.id3e.lmig.com
np-venti-console.lmig.com
test.libertyfianzas.com
test-serf-login.libertyfianzas.com
ibnr-development.lmig.com
ibnr-test.lmig.com
b2b-usmarine-sit.liuquote.com
fcr-dat-dev.lmig.com
b2b-usmarine-uat.liuquote.com
imap-dev.lmig.com
cauat.liupal.com
orcauat.liuquote.com
usuat.liucargo.com
test-sofia.libertyfianzas.com
fluid-pre-production.lmig.com
hold-perf-demo-risktrac.libertymutual.com

Other certificates including the domain name liucanada.com

(limited to 100 certificates)
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
tst-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
tst-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for perf-www.liucanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SPkwERsG2EdVVtKiADF
dre1vU8O3iEwQ5kWusZdWuizi2EbRcsJ0J2COSI/9T1wQmuFpKbBIkX6ywqKMQXs
lrrSRQWlRR5zTacUSEzxUPbX2P9741kBBiT6oNWlUy3OOHq2pwCG22luaZVf2JO5
HjYiSC+JUBlgKeVOisAIbXgU+3F/ZYup3huVR/RaFy3vtUs4uwTlhNdRV9+3lS+8
C2kw2jXn3cEWkyGZgBXexn/11PYNuWxzP48uO1dGezzV4q1uHebrGgcDbDkeV+7P
Ugtu3UWmdKS/h3F12SRdjysskcv+iZHpezqMJukpWkByh4w9fogDoN1JdfsSKPJY
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97366949922358994697371367847132212450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 02:54:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-01 02:54:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf-www.liucanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28926271610734426442096624259041515986486320606589664168098894828958637365412594966771169899412794214599659080692133124906209081225304898433632809274172756388962915251855373266873641857889275975620490592521504426115201512027196929704520393869330430218905807660289358902823746579401324935011521825628466155334990876508058860175786735518513842854749992150712068104456266180047565676258214565653937745323901068461126289181719176743579002748628756380199460366220743856491571492546847113845769862343236249387019451089353530842840344681683513699219759048674801370159553767518374053330242267316579708321922942049769372145761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcb33bb39cd1416abeabfc317c715bf3cb46db3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2882 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icomp-np.eberlevivian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuscript-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth0-ecr-poc.lmauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mstr.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unqork-ironshore.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivus.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-marinecargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV-libertycargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.libertyquote.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eventsatlibertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csobooking-develop.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csobooking-staging.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-sit1-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-sofia.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-uat-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-icasemanager-ext-ping.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UAT-Cloud.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-lsm-auth0-external-web-site.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-validador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-www.libertylink.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-portal-redirect-staging.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents-surety.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-training.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csobooking-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth0.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testassets.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-venti-console.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf-login.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnr-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnr-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-usmarine-sit.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcr-dat-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-usmarine-uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cauat.liupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orcauat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usuat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-sofia.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluid-pre-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-perf-demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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