perf-www.liucanada.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 43:3b:d0:6b:b2:e9:35:d7:b9:6b:ee:8d:a1:ae:2b:40 was issued on by Entrust, Inc..

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 43:3b:d0:6b:b2:e9:35:d7:b9:6b:ee:8d:a1:ae:2b:40
Serial Number (int): 89368848506224132617374909640739793728
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 44:1f:da:b6:ed:93:d4:e3:33:e1:75:67:c3:c3:9a:e7:38:20:03:10
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 6f:68:08:8f:4d:f8:eb:7d:c8:49:60:c7:47:51:c7:40:70:ea:04:f4
Fingerprint (sha256): 01:48:f9:7d:aa:c6:38:bd:36:01:87:9e:f2:73:6a:59:8d:f5:36:c8:82:c4:b0:a9:6a:82:c8:ef:db:bc:06:cf

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate perf-www.liucanada.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf-www.liucanada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf-www.liucanada.com
passport-test.lmig.com
perf-agents.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-qi.libertymutualsurety.com
perf-www.ae-libertyiu.com
perf-www.liu-usa.com
perf-www.lms.ae-libertyiu.com
ps-bfl.libertymutualsurety.com
ps-qi.libertymutualsurety.com
qa-qi.libertymutualsurety.com
qa-qiservicing.libertymutualsurety.com
test.primerofianzas.info
uat-www.liu-latinamerica.com
uat.liu-eil.com
uat.liucargo.com
dev2-lfanalytics.aws.lmig.com
uat-agents.libertymutualsurety.com
dev-www.liuquote.com
test-mstr.libertyfianzas.com
test-www.libertyfianzas.com
staging.helmsmantpa.com
test.helmsmantpa.com
unqork-ironshore.lmig.com
archivus.lmig.com
dev-marinecargo.liuquote.com
DEV.liuquote.com
DEV-libertycargo.liuquote.com
uat.libertyquote.ca
dev.eventsatlibertymutual.com
DEV.libertyquote.com.au
dev.libertycargo.com.au
dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
globalclaimcenter-batch-sit1-cloud.lmig.com
tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
uat-wcclaims.iso.lmig.com
sit.libertymutualcargo.com
perf-wcclaims.iso.lmig.com
globalclaimcenter-batch-uat-cloud.lmig.com
dev.libertymutualprovidersupport.com
test-surety-ip-bie-intake.lmig.com
dev-serf.aws.libertyfianzas.com
test-icasemanager-ext-ping.lmig.com
hold-test-icasemanagersecure.libertymutual.com
UAT-Cloud.libertymutualcargo.com
devnaymu.libertymutual.com
authorization-policy-api-development.lmig.com
testnaymu.libertymutual.com
authorization-policy-api-test.lmig.com
test-serf.aws.libertyfianzas.com
test-www.borgonline.nl
grs-lsm-auth0-external-web-site.lmig.com
test-validador.libertyfianzas.com
suretyclaimsportal-test.aws.lmig.com
www.test-contratafianza.libertyfianzas.com
sit-www.libertylink.co.uk
staging-seguro-garantia.libertyseguros.com.br
test-cotizador.libertyfianzas.com
staging-agents.libertymutualsurety.com
staging-enroll.libertymutualsurety.com
uat-agents-surety.libertymutual.com
testing.libertyspecialtymarketsap.com
tst-enroll.libertymutualsurety.com
authorization-policy-api-training.lmig.com
auth0.libertymutual.com
test.review.id3e.lmig.com
dev.review.id3e.lmig.com
np-venti-console.lmig.com
test.libertyfianzas.com
test-serf-login.libertyfianzas.com
ibnr-development.lmig.com
ibnr-test.lmig.com

Other certificates including the domain name liucanada.com

(limited to 100 certificates)
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
tst-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
tst-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for perf-www.liucanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOZzCCDU+gAwIBAgIQQzvQa7LpNde5a+6Noa4rQDANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MzA1MzAxODE2NDNaFw0yNDA2MzAxODE2NDNaMHoxCzAJBgNVBAYTAlVTMRYwFAYD
VQQIEw1OZXcgSGFtcHNoaXJlMRMwEQYDVQQHEwpQb3J0c21vdXRoMR0wGwYDVQQK
ExRMaWJlcnR5IE11dHVhbCBHcm91cDEfMB0GA1UEAxMWcGVyZi13d3cubGl1Y2Fu
YWRhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANZrm1C+GiZF
zwWq4rxUBmyAlNuc374D4B1JPZrsqAStaNaiobuCmLIvhaGDS/JBuREEpt9ATTzp
0P8jKgVVkyThX7kqCvZv5uQXuaM7aIjIQ9FdzantI7Zhod3/j49l087YbBnRcppD
xXac8BFnbbrWOgr+C2cub1osqhQV2+Rscf9J6/PbeU1szYnoZIKVjDTZ6BBX2NOl
UcCC3SzyyW9UTwc/FM+jqs3AkmJsC2IZ9Fty5+UanJ6+ULP8265zqSYnqo0Ibc2A
P787OX3z337S5sBPyMqsK+UgI/4yNf3GClIZ5gkPqllcyCxqzs6Pox67kA4IYPH9
NYSKzvseek8CAwEAAaOCCqYwggqiMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFEQf
2rbtk9TjM+F1Z8PDmuc4IAMQMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DG
Cky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50
cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFr
LWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1
c3QubmV0L2xldmVsMWsuY3JsMIIJHwYDVR0RBIIJFjCCCRKCFnBlcmYtd3d3Lmxp
dWNhbmFkYS5jb22CFnBhc3Nwb3J0LXRlc3QubG1pZy5jb22CI3BlcmYtYWdlbnRz
LmxpYmVydHltdXR1YWxzdXJldHkuY29tgiBwZXJmLWJmbC5saWJlcnR5bXV0dWFs
c3VyZXR5LmNvbYIfcGVyZi1xaS5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIZcGVy
Zi13d3cuYWUtbGliZXJ0eWl1LmNvbYIUcGVyZi13d3cubGl1LXVzYS5jb22CHXBl
cmYtd3d3Lmxtcy5hZS1saWJlcnR5aXUuY29tgh5wcy1iZmwubGliZXJ0eW11dHVh
bHN1cmV0eS5jb22CHXBzLXFpLmxpYmVydHltdXR1YWxzdXJldHkuY29tgh1xYS1x
aS5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYImcWEtcWlzZXJ2aWNpbmcubGliZXJ0
eW11dHVhbHN1cmV0eS5jb22CGHRlc3QucHJpbWVyb2ZpYW56YXMuaW5mb4IcdWF0
LXd3dy5saXUtbGF0aW5hbWVyaWNhLmNvbYIPdWF0LmxpdS1laWwuY29tghB1YXQu
bGl1Y2FyZ28uY29tgh1kZXYyLWxmYW5hbHl0aWNzLmF3cy5sbWlnLmNvbYIidWF0
LWFnZW50cy5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIUZGV2LXd3dy5saXVxdW90
ZS5jb22CHHRlc3QtbXN0ci5saWJlcnR5Zmlhbnphcy5jb22CG3Rlc3Qtd3d3Lmxp
YmVydHlmaWFuemFzLmNvbYIXc3RhZ2luZy5oZWxtc21hbnRwYS5jb22CFHRlc3Qu
aGVsbXNtYW50cGEuY29tghl1bnFvcmstaXJvbnNob3JlLmxtaWcuY29tghFhcmNo
aXZ1cy5sbWlnLmNvbYIcZGV2LW1hcmluZWNhcmdvLmxpdXF1b3RlLmNvbYIQREVW
LmxpdXF1b3RlLmNvbYIdREVWLWxpYmVydHljYXJnby5saXVxdW90ZS5jb22CE3Vh
dC5saWJlcnR5cXVvdGUuY2GCHWRldi5ldmVudHNhdGxpYmVydHltdXR1YWwuY29t
ghdERVYubGliZXJ0eXF1b3RlLmNvbS5hdYIXZGV2LmxpYmVydHljYXJnby5jb20u
YXWCPWRldi1zdXJldHktdXMtZWFzdC0xLnN1cmV0eS1hdXRoMC1wb2xpY3ktc2Vy
dmljZS5hd3MubG1pZy5jb22CK2dsb2JhbGNsYWltY2VudGVyLWJhdGNoLXNpdDEt
Y2xvdWQubG1pZy5jb22CPXRzdC1zdXJldHktdXMtZWFzdC0xLnN1cmV0eS1hdXRo
MC1wb2xpY3ktc2VydmljZS5hd3MubG1pZy5jb22CGXVhdC13Y2NsYWltcy5pc28u
bG1pZy5jb22CGnNpdC5saWJlcnR5bXV0dWFsY2FyZ28uY29tghpwZXJmLXdjY2xh
aW1zLmlzby5sbWlnLmNvbYIqZ2xvYmFsY2xhaW1jZW50ZXItYmF0Y2gtdWF0LWNs
b3VkLmxtaWcuY29tgiRkZXYubGliZXJ0eW11dHVhbHByb3ZpZGVyc3VwcG9ydC5j
b22CInRlc3Qtc3VyZXR5LWlwLWJpZS1pbnRha2UubG1pZy5jb22CH2Rldi1zZXJm
LmF3cy5saWJlcnR5Zmlhbnphcy5jb22CI3Rlc3QtaWNhc2VtYW5hZ2VyLWV4dC1w
aW5nLmxtaWcuY29tgi5ob2xkLXRlc3QtaWNhc2VtYW5hZ2Vyc2VjdXJlLmxpYmVy
dHltdXR1YWwuY29tgiBVQVQtQ2xvdWQubGliZXJ0eW11dHVhbGNhcmdvLmNvbYIa
ZGV2bmF5bXUubGliZXJ0eW11dHVhbC5jb22CLWF1dGhvcml6YXRpb24tcG9saWN5
LWFwaS1kZXZlbG9wbWVudC5sbWlnLmNvbYIbdGVzdG5heW11LmxpYmVydHltdXR1
YWwuY29tgiZhdXRob3JpemF0aW9uLXBvbGljeS1hcGktdGVzdC5sbWlnLmNvbYIg
dGVzdC1zZXJmLmF3cy5saWJlcnR5Zmlhbnphcy5jb22CFnRlc3Qtd3d3LmJvcmdv
bmxpbmUubmyCKGdycy1sc20tYXV0aDAtZXh0ZXJuYWwtd2ViLXNpdGUubG1pZy5j
b22CIXRlc3QtdmFsaWRhZG9yLmxpYmVydHlmaWFuemFzLmNvbYIkc3VyZXR5Y2xh
aW1zcG9ydGFsLXRlc3QuYXdzLmxtaWcuY29tgip3d3cudGVzdC1jb250cmF0YWZp
YW56YS5saWJlcnR5Zmlhbnphcy5jb22CGXNpdC13d3cubGliZXJ0eWxpbmsuY28u
dWuCLXN0YWdpbmctc2VndXJvLWdhcmFudGlhLmxpYmVydHlzZWd1cm9zLmNvbS5i
coIhdGVzdC1jb3RpemFkb3IubGliZXJ0eWZpYW56YXMuY29tgiZzdGFnaW5nLWFn
ZW50cy5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYImc3RhZ2luZy1lbnJvbGwubGli
ZXJ0eW11dHVhbHN1cmV0eS5jb22CI3VhdC1hZ2VudHMtc3VyZXR5LmxpYmVydHlt
dXR1YWwuY29tgiV0ZXN0aW5nLmxpYmVydHlzcGVjaWFsdHltYXJrZXRzYXAuY29t
giJ0c3QtZW5yb2xsLmxpYmVydHltdXR1YWxzdXJldHkuY29tgiphdXRob3JpemF0
aW9uLXBvbGljeS1hcGktdHJhaW5pbmcubG1pZy5jb22CF2F1dGgwLmxpYmVydHlt
dXR1YWwuY29tghl0ZXN0LnJldmlldy5pZDNlLmxtaWcuY29tghhkZXYucmV2aWV3
LmlkM2UubG1pZy5jb22CGW5wLXZlbnRpLWNvbnNvbGUubG1pZy5jb22CF3Rlc3Qu
bGliZXJ0eWZpYW56YXMuY29tgiJ0ZXN0LXNlcmYtbG9naW4ubGliZXJ0eWZpYW56
YXMuY29tghlpYm5yLWRldmVsb3BtZW50LmxtaWcuY29tghJpYm5yLXRlc3QubG1p
Zy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjBMBgNVHSAERTBDMDcGCmCGSAGG+mwKAQUwKTAnBggrBgEFBQcCARYbaHR0
cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjATBgorBgEEAdZ5AgQD
AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyNGcnQdYguauibXfiKXCWfHnRy1
CuQMIHyGLJXQL7glZgi5iwGvoZ5tswWI8X0Sr9tScPbY9TocbRYEDNic9a3J3sd8
VVib9vlnt0IcckT4nuMrOuJExKnfzhoT2fX+aWOlin3WLBOgVw1fozOg9zUufzT5
zPJxplFCLSaF3GKbt9STwP4ezBubnylX0OBAXe7mcYusGGztxpvKJhZnV1+BEL7q
V/N82SHmeqY39maGkXznBVSS4A1PT9YaNTaBeucvFmw6dcmAPoTQKhd5LvXEsBjx
YTpNnDbd8J+rNOr6tr2t+NhOh2mtYn8rfO/q6Vzu3vubX4drUvEvEl1hEQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mubUL4aJkXPBarivFQG
bICU25zfvgPgHUk9muyoBK1o1qKhu4KYsi+FoYNL8kG5EQSm30BNPOnQ/yMqBVWT
JOFfuSoK9m/m5Be5oztoiMhD0V3Nqe0jtmGh3f+Pj2XTzthsGdFymkPFdpzwEWdt
utY6Cv4LZy5vWiyqFBXb5Gxx/0nr89t5TWzNiehkgpWMNNnoEFfY06VRwILdLPLJ
b1RPBz8Uz6OqzcCSYmwLYhn0W3Ln5Rqcnr5Qs/zbrnOpJieqjQhtzYA/vzs5ffPf
ftLmwE/Iyqwr5SAj/jI1/cYKUhnmCQ+qWVzILGrOzo+jHruQDghg8f01hIrO+x56
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89368848506224132617374909640739793728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 18:16:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 18:16:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf-www.liucanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27068060104572381569035636339999591971554568442439367320743993554624166761285655826650668139985577133579810678219073696755473217857856790369693576364698257872628959634181233420443980123191147139846380483381918355748888871127392765102835297754520792271261517784612971821107398093599132201422529132764345080772819400880284361726672144958366010450856528552604463750863390385303208348317617911022238018482308781597347951311301228989960814351325804095493814431591137099005051110255452882846333027786286476162089871159651445839408032915940723586556984441178670763282569763112968057520016968716377783066045657501060294408783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							441fdab6ed93d4e333e17567c3c39ae738200310
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mstr.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unqork-ironshore.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivus.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-marinecargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV-libertycargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.libertyquote.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eventsatlibertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-sit1-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-uat-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-icasemanager-ext-ping.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UAT-Cloud.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-lsm-auth0-external-web-site.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-validador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suretyclaimsportal-test.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-www.libertylink.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents-surety.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-training.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth0.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-venti-console.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf-login.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnr-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnr-test.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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