4-internal.us-east-1.non-production.paas.lmig.com

- Liberty Mutual Group -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 07:e5:bc:79:9d:ee:a9:6d:4c:87:97:93:d3:77:a4:a9 was issued on by DigiCert Inc.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: ETS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:e5:bc:79:9d:ee:a9:6d:4c:87:97:93:d3:77:a4:a9
Serial Number (int): 10497454679589708360449393451068794025
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ca:ae:b5:25:e3:4b:8f:44:67:0f:b5:d0:9d:a5:8d:b8:d6:54:f2:ea
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 25:aa:fc:1b:c0:ae:5e:a2:a0:ff:f5:52:6f:fc:27:29:7e:0c:b2:0f
Fingerprint (sha256): 01:f1:ae:e4:e0:4e:21:25:4c:44:a3:20:d5:46:22:58:bd:51:e8:0d:22:d6:f8:72:21:13:90:60:a9:e9:11:f2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate 4-internal.us-east-1.non-production.paas.lmig.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 4-internal.us-east-1.non-production.paas.lmig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rein-document-services-development.lmig.com
dev-tpd-business-info.lmig.com
ci-envoy-distmkt-dev-store.lmig.com
perf-api.lmrusermanagement.lmig.com
stage-ci-claimsemailprocessor.lmig.com
datacatalog-dev.lmig.com
qa-surety-quote.lmig.com
auto-rental-service-direct-claims.lmig.com
ci-envoy-lmb-perf-retrieve.lmig.com
myevents-dark.lmig.com
mylibertypublisher-test.lmig.com
dev-lmrarcs.lmig.com
hrds-api-dev.lmig.com
GOM-NP.lmig.com
stage-tpd-building-info.lmig.com
ci-envoy-billing-stage-translation.lmig.com
dev-tpd-building-info.lmig.com
dev-ci-paygo-preference-api.lmig.com
dev-mylibertyhome.lmig.com
test-ci-vantageport-context-api.lmig.com
stage-ci-questionapi.lmig.com
ci-envoy-receipt-dev-translation.lmig.com
dev-api.lmr-cms.lmig.com
hrds-portal-dev.lmig.com
gigup-test.lmig.com
ci-style-guide.lmig.com
jarvis.np.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
envoy-ecm-onboarding-dev.lmig.com
gs-envoy-surety-dev-retrieve.lmig.com
eclps-service-log-viewer-dev.lmig.com
delivery-rules-dev.lmig.com
perf-reportaclaim-internal.libertymutual.com
stage-reportaclaim-internal.libertymutual.com
test-reportaclaim-internal.libertymutual.com
dev-reportaclaim-internal.libertymutual.com
test-forwarder-api.lmig.com
dev-forwarder-api.lmig.com
stage-internal-reportaclaim.libertymutual.com
test-internal-reportaclaim.libertymutual.com
dev-internal-reportaclaim.libertymutual.com
dev-acdcportal.lmig.com
test-dsl-ci-prod-pol.lmig.com
dev-dsl-ci-prod-pol.lmig.com
ijustboughtarepo.lmig.com
weconnect-frontend-test.lmig.com
test-landlord-interviews.libertymutual.com
dev-landlord-interviews.libertymutual.com
apmc.lmig.com
weconnect-api-dev.lmig.com
delivery-spreadsheet-import-test.lmig.com
paq-api-dev.lmig.com
paq-api-test.lmig.com
paq-api-staging.lmig.com
dev-detools.lmig.com
dev-security-identity-portal.lmig.com
creativeserviceseval-test.lmig.com
eventappcentral-test.lmig.com
lwlarchive-test.lmig.com
internalcommintake-test.lmig.com
envoy-ui.lmig.com
envoy-ui-dev.lmig.com
cipdemo.lmig.com
agileportfoliobuilder-beta.lmig.com
libertycast.lmig.com
libertycast-test.lmig.com
int-suretydnb.lmig.com
dev-ecliq-system-messages-fe.lmig.com
pitstop.lmig.com
propertystatusdemo.libertymutual.com
dataspy-forge.lmig.com
my-payslip-dev.lmig.com
cs-test.lmig.com

Other certificates including the domain name lmig.com

(limited to 100 certificates)
prod-eu-west-1-alfresco-repo.aws.lmig.com
ete-claims.safeco.com
*.kdc.paas.lmig.com
uram.lmig.com
atlas-services.lmig.com
cerc-ar.lmig.com
testcommercial.lmig.com
dev-fsda.lmig.com
rdc-registry-nprod.lmig.com
*.eu-west-1.np.paas.lmig.com
relativity.lmig.com
kdc-citbi.lmig.com
vmkip-hjss0001.lm.lmig.com
VMPIP-HSIWAE01.lm.lmig.com
requestit.lmig.com
vmkit-a4swb001.lm.lmig.com
statuspage.io
lm-pmmstgy-d01k.lm.lmig.com
*.app-severless.rancher.sandbox.aws.lmig.com
dev-ap-southeast-2-gs-alfresco-52-saml.aws.lmig.com
www.libertymutual.com
omni-messaging.us-east-1.lmig.com
dial-auditlog-retention.lmig.com
vx-eatknas-p02k.lmig.com.lmig.com
ispoappskdc.lmig.com
ci-envoy-reins-search.lmig.com
ete-claims.safeco.com
85a-sseaesdm1.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
aep-lm-soap-client-invoker.production.us-east-1.aws.lmig.com
amcontactcenter.lmig.com
*.aws.lmig.com
uscm-sasgrid-web.lmig.com
compassdocuments.lmig.com
vxpip-hhspds01.lmig.com
PeopleAtLiberty.com
lmpproducerextranet.lmig.com
lm-ise-psn.lmig.com
test-pmsrc.lmig.com
testAvayaDev.lmig.com
statuspage.io
pfet02k03.lmig.com
cmpsccosrv.lmig.com
lcpet-havsbc01-inside.lmig.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
test-import.lmig.com
eip.lmig.com
lmpin-hcybrk02-r.lmig.com
vm-ceg-prd2-1.azr.lmig.com
0055-blox-ext-grid.lmig.com
ete-www2.libertymutual.com
dr-sslvpn-kc.lmig.com
perf-driverrisk.cf.reuse.lmig.com
denodo-solution-manager-non-production.aws.lmig.com
vckit-haespc02.lmig.com
ecr-nocustids-kdc.lmig.com
lsm-fred.lmig.com
comp3-ui.aws.lmig.com
perfandcompstatement.lmig.com
snd-ciapstableau.aws.lmig.com
puma.lmig.com
logging-old.datahub.aws.lmig.com
test-securefile.libertymutual.com
dev-compworkq-cmis.lmig.com
gateway-client.cf.reuse.lmig.com
vendors.test.wem.gde.aws.lmig.com
vxkip-pwaslp05.lmig.com
api.eco-development.lmig.com
pmit-easysuite.lmig.com
cs-tappool-03p.lm.lmig.com
gw-gde-equifax-service.test.wem.gde.aws.lmig.com
0038-sbc-ext-01.lmig.com
lm-hscyrkp-p01p.lm.lmig.com
lmb-datalake-zeppelin-prod.aws.lmig.com
contracts-portal.lmig.com
clworkbench-ws.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
LM-HS-LTAS-A-T01P.LMIG.COM
2pr-rpama.lmig.com
vxpif-p7fsa002.lmig.com
b2b-boomi-batch-kc.lmig.com
wcsvtrigger.lmig.com
vmpip-m566u5fh.lm.lmig.com
bp1054598.saagie.com
vmkip-hvcvdi22.lm.lmig.com
ci-envoy-ppuw-stage-translation.lmig.com
sit-eu-west-1-gs-alfresco.aws.lmig.com
inspire-interactive.development.aws.lmig.com
dev-iam-console.lmig.com
vckip-hcmad201.lmig.com
leservices-imp.lmig.com
ciim-claims-service-test.np.lmig.com
perf-www.liucanada.com
statuspage.io
smart-workflow-rules.lmig.com
grs-informatica-mdm-aws-production.aws.lmig.com
prod-b-us-east-1-ci-alfresco-ingest-share.aws.lmig.com
vmpip-hcypvw03.lm.lmig.com
brmspolicy-uat.libertyinsurance.in

Certificate

The complete raw certificate details for 4-internal.us-east-1.non-production.paas.lmig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeqcMwGIUkdWS5Ra780v
9krjmK8QATrktGOt4ytAI/PJ3GOMT+lFcEX4BOY/J3bxptFKIFvSXUd0pbWUioEB
p4IZ0GpxSLC0rSy7nHSBBVAX8wcXM4fmLRnUxH5LEmqu4r4YnYkMLYmoLps9rqA8
XkgZlhT5yNgSMzz7MGmItHDcZV8nAsTAwG9vKMRf7sEsxvjYdG0Qn2C2NIa3W4qk
XNtBuQrJnFp7PqNNJwOftGXWqyDGtzx704dLBLeYRMOyVf28YdkbYSxukDxlDYtM
BPcJSPj8Dz7xFRkfrreUd2Dus/O5hASAX1YS6r99tE4t173ZmlXTBPv3FjI3sPrV
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10497454679589708360449393451068794025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ETS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4-internal.us-east-1.non-production.paas.lmig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20945010897833675013034636347558743293721761598277608770135297019535130448617529730351121275540861894099583134885738709978189637106006230490044028039871834611691610202278975499963514774119100161989732453177346616277854812476344332408939451807134484218150150971270921874257102812402078516648201167201441391063122620177351436682785089604837742803174928440959094008713152617985421396531047465804438974317756032870019779295705360892327641623041499578747408421714033292101963537712637445199524169281130464549844060391735956713854099109463419422496710559753423724295990117857235975491482359525513055925090047250359821980951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							caaeb525e34b8f44670fb5d09da58db8d654f2ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2342 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rein-document-services-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tpd-business-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-distmkt-dev-store.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-api.lmrusermanagement.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ci-claimsemailprocessor.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacatalog-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-surety-quote.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-rental-service-direct-claims.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-lmb-perf-retrieve.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myevents-dark.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertypublisher-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lmrarcs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrds-api-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GOM-NP.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-tpd-building-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-billing-stage-translation.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-tpd-building-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ci-paygo-preference-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-mylibertyhome.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ci-vantageport-context-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ci-questionapi.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-receipt-dev-translation.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-api.lmr-cms.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrds-portal-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigup-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-style-guide.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jarvis.np.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4-internal.us-east-1.non-production.paas.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoy-ecm-onboarding-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gs-envoy-surety-dev-retrieve.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclps-service-log-viewer-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-rules-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-reportaclaim-internal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-reportaclaim-internal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-reportaclaim-internal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-reportaclaim-internal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-forwarder-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-forwarder-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-internal-reportaclaim.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-internal-reportaclaim.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-internal-reportaclaim.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-acdcportal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dsl-ci-prod-pol.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-dsl-ci-prod-pol.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ijustboughtarepo.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weconnect-frontend-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-landlord-interviews.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-landlord-interviews.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apmc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weconnect-api-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-spreadsheet-import-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paq-api-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paq-api-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paq-api-staging.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-detools.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-security-identity-portal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativeserviceseval-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventappcentral-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwlarchive-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internalcommintake-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoy-ui.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoy-ui-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cipdemo.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agileportfoliobuilder-beta.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycast.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycast-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-suretydnb.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ecliq-system-messages-fe.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pitstop.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propertystatusdemo.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataspy-forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-payslip-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-test.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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