test-equote.libertymutual.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 63:cc:da:ad:21:69:1f:bf:00:00:00:00:50:f3:7a:19 was issued on by Entrust, Inc..

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRM US
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:cc:da:ad:21:69:1f:bf:00:00:00:00:50:f3:7a:19
Serial Number (int): 132657235423953579737432954772944812569
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 20:97:9b:ee:f9:15:b8:7b:75:a9:5a:e1:31:32:a3:8e:1a:17:5c:95
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 79:26:b4:4a:d8:ca:fb:e3:dc:b1:54:4c:54:fa:c3:f4:06:6c:aa:1f
Fingerprint (sha256): 02:31:e2:37:23:02:25:05:44:6d:1e:84:26:f3:38:cf:74:6f:8f:ff:87:3d:ab:a9:13:4b:95:a2:b8:17:25:da

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate test-equote.libertymutual.com

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-equote.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-equote.libertymutual.com
benefitscoach-nonprod.libertymutual.com
bookme-np.libertymutual.com
dev-af1.libertymutual.com
dev-af2.libertymutual.com
esales-test.np-lmb.libertymutual.com
notifications.np-lmb.libertymutual.com
perf-app.lmcissobrokerdc2.libertymutual.com
perf-auth.lmcissobrokerdc2.libertymutual.com
perf-cibilldocuments.libertymutual.com
perf-cp.lmcissobrokerdc2.libertymutual.com
perf-demo-risktrac.libertymutual.com
perf-lifemadeeasy.libertymutual.com
perf-mylifemadeeasy.libertymutual.com
perf-risktracdocs.libertymutual.com
perf-riskvue.libertymutual.com
perf-saml-apptraxx.libertymutual.com
perf-saml.lmcissobrokerdc2.libertymutual.com
prf-notifications.np-lmb.libertymutual.com
stage-equote.libertymutual.com
stage-spsui.americafirst-ins.com
stage-spsui.coloradocasualty-ins.com
stage-spsui.goldeneagle-ins.com
stage-spsui.indiana-ins.com
stage-spsui.libertymutual.com
stage-spsui.libertymutualgroup.com
stage-spsui.libertynorthwest-ins.com
stage-spsui.montgomery-ins.com
stage-spsui.ohiocasualty-ins.com
stage-spsui.peerless-ins.com
stage-spsui.safeco.com
test-a-saml-lifeips.libertymutual.com
test-af1.libertymutual.com
test-af2.libertymutual.com
test-analytics.libertymutual.com
test-app.lmcissobrokerdc1.libertymutual.com
test-auth.lmcissobrokerdc1.libertymutual.com
test-cp.lmcissobrokerdc1.libertymutual.com
test-ereport.libertymutual.com
test-icasemanagersecure.libertymutual.com
mypassword-pilot-test.lmig.com
fusionrestapiapp-test.libertymutualgroup.com
test-developers.libertymutual.com
hold-risktracresources.libertymutual.com
testfileaccess.lmig.com
emmtest.lmig.com
givingreport-test.libertymutualgroup.com
dev-secrets-management-slackbot.libertymutual.com
test-secrets-management-slackbot.libertymutual.com
test.libertymutualbrand.com
hotelr-staging.libertymutual.com
datahub-listener-np.libertymutual.com
test-relativity.libertymutual.com
access-test.libertymutual.com
emergencyportal-dev.lmig.com
emergencyportal-test.lmig.com
ssa-dev-idp.lmig.com
whatsyourpursuit-test.libertymutualgroup.com
www-test-stage.libertymutualgroup.com
test-torchbearers.libertymutual.com
boardofdirectors-test.libertymutualgroup.com
www-test.libertymutualgroup.com
uat-search.libertymutualgroup.com
uat-risktracresources.libertymutual.com
tstextecollaborate.lmig.com
test.lmi.co
test.lmemergencyportal.com
test.emergencyportal.libertymutual.com
test-www.lmglogos.com
test-www.lmemergencyportal.com
test-tuitionreimbursement.libertymutual.com
test-travelportal.libertymutual.com
test-servewithliberty.libertymutual.com
test-realestateatliberty.libertymutual.com
test-pcf-ext.libertymutual.com
test-partnercomm.libertymutual.com
test-myworkplacerequests.libertymutual.com
test-mytoken.libertymutual.com
test-mycareerdevelopmentcenter.libertymutual.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for test-equote.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm9gc7AmdhREUjBLbvGf
nyeHLugs1OGhf9738fH1kCac9ZmWl0fQ+cmfOrTlUA4w/mcjtuqrYeairGF28yIM
2jJLqX2qRHi2JPpX+wnAB2datAfhK9col4nJHJVfwL3QC+eSgXW1yAfSdqLpQRwx
5a11e1M6HlWrAfJbFB2xtAJuJpq5fauvxCsLqAtW9O2trM/ZYDVAb4/C4nS5tr1i
bc8Y4tipAxSblFwslaJ5Y0mltejSNj+yZPn0QaieicxKB26KB09QjmkvJnSgScXg
1v5juLAcEU3O5sgoK+DxekBVA96cqxPuOC/35MAglwH34jXZPXxEx/NLvTzd7xV/
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132657235423953579737432954772944812569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 11:49:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 12:19:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRM US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-equote.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24545153093333495663357588967369380011544990289147896764139633426601404927931958733940690106520172976485641426659191868107698435400467156305529594806263244762732326997009302818703947747201293459796682971569957761316221413881729693575272892429669930478038124848186368467071672813610581782712841666303630252334352426132810063419832959444398828898612515162444289606073786693388001450080516603350609826986573829995419452863430818529600714440442712464405894973056491516863720007436441100248860536540046653671556464109488700826569799084762129895937965683399312268815393371428662774025113772440220726232629028225073091542853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2850 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-equote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitscoach-nonprod.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookme-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-af1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-af2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esales-test.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-app.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-auth.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-cp.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-lifemadeeasy.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-mylifemadeeasy.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktracdocs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-riskvue.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-saml-apptraxx.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-saml.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prf-notifications.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-equote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a-saml-lifeips.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-analytics.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-app.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auth.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cp.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ereport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypassword-pilot-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionrestapiapp-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-developers.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-risktracresources.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testfileaccess.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emmtest.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingreport-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-secrets-management-slackbot.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-secrets-management-slackbot.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertymutualbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelr-staging.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahub-listener-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-relativity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyportal-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyportal-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssa-dev-idp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsyourpursuit-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test-stage.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-torchbearers.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardofdirectors-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-search.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-risktracresources.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstextecollaborate.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lmemergencyportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.emergencyportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.lmglogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.lmemergencyportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-tuitionreimbursement.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-travelportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-servewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-realestateatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-pcf-ext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partnercomm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-myworkplacerequests.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mytoken.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mycareerdevelopmentcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20979beef915b87b75a95ae13132a38e1a175c95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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