clientlist.qa.safeco.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 13:1e:99:ec:a6:ff:95:3f:88:3e:95:7d:a7:0c:9a:6e was issued on by Entrust, Inc..

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 13:1e:99:ec:a6:ff:95:3f:88:3e:95:7d:a7:0c:9a:6e
Serial Number (int): 25414222783868651004900069714344843886
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 4b:fe:51:9b:03:ba:31:91:35:63:ac:f2:8e:b4:e1:d0:e4:a3:29:bb
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c0:09:c5:37:a1:3f:eb:96:9d:de:5e:dc:e8:05:3b:1c:1f:2e:a6:12
Fingerprint (sha256): 03:6e:a4:8a:9d:18:14:34:e2:0c:7a:61:b2:f1:94:ab:d0:0d:fe:1b:88:df:2a:1f:2b:08:5b:91:2e:07:24:02

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate clientlist.qa.safeco.com

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clientlist.qa.safeco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clientlist.qa.safeco.com
perf-risktrac-leg1.libertymutual.com
perf-risktrac-leg2.libertymutual.com
sak-test.libertymutual.com
test.oneinc-gateway.hydra-crux.libertymutual.com
hold-test-obsc.peerless-ins.com
hold-stage-obsc.libertymutualgroup.com
hold-stage-obsc.peerless-ins.com
test-obsc.ohiocasualty-ins.com
hold-test-obsc.indiana-ins.com
hold-stage-obsc.ohiocasualty-ins.com
test-a-eclaims.safeco.com
staging-eft-enrollment.libertymutual.com
www.dev.lmsafe.co
agency-financials-portal.libertymutual.com
agency-financials-portal-stage.libertymutual.com
test-auto-quote-widget.libertymutual.com
test-partnerservices.libertymutual.com
stage-billinginquiry.libertymutual.com
login-dev.libertymutual.com
test-choice-portal.libertymutual.com
grmus-twilio-media-stream-service-test.libertymutual.com
stage-adp-report.libertymutual.com
login-dev.safeco.com
book-assessment-tool-development.lmig.com
referralprogram-test.libertymutual.com
login-np.safeco.com
stage-bl-identity.libertymutual.com
dev-bl-identity.libertymutual.com
test-fetch.libertymutual.com
test.api.spire.libertymutual.com
test.gpe-hydra-notifications.apac.hydra-crux.libertymutual.com
stage-bl-super-admin-reports.libertymutual.com
test.gpe-generic-payments-page.apac.hydra-crux.libertymutual.com
hold-perf-risktrac.libertymutual.com
hold-stage-agentsportal.libertymutual.com
hold-test-obsc.libertymutualgroup.com
stage-agent-portal-forms.libertymutual.com
test-instruments-hl-us-east-1.libertymutual.com
test-hosted-payments-page-us-east-1.libertymutual.com
dev-libertyplus-cms.libertymutual.com

Other certificates including the domain name safeco.com

(limited to 100 certificates)
ete-claims.safeco.com
www.libertymutual.com
rewind-webservice.safeco.com
ete-claims.safeco.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
libertymutual.myinstantincentives.com
ete-www2.libertymutual.com
billing.safesite.safeco.com
cswebext-pool-03p.libertymutual.com
cla-haps-http-prd.apps.safeco.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
salescompreporting.safeco.com
test-equote.libertymutual.com
search.libertymutual.com
uat-eservice.safeco.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
dev-a-dpec.safeco.com
ete-www2.libertymutual.com
cm-now.agent.safeco.com
ete-www2.libertymutual.com
dev-i-dpec.safeco.com
MVSA.SAFECO.COM
quotes.safeco.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
ltm-dev-a-dpec.safeco.com
ete-pmds.libertymutual.com
www.libertymutual.com
whalebot.libertymutual.com
search.libertymutual.com
libertymutual.myinstantincentives.com
4-internal.us-east-1.non-production.paas.lmig.com
test.aspire.safeco.com
cs-pool-03k.lm.lmig.com
www.libertymutual.com
2pr-realtimedocs.safeco.com
qni-cpa-np.safeco.com
cswebext-pool-02p.libertymutual.com
uat-agencyservicingpreferences.safeco.com
ete-claims.safeco.com
whalebot.libertymutual.com
customer-pf-pdc.safeco.com
www.libertymutual.com
ete-www2.libertymutual.com
perf-www.libertymutualvantageport.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
qa-rpama.safeco.com
msb-prefill.libertyec.com
perf-dpec.safeco.com
1-internal.us-east-1.production.paas.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
ete-www2.libertymutual.com
sip-kdc-03.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-claims.safeco.com
insurance-agent.safeco.com
pcf-WhrmGXwiYi.us-east-1.non-production.lmig.com
dev-c-docupload.safeco.com
vantageporttest.libertymutual.com
agent.safeco.com
cswebext-pool-03p.libertymutual.com
www.libertymutual.com
www.libertymutual.com
dr-spagent.safeco.com
sip-pdc-03.libertymutual.com
legacysafecodocumentloader.safeco.com
libertymutual.myinstantincentives.com
cswebext-pool-02p.libertymutual.com
af.safeco.com
steps.safeco.com
pmds.libertymutual.com
hsp-dev.aws.lmig.com
dev-af2.safeco.com
stage-steps.safeco.com
www.righttrack.safeco.com
uat-dpec.safeco.com
ete-claims.safeco.com
uat-pi-marketservices.libertyec.com
intranet.safeco.com
safesite.qa.safeco.com
dev-i-dpec.safeco.com
cswebext-pool-03p.libertymutual.com
ete-claims.libertymutual.com
search.libertymutual.com
ete-claims.safeco.com
www.libertymutual.com
www.libertymutual.com
test-steps.safeco.com
bps-prd-be.apps.safeco.com
whalebot.libertymutual.com
ltm-test-a-dpec.safeco.com
www.libertymutual.com
billing.safesite.safeco.com
quote.esurance.qa.safeco.com

Certificate

The complete raw certificate details for clientlist.qa.safeco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7N8oULbt3c0EW7ckKgm
YhmnvZg0zKFzL1YM3/5Mvf1/eNIQhoXhEG1gzU7VEyvTOD5vfqWIoQ2J7eOA4WKi
BTKdXWwWsz+52qbR4vcshGRI5rTnLL9FoIPex7AJEEwPz1FmG8TbPszNQ961Q58b
V/DEE1KK8HYO9x9Ahopu0WHyy/PE+JhqZicIr/a0KUF/eKsxNA344TFQufQxaWoZ
xe0IrM+XuA2mHpFcH7g3rgFSrPFeLJBtTFv/xPOsgTNAsiX+tpODzSBQjN/ak8uI
YzYG0QqxDTWPpNQEBxiosDurrXNADuANFP8sCQF2Ml7Arho3MsJZQ/pZM1yex7XM
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25414222783868651004900069714344843886
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 15:34:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 15:34:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clientlist.qa.safeco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20665351966874549446395502838449372275645013149039776747928369538201005182948560177173155602834655895865862397373335626847185651378443022997616567044677930086036925822049978439564161455405243554703497638927978192069255605714557698772936120956549697267414769741441335398402629808836474385798669038917916703577559193781610424942914398207196882227739414556525407771970949513443688695475283846854346086450004726118202995869574987653229341350931926873273921236823865957017530345090802536306988720702723158942572916189371273940544237966341680893654183268146395345443895498444502576847114133042913014293083869075366632344679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bfe519b03ba31913563acf28eb4e1d0e4a329bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientlist.qa.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sak-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.oneinc-gateway.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a-eclaims.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-eft-enrollment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.lmsafe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-financials-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-financials-portal-stage.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auto-quote-widget.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partnerservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-billinginquiry.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-choice-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grmus-twilio-media-stream-service-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-adp-report.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-assessment-tool-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referralprogram-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-np.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fetch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.spire.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gpe-hydra-notifications.apac.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bl-super-admin-reports.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gpe-generic-payments-page.apac.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-perf-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-agent-portal-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-instruments-hl-us-east-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-hosted-payments-page-us-east-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-libertyplus-cms.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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