dev.lmemergencyportal.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0a:f0:5d:14:4d:ea:c1:21:00:00:00:00:50:f3:58:23 was issued on by Entrust, Inc..

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Corp
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f0:5d:14:4d:ea:c1:21:00:00:00:00:50:f3:58:23
Serial Number (int): 14540319076668053674028710481053833251
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a1:66:5c:95:3c:e4:a3:75:e2:22:cc:4e:c7:b1:58:71:a1:60:4a:77
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 02:8e:22:de:60:bf:f8:66:2e:9f:13:04:ef:7e:28:7b:86:79:5f:31
Fingerprint (sha256): 04:43:75:33:a5:a4:a3:bc:39:64:4e:cb:b4:81:2c:f0:f0:1c:30:44:88:8b:c1:93:f4:2f:ac:b6:19:38:2d:1d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate dev.lmemergencyportal.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.lmemergencyportal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-apis.ap-southeast-1.libertymutual.com
test-lmidp.libertymutual.com
test-libertypac.libertymutual.com
test-legallibrary.libertymutual.com
test-learningcenter.libertymutual.com
test-hiringatliberty.libertymutual.com
test-hal.libertymutual.com
test-givewithliberty.libertymutual.com
test-fusion.libertymutual.com
test-fieldglass.libertymutual.com
test-eservices.lmig.com
test-eservices-leg2.lmig.com
test-eservices-leg1.lmig.com
test-eservices-kc.lmig.com
test-eservices-kc-leg2.lmig.com
test-eservices-kc-leg1.lmig.com
test-enterpriseid-external.lmig.com
test-enavigatemobile.libertymutual.com
test-employeelearningcenter.libertymutual.com
test-ecxmlservices.lmig.com
test-ecxmlservices-leg2.lmig.com
test-ecxmlservices-leg1.lmig.com
test-developers.solarialabs.com
test-counsellink.libertymutual.com
test-apis.libertymutual.com
techcampus-test.libertymutual.com
staging-ami-services.lmig.com
stage-ecxmlservices-kc.libertymutual.com
stage-ecxmlservices-kc-leg2.libertymutual.com
stage-ecxmlservices-kc-leg1.libertymutual.com
stage-ci-policyquoteapi.libertymutual.com
smst.libertymutual.com
smst-pdc.libertymutual.com
smst-pdc-leg2.libertymutual.com
smst-pdc-leg1.libertymutual.com
smst-kdc.libertymutual.com
smst-kdc-leg2.libertymutual.com
smst-kdc-leg1.libertymutual.com
rightfit-test.libertymutual.com
np.hellochaser.com
np.gowandry.com
myPassword-test.lmig.com
lmssonp.lmig.com
lmb-np.myLibertyConnection.com
dev-ami-services.lmig.com
capnpn.lmig.com
capnn.lmig.com
test.truservices.com
arservice.lmig.com
np-kdc-extdemo.libertymutual.com
risktracdirector-hms-test.lmigex.com
lps-test.lmig.com
risktracdirector-lmi-test.lmigex.com
risktrac-csp-test.lmigex.com
hscct-app-gateway-dev.libertymutual.com
hscct-app-gateway-test.libertymutual.com
qcc-test.lmigex.com
test-forge.lmig.com
stage-newhirenetwork.libertymutual.com
emailtraining-test.lmigex.com
welcome-test.lmigex.com
invitationalassets-test.lmigex.com
test-apis.eu-west-1.libertymutual.com
dev-forge.lmig.com
gwlreview-test.lmigex.com
np-access.libertymutual.com
eventapps-test.lmigex.com
np-lmidp.libertymutual.com
lifeafterliberty-test.com
www.lifeafterliberty-test.com
np-lmidp-smtoken.libertymutual.com
sandbox-sbi.libertymutual.com
test-apis.us-east-1.libertymutual.com
gwlreview-test.libertymutualgroup.com
qcc-test.libertymutualgroup.com
np-sureroute-apse2.libertymutual.com
np-sureroute-useast1.libertymutual.com
np-sureroute-euwest1.libertymutual.com
test-it-core-engines-guardknights.libertymutual.com
ni-newsbrief.libertymutualgroup.com
vewpoint.libertymutualgroup.com
testaccess.lmig.com
stage-claims-intake.libertymutualsurety.com
nonprod-eu-west-1-lmidp.libertymutual.com
nonprod-us-east-1-lmidp.libertymutual.com
dev-us-east-1-lmidp.libertymutual.com
tst-extecollaborate.lmig.com
googlerestapi-test.libertymutualgroup.com
perf-tuition.libertymutual.com
www2-test.libertymutualgroup.com
tst-myliberty.lmig.com
dev.lmemergencyportal.com
test.myliberty.lmig.com
myworkplacerequests-test.libertymutual.com
dev.myliberty.lmig.com

Other certificates including the domain name lmemergencyportal.com

(limited to 100 certificates)
www.lmemergencyportal.com
test-securefile.libertymutual.com
test-equote.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
console.lmemergencyportal.com
test-securefile.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
test-securefile.libertymutual.com
console.lmemergencyportal.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
www.lmemergencyportal.com
securefile.libertymutual.com
dev.lmemergencyportal.com
test-securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
test-equote.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
www.lmemergencyportal.com
test-securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-equote.libertymutual.com
test-equote.libertymutual.com
dev.lmemergencyportal.com
test-securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
test-securefile.libertymutual.com
console.lmemergencyportal.com
test-securefile.libertymutual.com
test-equote.libertymutual.com
securefile.libertymutual.com
test-equote.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
dev.lmemergencyportal.com
securefile.libertymutual.com
test-equote.libertymutual.com
test-securefile.libertymutual.com
securefile.libertymutual.com
test-equote.libertymutual.com
www.lmemergencyportal.com
dev.lmemergencyportal.com
test.lmemergencyportal.com
securefile.libertymutual.com
test-securefile.libertymutual.com
dev.lmemergencyportal.com
libertymutualgroup.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
dev.lmemergencyportal.com
dev.lmemergencyportal.com
test-securefile.libertymutual.com
securefile.libertymutual.com
test-securefile.libertymutual.com
test-securefile.libertymutual.com
test-www.lmemergencyportal.com
test-securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com
securefile.libertymutual.com

Certificate

The complete raw certificate details for dev.lmemergencyportal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIS6zCCEdOgAwIBAgIQCvBdFE3qwSEAAAAAUPNYIzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
OTA2MjAxMTQyNDZaFw0yMDA0MjIxMjEyNDVaMIGMMQswCQYDVQQGEwJVUzEWMBQG
A1UECBMNTmV3IEhhbXBzaGlyZTETMBEGA1UEBxMKUG9ydHNtb3V0aDEdMBsGA1UE
ChMUTGliZXJ0eSBNdXR1YWwgR3JvdXAxDTALBgNVBAsTBENvcnAxIjAgBgNVBAMT
GWRldi5sbWVtZXJnZW5jeXBvcnRhbC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+fbeoqqtniF08NKZqeQmfEWkVHAJLPrXPkvu273lFipYX6VNA
eONDnisqryN4A98NUzMOoYvp87Uytrvvt5kIrlT1U1UewcDbkep9FB3693WJXLLo
N+/TCHD71beBpV/QDnXJxEyygrs1g9RBbFQQMJrH/RztrgwLJps6JAO9FZrjVo0m
XiSx9HLQnYzZyWm9N2nnV5dCOpIU4p7/U3Pm2H2VgW785OLythWjwCBv6ijvPu6W
vBQ8OlPR2aTT5E8HuIUaWfgFrWOVNhnqcgafKuOxibqITq6wmcJE9/7/oiFLGYRd
9jLvuvdWYR1sJUhYjEPsxcOLoX3/hcA6Td1tAgMBAAGjgg8XMIIPEzCCDCgGA1Ud
EQSCDB8wggwbgip0ZXN0LWFwaXMuYXAtc291dGhlYXN0LTEubGliZXJ0eW11dHVh
bC5jb22CHHRlc3QtbG1pZHAubGliZXJ0eW11dHVhbC5jb22CIXRlc3QtbGliZXJ0
eXBhYy5saWJlcnR5bXV0dWFsLmNvbYIjdGVzdC1sZWdhbGxpYnJhcnkubGliZXJ0
eW11dHVhbC5jb22CJXRlc3QtbGVhcm5pbmdjZW50ZXIubGliZXJ0eW11dHVhbC5j
b22CJnRlc3QtaGlyaW5nYXRsaWJlcnR5LmxpYmVydHltdXR1YWwuY29tghp0ZXN0
LWhhbC5saWJlcnR5bXV0dWFsLmNvbYImdGVzdC1naXZld2l0aGxpYmVydHkubGli
ZXJ0eW11dHVhbC5jb22CHXRlc3QtZnVzaW9uLmxpYmVydHltdXR1YWwuY29tgiF0
ZXN0LWZpZWxkZ2xhc3MubGliZXJ0eW11dHVhbC5jb22CF3Rlc3QtZXNlcnZpY2Vz
LmxtaWcuY29tghx0ZXN0LWVzZXJ2aWNlcy1sZWcyLmxtaWcuY29tghx0ZXN0LWVz
ZXJ2aWNlcy1sZWcxLmxtaWcuY29tghp0ZXN0LWVzZXJ2aWNlcy1rYy5sbWlnLmNv
bYIfdGVzdC1lc2VydmljZXMta2MtbGVnMi5sbWlnLmNvbYIfdGVzdC1lc2Vydmlj
ZXMta2MtbGVnMS5sbWlnLmNvbYIjdGVzdC1lbnRlcnByaXNlaWQtZXh0ZXJuYWwu
bG1pZy5jb22CJnRlc3QtZW5hdmlnYXRlbW9iaWxlLmxpYmVydHltdXR1YWwuY29t
gi10ZXN0LWVtcGxveWVlbGVhcm5pbmdjZW50ZXIubGliZXJ0eW11dHVhbC5jb22C
G3Rlc3QtZWN4bWxzZXJ2aWNlcy5sbWlnLmNvbYIgdGVzdC1lY3htbHNlcnZpY2Vz
LWxlZzIubG1pZy5jb22CIHRlc3QtZWN4bWxzZXJ2aWNlcy1sZWcxLmxtaWcuY29t
gh90ZXN0LWRldmVsb3BlcnMuc29sYXJpYWxhYnMuY29tgiJ0ZXN0LWNvdW5zZWxs
aW5rLmxpYmVydHltdXR1YWwuY29tght0ZXN0LWFwaXMubGliZXJ0eW11dHVhbC5j
b22CIXRlY2hjYW1wdXMtdGVzdC5saWJlcnR5bXV0dWFsLmNvbYIdc3RhZ2luZy1h
bWktc2VydmljZXMubG1pZy5jb22CKHN0YWdlLWVjeG1sc2VydmljZXMta2MubGli
ZXJ0eW11dHVhbC5jb22CLXN0YWdlLWVjeG1sc2VydmljZXMta2MtbGVnMi5saWJl
cnR5bXV0dWFsLmNvbYItc3RhZ2UtZWN4bWxzZXJ2aWNlcy1rYy1sZWcxLmxpYmVy
dHltdXR1YWwuY29tgilzdGFnZS1jaS1wb2xpY3lxdW90ZWFwaS5saWJlcnR5bXV0
dWFsLmNvbYIWc21zdC5saWJlcnR5bXV0dWFsLmNvbYIac21zdC1wZGMubGliZXJ0
eW11dHVhbC5jb22CH3Ntc3QtcGRjLWxlZzIubGliZXJ0eW11dHVhbC5jb22CH3Nt
c3QtcGRjLWxlZzEubGliZXJ0eW11dHVhbC5jb22CGnNtc3Qta2RjLmxpYmVydHlt
dXR1YWwuY29tgh9zbXN0LWtkYy1sZWcyLmxpYmVydHltdXR1YWwuY29tgh9zbXN0
LWtkYy1sZWcxLmxpYmVydHltdXR1YWwuY29tgh9yaWdodGZpdC10ZXN0LmxpYmVy
dHltdXR1YWwuY29tghJucC5oZWxsb2NoYXNlci5jb22CD25wLmdvd2FuZHJ5LmNv
bYIYbXlQYXNzd29yZC10ZXN0LmxtaWcuY29tghBsbXNzb25wLmxtaWcuY29tgh5s
bWItbnAubXlMaWJlcnR5Q29ubmVjdGlvbi5jb22CGWRldi1hbWktc2VydmljZXMu
bG1pZy5jb22CD2NhcG5wbi5sbWlnLmNvbYIOY2Fwbm4ubG1pZy5jb22CFHRlc3Qu
dHJ1c2VydmljZXMuY29tghJhcnNlcnZpY2UubG1pZy5jb22CIG5wLWtkYy1leHRk
ZW1vLmxpYmVydHltdXR1YWwuY29tgiRyaXNrdHJhY2RpcmVjdG9yLWhtcy10ZXN0
LmxtaWdleC5jb22CEWxwcy10ZXN0LmxtaWcuY29tgiRyaXNrdHJhY2RpcmVjdG9y
LWxtaS10ZXN0LmxtaWdleC5jb22CHHJpc2t0cmFjLWNzcC10ZXN0LmxtaWdleC5j
b22CJ2hzY2N0LWFwcC1nYXRld2F5LWRldi5saWJlcnR5bXV0dWFsLmNvbYIoaHNj
Y3QtYXBwLWdhdGV3YXktdGVzdC5saWJlcnR5bXV0dWFsLmNvbYITcWNjLXRlc3Qu
bG1pZ2V4LmNvbYITdGVzdC1mb3JnZS5sbWlnLmNvbYImc3RhZ2UtbmV3aGlyZW5l
dHdvcmsubGliZXJ0eW11dHVhbC5jb22CHWVtYWlsdHJhaW5pbmctdGVzdC5sbWln
ZXguY29tghd3ZWxjb21lLXRlc3QubG1pZ2V4LmNvbYIiaW52aXRhdGlvbmFsYXNz
ZXRzLXRlc3QubG1pZ2V4LmNvbYIldGVzdC1hcGlzLmV1LXdlc3QtMS5saWJlcnR5
bXV0dWFsLmNvbYISZGV2LWZvcmdlLmxtaWcuY29tghlnd2xyZXZpZXctdGVzdC5s
bWlnZXguY29tghtucC1hY2Nlc3MubGliZXJ0eW11dHVhbC5jb22CGWV2ZW50YXBw
cy10ZXN0LmxtaWdleC5jb22CGm5wLWxtaWRwLmxpYmVydHltdXR1YWwuY29tghls
aWZlYWZ0ZXJsaWJlcnR5LXRlc3QuY29tgh13d3cubGlmZWFmdGVybGliZXJ0eS10
ZXN0LmNvbYIibnAtbG1pZHAtc210b2tlbi5saWJlcnR5bXV0dWFsLmNvbYIdc2Fu
ZGJveC1zYmkubGliZXJ0eW11dHVhbC5jb22CJXRlc3QtYXBpcy51cy1lYXN0LTEu
bGliZXJ0eW11dHVhbC5jb22CJWd3bHJldmlldy10ZXN0LmxpYmVydHltdXR1YWxn
cm91cC5jb22CH3FjYy10ZXN0LmxpYmVydHltdXR1YWxncm91cC5jb22CJG5wLXN1
cmVyb3V0ZS1hcHNlMi5saWJlcnR5bXV0dWFsLmNvbYImbnAtc3VyZXJvdXRlLXVz
ZWFzdDEubGliZXJ0eW11dHVhbC5jb22CJm5wLXN1cmVyb3V0ZS1ldXdlc3QxLmxp
YmVydHltdXR1YWwuY29tgjN0ZXN0LWl0LWNvcmUtZW5naW5lcy1ndWFyZGtuaWdo
dHMubGliZXJ0eW11dHVhbC5jb22CI25pLW5ld3NicmllZi5saWJlcnR5bXV0dWFs
Z3JvdXAuY29tgh92ZXdwb2ludC5saWJlcnR5bXV0dWFsZ3JvdXAuY29tghN0ZXN0
YWNjZXNzLmxtaWcuY29tgitzdGFnZS1jbGFpbXMtaW50YWtlLmxpYmVydHltdXR1
YWxzdXJldHkuY29tgilub25wcm9kLWV1LXdlc3QtMS1sbWlkcC5saWJlcnR5bXV0
dWFsLmNvbYIpbm9ucHJvZC11cy1lYXN0LTEtbG1pZHAubGliZXJ0eW11dHVhbC5j
b22CJWRldi11cy1lYXN0LTEtbG1pZHAubGliZXJ0eW11dHVhbC5jb22CHHRzdC1l
eHRlY29sbGFib3JhdGUubG1pZy5jb22CKWdvb2dsZXJlc3RhcGktdGVzdC5saWJl
cnR5bXV0dWFsZ3JvdXAuY29tgh5wZXJmLXR1aXRpb24ubGliZXJ0eW11dHVhbC5j
b22CIHd3dzItdGVzdC5saWJlcnR5bXV0dWFsZ3JvdXAuY29tghZ0c3QtbXlsaWJl
cnR5LmxtaWcuY29tghlkZXYubG1lbWVyZ2VuY3lwb3J0YWwuY29tghd0ZXN0Lm15
bGliZXJ0eS5sbWlnLmNvbYIqbXl3b3JrcGxhY2VyZXF1ZXN0cy10ZXN0LmxpYmVy
dHltdXR1YWwuY29tghZkZXYubXlsaWJlcnR5LmxtaWcuY29tMIIBfQYKKwYBBAHW
eQIEAgSCAW0EggFpAWcAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPT
DAAAAWt0zbgYAAAEAwBGMEQCIBm7bJUVAvny9utLcNWr/Fyg5uaTLthosDDF7M+3
GaziAiAimk2At5RktIu1/Si6aiZijf6zj3i+wqKo+43jcrOPLAB2AId1v+dZfPiM
Q5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABa3TNuB0AAAQDAEcwRQIhAJhiK09h
JArvbRmszR7yJbMeZuAS6yhGhQ+Bq2tcW+F7AiBojNhsKo5X+YEIMJ6Oo7BgUJZ/
34KKNp9oR4wSswtGXAB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3L
AAABa3TNuL8AAAQDAEcwRQIhAOgryxwecQnthvdZoFK4nU4cC4DdZu3lbhGzGEHz
ByzHAiBU+923Ac77mo0VQoWRGiZMsSjabiQCKxtCHPlw8U8zGzAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1UdHwQsMCow
KKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwSwYDVR0g
BEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50
cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8v
YWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwHwYDVR0jBBgwFoAUgqJw
dN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFKFmXJU85KN14iLMTsexWHGhYEp3
MAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBABqrG8KTlOq/bsuuEZiUVq4h
NJEBw218JFHS2dHYZC4kOG+wKsBWwLYnIM1aFd+4Su4WE4f5tIxqodYffLNKJxVJ
s48iULZ37hWr6/vUHXuMq/PIo/C5FBb3VN02k6bs6GzrEkWoLGMbJjENjHPJLOgI
wU1Tqdd2x5SW6xfrz16utkhGN5EC+bTZGfIccT9xgrbBUb8f+j56uZL9P7lePJBA
pf2WLs8VpQ13RgIj+jRn/BroUMD5zzhYEANWIUSaAqdHOW3UTliKHs0J2swJitQw
OiBJerMcq4RG3sbqHzV8PqAiJNzVGTmbHNSVQDMsyw65/7CEqfDxuIcEuWMpMeQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn23qKqrZ4hdPDSmankJ
nxFpFRwCSz61z5L7tu95RYqWF+lTQHjjQ54rKq8jeAPfDVMzDqGL6fO1Mra777eZ
CK5U9VNVHsHA25HqfRQd+vd1iVyy6Dfv0whw+9W3gaVf0A51ycRMsoK7NYPUQWxU
EDCax/0c7a4MCyabOiQDvRWa41aNJl4ksfRy0J2M2clpvTdp51eXQjqSFOKe/1Nz
5th9lYFu/OTi8rYVo8Agb+oo7z7ulrwUPDpT0dmk0+RPB7iFGln4Ba1jlTYZ6nIG
nyrjsYm6iE6usJnCRPf+/6IhSxmEXfYy77r3VmEdbCVIWIxD7MXDi6F9/4XAOk3d
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14540319076668053674028710481053833251
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 11:42:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-22 12:12:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corp'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.lmemergencyportal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24047271512602673809043921755304495628968791978616756203853863153920525873614094618371324908089046762508378789223802859173798395750829604154656260137898363530379140288877581230011116687644140140971208759575983531765367199010014999137679060930338112331449444642963323457240554724194870716357370060992543916795688128282422630600636392835297574627600890931740963965023171379171448898520658483964593786338392467766561941496717967836393818235551083392386787751579982784608232249184562355818363860314971798887191857437926826105080310332685020534481899511807889133067870800225174380987198911508763028725576669318177341955437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-apis.ap-southeast-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertypac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-legallibrary.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-learningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-hiringatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-hal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-givewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fusion.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fieldglass.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-kc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-kc-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-kc-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-enterpriseid-external.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-enavigatemobile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-employeelearningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecxmlservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecxmlservices-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecxmlservices-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-developers.solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-counsellink.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-apis.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcampus-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ami-services.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ecxmlservices-kc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ecxmlservices-kc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ecxmlservices-kc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ci-policyquoteapi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-pdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-pdc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-pdc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-kdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-kdc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-kdc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightfit-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.hellochaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.gowandry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myPassword-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmssonp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmb-np.myLibertyConnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ami-services.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capnpn.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capnn.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.truservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arservice.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-kdc-extdemo.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktracdirector-hms-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lps-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktracdirector-lmi-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktrac-csp-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hscct-app-gateway-dev.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hscct-app-gateway-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcc-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-newhirenetwork.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailtraining-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitationalassets-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-apis.eu-west-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwlreview-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-access.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventapps-test.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeafterliberty-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeafterliberty-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-lmidp-smtoken.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-sbi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-apis.us-east-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwlreview-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcc-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-sureroute-apse2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-sureroute-useast1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-sureroute-euwest1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-it-core-engines-guardknights.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ni-newsbrief.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vewpoint.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testaccess.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claims-intake.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-eu-west-1-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-us-east-1-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-us-east-1-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-extecollaborate.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlerestapi-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-tuition.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-myliberty.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.lmemergencyportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.myliberty.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworkplacerequests-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.myliberty.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016b74cdb8180000040300463044022019bb6c951502f9f2f6eb4b70d5abfc5ca0e6e6932ed868b030c5eccfb719ace20220229a4d80b79464b48bb5fd28ba6a26628dfeb38f78bec2a2a8fb8de372b38f2c0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b74cdb81d000004030047304502210098622b4f61240aef6d19accd1ef225b31e66e012eb2846850f81ab6b5c5be17b0220688cd86c2a8e57f98108309e8ea3b06050967fdf828a369f68478c12b30b465c007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b74cdb8bf0000040300473045022100e82bcb1c1e7109ed86f759a052b89d4e1c0b80dd66ede56e11b31841f3072cc7022054fbddb701cefb9a8d154285911a264cb128da6e24022b1b421cf970f14f331b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1665c953ce4a375e222cc4ec7b15871a1604a77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001aab1bc29394eabf6ecbae11989456ae21349101c36d7c2451d2d9d1d8642e24386fb02ac056c0b62720cd5a15dfb84aee161387f9b48c6aa1d61f7cb34a271549b38f2250b677ee15abebfbd41d7b8cabf3c8a3f0b91416f754dd3693a6ece86ceb1245a82c631b26310d8c73c92ce808c14d53a9d776c79496eb17ebcf5eaeb64846379102f9b4d919f21c713f7182b6c151bf1ffa3e7ab992fd3fb95e3c9040a5fd962ecf15a50d77460223fa3467fc1ae850c0f9cf385810035621449a02a747396dd44e588a1ecd09dacc098ad4303a20497ab31cab8446dec6ea1f357c3ea02224dcd519399b1cd49540332ccb0eb9ffb084a9f0f1b88704b9632931e4