cs-pool-03k.lm.lmig.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:55:2c:da:05:54:bc:52:44:7d:43:ae:ed:28:4c:5c was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: HS EUT
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:55:2c:da:05:54:bc:52:44:7d:43:ae:ed:28:4c:5c
Serial Number (int): 15063762886021387873912541839738031196
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 47:f6:c3:1d:41:93:59:b4:38:49:25:a9:f8:7c:b1:e8:88:2f:92:76
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ea:1a:55:89:19:fd:e7:8d:f1:b3:ca:16:e5:0f:3a:86:54:cb:6a:14
Fingerprint (sha256): 04:b2:1b:59:83:62:b3:df:a5:e9:45:9e:c5:c6:aa:96:4e:51:8e:df:58:97:33:c6:22:54:69:85:cc:58:ab:f5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate cs-pool-03k.lm.lmig.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs-pool-03k.lm.lmig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs-pool-03k.lm.lmig.com
lyncdiscover.libertyfianzas.com
sip.libertyfianzas.com
lyncdiscoverinternal.libertyfianzas.com
lyncdiscover.primerofianzas.com
sip.primerofianzas.com
lyncdiscoverinternal.primerofianzas.com
lyncdiscover.lmi.com
sip.lmi.com
lyncdiscoverinternal.lmi.com
csweb-pool-03k.lm.lmig.com
cswebext-pool-03k.libertymutual.com
lm-hssfbfe-p01k.lm.lmig.com
lm-hssfbfe-p02k.lm.lmig.com
lm-hssfbfe-p03k.lm.lmig.com
lm-hssfbfe-p04k.lm.lmig.com
lm-hssfbfe-p05k.lm.lmig.com
lm-hssfbfe-p06k.lm.lmig.com
lm-hssfbfe-p07k.lm.lmig.com
lm-hssfbfe-p08k.lm.lmig.com
lm-hssfbfe-p09k.lm.lmig.com
lm-hssfbfe-p10k.lm.lmig.com
lm-hssfbfe-p11k.lm.lmig.com
lm-hssfbfe-p12k.lm.lmig.com
meet.libertymutual.com
join.libertymutual.com
join.helmsmantpa.com
dialin.libertymutual.com
LyncdiscoverInternal.libertymutual.com
LyncdiscoverInternal.americafirst-ins.com
LyncdiscoverInternal.ColoradoCasualty.com
LyncdiscoverInternal.cascadedisability.com
LyncdiscoverInternal.GoldenEagleCorp.com
LyncdiscoverInternal.Indiana-Ins.com
LyncdiscoverInternal.LibertyInternational.com
LyncdiscoverInternal.Liberty-IT.co.uk
LyncdiscoverInternal.LibertyNorthwest.com
LyncdiscoverInternal.montgomery-ins.com
LyncdiscoverInternal.ohiocasualty-ins.com
LyncdiscoverInternal.peerless-ins.com
LyncdiscoverInternal.safeco.com
LyncdiscoverInternal.libertyiu.com
LyncdiscoverInternal.helmsmantpa.com
lyncdiscoverinternal.libertyglobalgroup.com
Lyncdiscoverinternal.ironshore.com
LyncdiscoverInternal.pembrokeunderwriting.com
LyncdiscoverInternal.acappellaunderwriting.com
LyncdiscoverInternal.ironstarrexcess.com
LyncdiscoverInternal.iron-excess.com
Lyncdiscover.libertymutual.com
Lyncdiscover.americafirst-ins.com
Lyncdiscover.cascadedisability.com
Lyncdiscover.ColoradoCasualty.com
Lyncdiscover.GoldenEagleCorp.com
Lyncdiscover.Indiana-Ins.com
Lyncdiscover.LibertyInternational.com
Lyncdiscover.Liberty-IT.co.uk
Lyncdiscover.LibertyNorthwest.com
Lyncdiscover.montgomery-ins.com
Lyncdiscover.ohiocasualty-ins.com
Lyncdiscover.peerless-ins.com
Lyncdiscover.safeco.com
Lyncdiscover.libertyiu.com
Lyncdiscover.helmsmantpa.com
Lyncdiscover.libertyglobalgroup.com
Lyncdiscover.ironshore.com
Lyncdiscover.pembrokeunderwriting.com
Lyncdiscover.acappellaunderwriting.com
Lyncdiscover.ironstarrexcess.com
Lyncdiscover.iron-excess.com
sip.libertymutual.com
sip.americafirst-ins.com
sip.cascadedisability.com
sip.ColoradoCasualty.com
sip.GoldenEagleCorp.com
sip.Indiana-Ins.com
sip.LibertyInternational.com
sip.Liberty-IT.co.uk
sip.LibertyNorthwest.com
sip.montgomery-ins.com
sip.ohiocasualty-ins.com
sip.peerless-ins.com
sip.safeco.com
sip.libertyiu.com
sip.helmsmantpa.com
sip.libertyglobalgroup.com
sip.ironshore.com
sip.pembrokeunderwriting.com
sip.acappellaunderwriting.com
sip.ironstarrexcess.com
sip.iron-excess.com

Other certificates including the domain name lmig.com

(limited to 100 certificates)
prod-eu-west-1-alfresco-repo.aws.lmig.com
ete-claims.safeco.com
*.kdc.paas.lmig.com
uram.lmig.com
atlas-services.lmig.com
cerc-ar.lmig.com
testcommercial.lmig.com
dev-fsda.lmig.com
rdc-registry-nprod.lmig.com
*.eu-west-1.np.paas.lmig.com
relativity.lmig.com
kdc-citbi.lmig.com
vmkip-hjss0001.lm.lmig.com
VMPIP-HSIWAE01.lm.lmig.com
requestit.lmig.com
vmkit-a4swb001.lm.lmig.com
statuspage.io
lm-pmmstgy-d01k.lm.lmig.com
*.app-severless.rancher.sandbox.aws.lmig.com
dev-ap-southeast-2-gs-alfresco-52-saml.aws.lmig.com
www.libertymutual.com
omni-messaging.us-east-1.lmig.com
dial-auditlog-retention.lmig.com
vx-eatknas-p02k.lmig.com.lmig.com
ispoappskdc.lmig.com
ci-envoy-reins-search.lmig.com
ete-claims.safeco.com
85a-sseaesdm1.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
aep-lm-soap-client-invoker.production.us-east-1.aws.lmig.com
amcontactcenter.lmig.com
*.aws.lmig.com
uscm-sasgrid-web.lmig.com
compassdocuments.lmig.com
vxpip-hhspds01.lmig.com
PeopleAtLiberty.com
lmpproducerextranet.lmig.com
lm-ise-psn.lmig.com
test-pmsrc.lmig.com
testAvayaDev.lmig.com
statuspage.io
pfet02k03.lmig.com
cmpsccosrv.lmig.com
lcpet-havsbc01-inside.lmig.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
test-import.lmig.com
eip.lmig.com
lmpin-hcybrk02-r.lmig.com
vm-ceg-prd2-1.azr.lmig.com
0055-blox-ext-grid.lmig.com
ete-www2.libertymutual.com
dr-sslvpn-kc.lmig.com
perf-driverrisk.cf.reuse.lmig.com
denodo-solution-manager-non-production.aws.lmig.com
vckit-haespc02.lmig.com
ecr-nocustids-kdc.lmig.com
lsm-fred.lmig.com
comp3-ui.aws.lmig.com
perfandcompstatement.lmig.com
snd-ciapstableau.aws.lmig.com
puma.lmig.com
logging-old.datahub.aws.lmig.com
test-securefile.libertymutual.com
dev-compworkq-cmis.lmig.com
gateway-client.cf.reuse.lmig.com
vendors.test.wem.gde.aws.lmig.com
vxkip-pwaslp05.lmig.com
api.eco-development.lmig.com
pmit-easysuite.lmig.com
cs-tappool-03p.lm.lmig.com
gw-gde-equifax-service.test.wem.gde.aws.lmig.com
0038-sbc-ext-01.lmig.com
lm-hscyrkp-p01p.lm.lmig.com
lmb-datalake-zeppelin-prod.aws.lmig.com
contracts-portal.lmig.com
clworkbench-ws.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
LM-HS-LTAS-A-T01P.LMIG.COM
2pr-rpama.lmig.com
vxpif-p7fsa002.lmig.com
b2b-boomi-batch-kc.lmig.com
wcsvtrigger.lmig.com
vmpip-m566u5fh.lm.lmig.com
bp1054598.saagie.com
vmkip-hvcvdi22.lm.lmig.com
ci-envoy-ppuw-stage-translation.lmig.com
sit-eu-west-1-gs-alfresco.aws.lmig.com
inspire-interactive.development.aws.lmig.com
dev-iam-console.lmig.com
vckip-hcmad201.lmig.com
leservices-imp.lmig.com
ciim-claims-service-test.np.lmig.com
perf-www.liucanada.com
statuspage.io
smart-workflow-rules.lmig.com
grs-informatica-mdm-aws-production.aws.lmig.com
prod-b-us-east-1-ci-alfresco-ingest-share.aws.lmig.com
vmpip-hcypvw03.lm.lmig.com
brmspolicy-uat.libertyinsurance.in

Certificate

The complete raw certificate details for cs-pool-03k.lm.lmig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQdDCCD1ygAwIBAgIQC1Us2gVUvFJEfUOu7ShMXDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwODI0MDAwMDAwWhcN
MjAwODE3MTIwMDAwWjCBjDELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU5ldyBIYW1w
c2hpcmUxEzARBgNVBAcTClBvcnRzbW91dGgxHTAbBgNVBAoTFExpYmVydHkgTXV0
dWFsIEdyb3VwMQ8wDQYDVQQLEwZIUyBFVVQxIDAeBgNVBAMTF2NzLXBvb2wtMDNr
LmxtLmxtaWcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmVk
7MEGppf8FKDfPTo0S+4QDwA0zTgAHM5UdZPeRkuYCYIRP/21vuqnqY8IVLzfTpX+
BlJvwTZscalo9lbcAsUBIlSLsJOTnUNWtLud6AjGJFUmRqaHMRXpTGWJ97l9SuhX
KPbMvYJZfcSM6EdxiQJZFxMC5VvOY/bcezJcSu7L9zDUVfOX2sRK4xpz6TQogy3I
bjPVqJP/PN3a52TchVLlNe2mLHT/PrDkuE4yYUXwkg0moO9VUE3+BeKCTvgK2H8P
OWx5DvizB8bWlJyAX5Lq+EvOXMxCYYeYS9R+s0SXfshMM6bKe2dEIrr9prlsbB6m
rPcp2V3F4APbTM/xHwIDAQABo4INDjCCDQowHwYDVR0jBBgwFoAUD4BhHIIxYdUv
KOeNRji0LOHG2eIwHQYDVR0OBBYEFEf2wx1Bk1m0OEklqfh8seiIL5J2MIILPgYD
VR0RBIILNTCCCzGCF2NzLXBvb2wtMDNrLmxtLmxtaWcuY29tgh9seW5jZGlzY292
ZXIubGliZXJ0eWZpYW56YXMuY29tghZzaXAubGliZXJ0eWZpYW56YXMuY29tgids
eW5jZGlzY292ZXJpbnRlcm5hbC5saWJlcnR5Zmlhbnphcy5jb22CH2x5bmNkaXNj
b3Zlci5wcmltZXJvZmlhbnphcy5jb22CFnNpcC5wcmltZXJvZmlhbnphcy5jb22C
J2x5bmNkaXNjb3ZlcmludGVybmFsLnByaW1lcm9maWFuemFzLmNvbYIUbHluY2Rp
c2NvdmVyLmxtaS5jb22CC3NpcC5sbWkuY29tghxseW5jZGlzY292ZXJpbnRlcm5h
bC5sbWkuY29tghpjc3dlYi1wb29sLTAzay5sbS5sbWlnLmNvbYIjY3N3ZWJleHQt
cG9vbC0wM2subGliZXJ0eW11dHVhbC5jb22CG2xtLWhzc2ZiZmUtcDAxay5sbS5s
bWlnLmNvbYIbbG0taHNzZmJmZS1wMDJrLmxtLmxtaWcuY29tghtsbS1oc3NmYmZl
LXAwM2subG0ubG1pZy5jb22CG2xtLWhzc2ZiZmUtcDA0ay5sbS5sbWlnLmNvbYIb
bG0taHNzZmJmZS1wMDVrLmxtLmxtaWcuY29tghtsbS1oc3NmYmZlLXAwNmsubG0u
bG1pZy5jb22CG2xtLWhzc2ZiZmUtcDA3ay5sbS5sbWlnLmNvbYIbbG0taHNzZmJm
ZS1wMDhrLmxtLmxtaWcuY29tghtsbS1oc3NmYmZlLXAwOWsubG0ubG1pZy5jb22C
G2xtLWhzc2ZiZmUtcDEway5sbS5sbWlnLmNvbYIbbG0taHNzZmJmZS1wMTFrLmxt
LmxtaWcuY29tghtsbS1oc3NmYmZlLXAxMmsubG0ubG1pZy5jb22CFm1lZXQubGli
ZXJ0eW11dHVhbC5jb22CFmpvaW4ubGliZXJ0eW11dHVhbC5jb22CFGpvaW4uaGVs
bXNtYW50cGEuY29tghhkaWFsaW4ubGliZXJ0eW11dHVhbC5jb22CJkx5bmNkaXNj
b3ZlckludGVybmFsLmxpYmVydHltdXR1YWwuY29tgilMeW5jZGlzY292ZXJJbnRl
cm5hbC5hbWVyaWNhZmlyc3QtaW5zLmNvbYIpTHluY2Rpc2NvdmVySW50ZXJuYWwu
Q29sb3JhZG9DYXN1YWx0eS5jb22CKkx5bmNkaXNjb3ZlckludGVybmFsLmNhc2Nh
ZGVkaXNhYmlsaXR5LmNvbYIoTHluY2Rpc2NvdmVySW50ZXJuYWwuR29sZGVuRWFn
bGVDb3JwLmNvbYIkTHluY2Rpc2NvdmVySW50ZXJuYWwuSW5kaWFuYS1JbnMuY29t
gi1MeW5jZGlzY292ZXJJbnRlcm5hbC5MaWJlcnR5SW50ZXJuYXRpb25hbC5jb22C
JUx5bmNkaXNjb3ZlckludGVybmFsLkxpYmVydHktSVQuY28udWuCKUx5bmNkaXNj
b3ZlckludGVybmFsLkxpYmVydHlOb3J0aHdlc3QuY29tgidMeW5jZGlzY292ZXJJ
bnRlcm5hbC5tb250Z29tZXJ5LWlucy5jb22CKUx5bmNkaXNjb3ZlckludGVybmFs
Lm9oaW9jYXN1YWx0eS1pbnMuY29tgiVMeW5jZGlzY292ZXJJbnRlcm5hbC5wZWVy
bGVzcy1pbnMuY29tgh9MeW5jZGlzY292ZXJJbnRlcm5hbC5zYWZlY28uY29tgiJM
eW5jZGlzY292ZXJJbnRlcm5hbC5saWJlcnR5aXUuY29tgiRMeW5jZGlzY292ZXJJ
bnRlcm5hbC5oZWxtc21hbnRwYS5jb22CK2x5bmNkaXNjb3ZlcmludGVybmFsLmxp
YmVydHlnbG9iYWxncm91cC5jb22CIkx5bmNkaXNjb3ZlcmludGVybmFsLmlyb25z
aG9yZS5jb22CLUx5bmNkaXNjb3ZlckludGVybmFsLnBlbWJyb2tldW5kZXJ3cml0
aW5nLmNvbYIuTHluY2Rpc2NvdmVySW50ZXJuYWwuYWNhcHBlbGxhdW5kZXJ3cml0
aW5nLmNvbYIoTHluY2Rpc2NvdmVySW50ZXJuYWwuaXJvbnN0YXJyZXhjZXNzLmNv
bYIkTHluY2Rpc2NvdmVySW50ZXJuYWwuaXJvbi1leGNlc3MuY29tgh5MeW5jZGlz
Y292ZXIubGliZXJ0eW11dHVhbC5jb22CIUx5bmNkaXNjb3Zlci5hbWVyaWNhZmly
c3QtaW5zLmNvbYIiTHluY2Rpc2NvdmVyLmNhc2NhZGVkaXNhYmlsaXR5LmNvbYIh
THluY2Rpc2NvdmVyLkNvbG9yYWRvQ2FzdWFsdHkuY29tgiBMeW5jZGlzY292ZXIu
R29sZGVuRWFnbGVDb3JwLmNvbYIcTHluY2Rpc2NvdmVyLkluZGlhbmEtSW5zLmNv
bYIlTHluY2Rpc2NvdmVyLkxpYmVydHlJbnRlcm5hdGlvbmFsLmNvbYIdTHluY2Rp
c2NvdmVyLkxpYmVydHktSVQuY28udWuCIUx5bmNkaXNjb3Zlci5MaWJlcnR5Tm9y
dGh3ZXN0LmNvbYIfTHluY2Rpc2NvdmVyLm1vbnRnb21lcnktaW5zLmNvbYIhTHlu
Y2Rpc2NvdmVyLm9oaW9jYXN1YWx0eS1pbnMuY29tgh1MeW5jZGlzY292ZXIucGVl
cmxlc3MtaW5zLmNvbYIXTHluY2Rpc2NvdmVyLnNhZmVjby5jb22CGkx5bmNkaXNj
b3Zlci5saWJlcnR5aXUuY29tghxMeW5jZGlzY292ZXIuaGVsbXNtYW50cGEuY29t
giNMeW5jZGlzY292ZXIubGliZXJ0eWdsb2JhbGdyb3VwLmNvbYIaTHluY2Rpc2Nv
dmVyLmlyb25zaG9yZS5jb22CJUx5bmNkaXNjb3Zlci5wZW1icm9rZXVuZGVyd3Jp
dGluZy5jb22CJkx5bmNkaXNjb3Zlci5hY2FwcGVsbGF1bmRlcndyaXRpbmcuY29t
giBMeW5jZGlzY292ZXIuaXJvbnN0YXJyZXhjZXNzLmNvbYIcTHluY2Rpc2NvdmVy
Lmlyb24tZXhjZXNzLmNvbYIVc2lwLmxpYmVydHltdXR1YWwuY29tghhzaXAuYW1l
cmljYWZpcnN0LWlucy5jb22CGXNpcC5jYXNjYWRlZGlzYWJpbGl0eS5jb22CGHNp
cC5Db2xvcmFkb0Nhc3VhbHR5LmNvbYIXc2lwLkdvbGRlbkVhZ2xlQ29ycC5jb22C
E3NpcC5JbmRpYW5hLUlucy5jb22CHHNpcC5MaWJlcnR5SW50ZXJuYXRpb25hbC5j
b22CFHNpcC5MaWJlcnR5LUlULmNvLnVrghhzaXAuTGliZXJ0eU5vcnRod2VzdC5j
b22CFnNpcC5tb250Z29tZXJ5LWlucy5jb22CGHNpcC5vaGlvY2FzdWFsdHktaW5z
LmNvbYIUc2lwLnBlZXJsZXNzLWlucy5jb22CDnNpcC5zYWZlY28uY29tghFzaXAu
bGliZXJ0eWl1LmNvbYITc2lwLmhlbG1zbWFudHBhLmNvbYIac2lwLmxpYmVydHln
bG9iYWxncm91cC5jb22CEXNpcC5pcm9uc2hvcmUuY29tghxzaXAucGVtYnJva2V1
bmRlcndyaXRpbmcuY29tgh1zaXAuYWNhcHBlbGxhdW5kZXJ3cml0aW5nLmNvbYIX
c2lwLmlyb25zdGFycmV4Y2Vzcy5jb22CE3NpcC5pcm9uLWV4Y2Vzcy5jb20wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNV
HR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEy
LWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hh
Mi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYc
aHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwfAYIKwYBBQUH
AQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5jb20wRgYI
KwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNI
QTJTZWN1cmVTZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADATBgorBgEEAdZ5AgQDAQH/
BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeR6O0x7HBo7ZB7H1gx//FtD83vw+oA9
bH6MZrhde3ugV1/MNT4hBCtG9WwDLevrqqk8Y5Thsr7Rdjac27qR3w66VZg0Vdmf
U4/7v5h5tUTdpo6crNwl8htrh9kjozctY0YZ9s1ARH2oKwPEw049paBCBcG0hH/2
Q9jTjBNtFYxdXly/9rzNr+xCE4u66uFZy5qW0wSy9AZu5BkmQrB2PUkD1ppiwCl7
2rAx5XLLySwoiu5y24WCt9XnDPlruCs94ciHbfqnzJ91t05aKs3pUdNYugeVkg/K
OmTwLsDHqZKCDrDd2JBT+NIL4qrCSj8zNm6dDB/zB2VG5v3/99VVsg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmVk7MEGppf8FKDfPTo0
S+4QDwA0zTgAHM5UdZPeRkuYCYIRP/21vuqnqY8IVLzfTpX+BlJvwTZscalo9lbc
AsUBIlSLsJOTnUNWtLud6AjGJFUmRqaHMRXpTGWJ97l9SuhXKPbMvYJZfcSM6Edx
iQJZFxMC5VvOY/bcezJcSu7L9zDUVfOX2sRK4xpz6TQogy3IbjPVqJP/PN3a52Tc
hVLlNe2mLHT/PrDkuE4yYUXwkg0moO9VUE3+BeKCTvgK2H8POWx5DvizB8bWlJyA
X5Lq+EvOXMxCYYeYS9R+s0SXfshMM6bKe2dEIrr9prlsbB6mrPcp2V3F4APbTM/x
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15063762886021387873912541839738031196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HS EUT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs-pool-03k.lm.lmig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24035277305603315336928958762044561875390139959985318677554369660943170264730121217495341881664786398464390918188262439007807003899906664250464406122489636145848978745718311483008804067462323375370014124399005362589123679888072706243104706051782671792726755181658604102017298232375141543768385291127037083796546339044852552395174459834913141765719263210286114446326647028509514448225051465252337491209512948220504727668574733925350773850953241189803343106745698844054219933898933882454592326566680698142550946311469520244725695615806784968833409359319756508948871744642704701811704086809479787121966244690605368144159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47f6c31d419359b4384925a9f87cb1e8882f9276
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2869 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-pool-03k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csweb-pool-03k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cswebext-pool-03k.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p01k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p02k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p03k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p04k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p05k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p06k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p07k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p08k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p09k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p10k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p11k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p12k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ColoradoCasualty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.cascadedisability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.GoldenEagleCorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.Indiana-Ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.LibertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.Liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.LibertyNorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.acappellaunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ironstarrexcess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.iron-excess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.cascadedisability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ColoradoCasualty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.GoldenEagleCorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.Indiana-Ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.LibertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.Liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.LibertyNorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.acappellaunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ironstarrexcess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.iron-excess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cascadedisability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ColoradoCasualty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.GoldenEagleCorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Indiana-Ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.LibertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.LibertyNorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.acappellaunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ironstarrexcess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.iron-excess.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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