www.libertyiu.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:a6:7d:86:0a:c0:35:77:f1:23:a6:d8:33:f0:5c:14 was issued on by DigiCert Inc.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Global Specialties
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a6:7d:86:0a:c0:35:77:f1:23:a6:d8:33:f0:5c:14
Serial Number (int): 3522923191188062855909419038775729172
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 40:23:f2:d8:3e:d2:56:a1:6d:a5:2f:e4:f1:cc:34:80:08:b3:3c:48
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 25:c6:b3:16:e5:79:a7:24:27:56:20:9f:b8:f0:4b:d3:21:39:31:50
Fingerprint (sha256): 05:89:31:ac:a3:00:a8:31:e1:f6:6f:43:c3:c1:8e:ba:71:83:85:55:d4:4c:18:49:85:ec:3f:33:7d:48:56:86

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.libertyiu.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertyiu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libertylink.ae
libertylink.eu
libertylink.co.uk
www.libertylink.co.uk
www.libertylink.ae
www.libertylink.eu
www.libertyspecialtymarkets.com
www.lsmitaly.com
yourliberty.fr
www.primerofianzas.com
www.lms.ae-libertyiu.com
www.liurisk.com
www.liuquote.ie
www.liuquote.co.uk
www.liupal.com
www.liucargo.com
www.liucanada.com
www.liu-usa.com
www.liu-latinamerica.com
www.liu-eil.com
www.libertysegurosperu.com
www.libertyiu.com
www.libertyfianzas.com
www.agents.libertymutualsurety.com
www.ae-libertyiu.com
www.1rofianzas.com
validador.primerofianzas.com
validador.libertyfianzas.com
sme2.liuquote.com
sme1.liuquote.com
serf.primerofianzas.com
serf.libertyfianzas.com
qiservicing.libertymutualsurety.com
qi.libertymutualsurety.com
passport.lmig.com
passport-prod-pdc.lmig.com
passport-prod-kdc.lmig.com
ofacpayment.libertymutual.com
myPassword.lmig.com
myPassword-prod-pdc.lmig.com
myPassword-prod-kdc.lmig.com
lmsuretyext.libertymutual.com
execute.lmig.com
cloudmonitor-www.libertyiu.com
cfdi.primerofianzas.com
cfdi.libertyfianzas.com
bonds.libertymutualsurety.com
bfl.libertymutualsurety.com
agents.libertymutualsurety.com
accidenthealth.libertyiu.com.au

Other certificates including the domain name libertyiu.com

(limited to 100 certificates)
storagetanks.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-03p.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
cs-pool-03k.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmsip-hlyncf01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
sip-kdc-03.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
secure.libertyiu.com
sip-pdc-03.libertymutual.com
secure.libertyiu.com
cswebext-pool-02p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
connect.libertyiu.com
cswebext-pool-03p.libertymutual.com
access-kdc-02.libertymutual.com
int-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cms.libertyiu.com
test-www.libertyiu.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
isoresponse.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
us-extranet.libertyiu.com
test-www.libertyiu.com
pdc-vpn-01.libertyiu.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
mail-na.lm.lmig.com
uk-secure.libertyiu.com
Cs-pool-03p.lm.lmig.com
test-www.libertyiu.com
cs-pool-02p.lm.lmig.com
cs-pool-02p.lm.lmig.com
cas-pdc.lm.lmig.com
cas-pdc.lm.lmig.com
uk-secure.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
secure.libertyiu.com
Cs-pool-03k.lm.lmig.com
www.libertyiu.com
connect.libertyiu.com
secure.libertyiu.com
webmail-ap.libertyiu.com
eu-access-01.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
storagetanks.libertyiu.com
vmsip-hsfbfe01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmqip-hlyncf01.lm.lmig.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
eu-pool-02.lm.lmig.com
test-www.libertyiu.com
sip-kdc-03.libertymutual.com
test-www.libertyiu.com
storagetanks.libertyiu.com
mail-na.lm.lmig.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cs-pool-02k.lm.lmig.com
cswebext-pool-03k.libertymutual.com
us-mdm.libertyiu.com
int-www.libertyiu.com
www.libertyiu.com
cs-pool-02k.lm.lmig.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for www.libertyiu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILaTCCClGgAwIBAgIQAqZ9hgrANXfxI6bYM/BcFDANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwNjIxMDAwMDAwWhcN
MTkxMTI3MTIwMDAwWjCBkjELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU5ldyBIYW1w
c2hpcmUxEzARBgNVBAcTClBvcnRzbW91dGgxHTAbBgNVBAoTFExpYmVydHkgTXV0
dWFsIEdyb3VwMRswGQYDVQQLExJHbG9iYWwgU3BlY2lhbHRpZXMxGjAYBgNVBAMT
EXd3dy5saWJlcnR5aXUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8csJ7SUZtLDjVuSRPQ58raqVzdrpW7evayqxD96FIO8UpJlA7e/QHwK55qW
8NGnVpyvS8MEd2qmXnZhsv6mG5AqGVg8X6a/faGv6PrlR/y1QkfMjZDNzi4EkaOv
AXrzn+E1n9h06wXs7nRvsZI9kS4QWOhAcVJzPT3uPI84CwLvC1/7u7rPpFB8v4Rh
Fye3H08Zb+6tjV+lYzxpMEAt+Kn1zhYXIF777D9HFmRecFiHOV2Mxv+Zze2Tqzze
lMVAdc6Le0tgp9SS2tLUSDzqEkzWv8apCkV7v9T3VK0dndsq5Dnuyakzy8fRb8zL
VUT2jvi9r/XanaG3w2lOq9VlCQIDAQABo4IH/TCCB/kwHwYDVR0jBBgwFoAUD4Bh
HIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFEAj8tg+0lahbaUv5PHMNIAIszxI
MIIEwAYDVR0RBIIEtzCCBLOCDmxpYmVydHlsaW5rLmFlgg5saWJlcnR5bGluay5l
dYIRbGliZXJ0eWxpbmsuY28udWuCFXd3dy5saWJlcnR5bGluay5jby51a4ISd3d3
LmxpYmVydHlsaW5rLmFlghJ3d3cubGliZXJ0eWxpbmsuZXWCH3d3dy5saWJlcnR5
c3BlY2lhbHR5bWFya2V0cy5jb22CEHd3dy5sc21pdGFseS5jb22CDnlvdXJsaWJl
cnR5LmZyghZ3d3cucHJpbWVyb2ZpYW56YXMuY29tghh3d3cubG1zLmFlLWxpYmVy
dHlpdS5jb22CD3d3dy5saXVyaXNrLmNvbYIPd3d3LmxpdXF1b3RlLmllghJ3d3cu
bGl1cXVvdGUuY28udWuCDnd3dy5saXVwYWwuY29tghB3d3cubGl1Y2FyZ28uY29t
ghF3d3cubGl1Y2FuYWRhLmNvbYIPd3d3LmxpdS11c2EuY29tghh3d3cubGl1LWxh
dGluYW1lcmljYS5jb22CD3d3dy5saXUtZWlsLmNvbYIad3d3LmxpYmVydHlzZWd1
cm9zcGVydS5jb22CEXd3dy5saWJlcnR5aXUuY29tghZ3d3cubGliZXJ0eWZpYW56
YXMuY29tgiJ3d3cuYWdlbnRzLmxpYmVydHltdXR1YWxzdXJldHkuY29tghR3d3cu
YWUtbGliZXJ0eWl1LmNvbYISd3d3LjFyb2ZpYW56YXMuY29tghx2YWxpZGFkb3Iu
cHJpbWVyb2ZpYW56YXMuY29tghx2YWxpZGFkb3IubGliZXJ0eWZpYW56YXMuY29t
ghFzbWUyLmxpdXF1b3RlLmNvbYIRc21lMS5saXVxdW90ZS5jb22CF3NlcmYucHJp
bWVyb2ZpYW56YXMuY29tghdzZXJmLmxpYmVydHlmaWFuemFzLmNvbYIjcWlzZXJ2
aWNpbmcubGliZXJ0eW11dHVhbHN1cmV0eS5jb22CGnFpLmxpYmVydHltdXR1YWxz
dXJldHkuY29tghFwYXNzcG9ydC5sbWlnLmNvbYIacGFzc3BvcnQtcHJvZC1wZGMu
bG1pZy5jb22CGnBhc3Nwb3J0LXByb2Qta2RjLmxtaWcuY29tgh1vZmFjcGF5bWVu
dC5saWJlcnR5bXV0dWFsLmNvbYITbXlQYXNzd29yZC5sbWlnLmNvbYIcbXlQYXNz
d29yZC1wcm9kLXBkYy5sbWlnLmNvbYIcbXlQYXNzd29yZC1wcm9kLWtkYy5sbWln
LmNvbYIdbG1zdXJldHlleHQubGliZXJ0eW11dHVhbC5jb22CEGV4ZWN1dGUubG1p
Zy5jb22CHmNsb3VkbW9uaXRvci13d3cubGliZXJ0eWl1LmNvbYIXY2ZkaS5wcmlt
ZXJvZmlhbnphcy5jb22CF2NmZGkubGliZXJ0eWZpYW56YXMuY29tgh1ib25kcy5s
aWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIbYmZsLmxpYmVydHltdXR1YWxzdXJldHku
Y29tgh5hZ2VudHMubGliZXJ0eW11dHVhbHN1cmV0eS5jb22CH2FjY2lkZW50aGVh
bHRoLmxpYmVydHlpdS5jb20uYXUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3Js
My5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2Ny
bDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3Bglg
hkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29t
L0NQUzAIBgZngQwBAgIwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwCQYD
VR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcApLkJkLQYWBSHuxOi
zGdwCjw1mAT5G9+443fNDsgN3BAAAAFkI3WIvQAABAMASDBGAiEAjS6USaRNhEG5
xQuW3ulFjVl69/WSSfvyfKyYB/YgH1wCIQDjVRI+HZCQKnMOBKyBED1Jpw1L3TeE
EmBJBCV8cEd/KAB2AId1v+dZfPiMQ5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAAB
ZCN1iZYAAAQDAEcwRQIgD6s8+1HHYshBkTaAM2Z+BFucQlXQq7yzUGSF50G36skC
IQDKoSXHBeA8FdDYg1RU6shWUEAdf36II6gS2nLG6wBLzwB1AG9Tdqwx8DEZ2JkA
pFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABZCN1ipAAAAQDAEYwRAIgPvQHeghk+cwh
9nkNVLZL9NSmYKo0BuaxW/YHaKjLAw0CIEx3fWaQLl6xbbEeqt1fI/V7ScJWDd8Y
BSyUQGyXb2wnMA0GCSqGSIb3DQEBCwUAA4IBAQBcHEkvrGBNRq6bM5APrDf5ZT0v
/8FtTJHBQJIgc5hOVtHiheik3kdwW7wf8IOkjoaZEXbnu7vhadUjEwdKzHFnD8OX
vmtnDC6s/wiTT8ySlpL5+yqUrAq7iY3pnPSPkPOXEx+9iI/VUlm4+6VHfv2TIdoP
+Q56eLImDXIeiO56I4Bd3v0Z7OGt6TniCT89TKEw4vjv+1o+bJnTxuNUX9t/JkzF
ziPt2DIJTGzxQhzJUFQoAJGd3169Mk3iKLid2Sa+odl1hUbiXnVofoZmzqOm+TgK
qtMdZ0l/a6+E25iMmQDNsPhwxhL2Rt0yI1/iAHz4QTZgOGe1r0T90h2Wpfq1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8csJ7SUZtLDjVuSRPQ5
8raqVzdrpW7evayqxD96FIO8UpJlA7e/QHwK55qW8NGnVpyvS8MEd2qmXnZhsv6m
G5AqGVg8X6a/faGv6PrlR/y1QkfMjZDNzi4EkaOvAXrzn+E1n9h06wXs7nRvsZI9
kS4QWOhAcVJzPT3uPI84CwLvC1/7u7rPpFB8v4RhFye3H08Zb+6tjV+lYzxpMEAt
+Kn1zhYXIF777D9HFmRecFiHOV2Mxv+Zze2TqzzelMVAdc6Le0tgp9SS2tLUSDzq
EkzWv8apCkV7v9T3VK0dndsq5Dnuyakzy8fRb8zLVUT2jvi9r/XanaG3w2lOq9Vl
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3522923191188062855909419038775729172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Specialties'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertyiu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23704778639509082070886603635120254372689811071465626756051942192564685405376086360323044949208429514800111832304947296990987229824333915956798408683630091541532917774661496750697867736836960008371878241168507571073654797935720970271793537433745238767462738874836209296455648503970710026726316531225440290461123815983818955700916049767756234994284161020970815928059829670120644506014595777488378926957155928790774131885246157147800057688615105718304943071707997055228915084564974377261975434406236724753096387764022157175992150701917391378751007874193149605338548296939964037253917790526087909614432444897714502984969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4023f2d83ed256a16da52fe4f1cc348008b33c48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylink.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylink.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylink.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylink.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylink.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylink.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsmitaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourliberty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuquote.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertysegurosperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1rofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validador.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'validador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme2.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme1.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-prod-pdc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-prod-kdc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myPassword.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myPassword-prod-pdc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myPassword-prod-kdc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmsuretyext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'execute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfdi.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfdi.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonds.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accidenthealth.libertyiu.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164237588bd00000403004830460221008d2e9449a44d8441b9c50b96dee9458d597af7f59249fbf27cac9807f6201f5c022100e355123e1d90902a730e04ac81103d49a70d4bdd378412604904257c70477f280076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016423758996000004030047304502200fab3cfb51c762c84191368033667e045b9c4255d0abbcb3506485e741b7eac9022100caa125c705e03c15d0d8835454eac85650401d7f7e8823a812da72c6eb004bcf0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016423758a90000004030046304402203ef4077a0864f9cc21f6790d54b64bf4d4a660aa3406e6b15bf60768a8cb030d02204c777d66902e5eb16db11eaadd5f23f57b49c2560ddf18052c94406c976f6c27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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