pcf-BAZRbYqBVu.us-east-1.production.lmig.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 10:f7:63:4c:6c:d1:1f:16:00:00:00:00:50:f9:80:1a was issued on by Entrust, Inc..

With 193 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Hosting
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:f7:63:4c:6c:d1:1f:16:00:00:00:00:50:f9:80:1a
Serial Number (int): 22552159270185062346363636946780651546
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 03:0e:f0:a9:e3:1b:bc:ce:7b:ca:a0:cc:7d:b8:d6:15:46:d9:86:16
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 98:c5:29:20:cd:ec:94:d4:e6:ec:40:09:3a:cf:70:82:dc:fc:7a:91
Fingerprint (sha256): 05:9f:68:32:54:f0:78:e8:d3:2e:cd:5f:66:43:e6:de:35:e1:b6:70:90:87:aa:3a:e0:62:27:81:c1:ba:b9:f0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate pcf-BAZRbYqBVu.us-east-1.production.lmig.com

193

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pcf-BAZRbYqBVu.us-east-1.production.lmig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pcf-BAZRbYqBVu.us-east-1.production.lmig.com
gspngs.lmig.com
ci-envoy-ppuw-retrieve.lmig.com
slim.lmig.com
publiccloud-validation.lmig.com
ami-services.us-east-1.paas.lmig.com
publiccloud.lmig.com
ground-control-docs.lmig.com
lsm-us-cms.lmig.com
lsm-us-usermanagement.lmig.com
collectors.datahub.lmig.com
manager-center.lmig.com
mylibertyhome.lmig.com
mylibertypublisher.lmig.com
doors.lmig.com
tpd-driver-info.lmig.com
tpd-auto-info.lmig.com
tropicss.lmig.com
go.lmig.com
emergencyportal-console.lmig.com
design-system.safeco.com
ci-eclps-automatedrenewal.lmig.com
tropicss-font-icons.lmig.com
AgileOperationalExcellence.lmig.com
agileportfoliobuilder.lmig.com
lit-oncall.lmig.com
integrations-slim.lmig.com
secrets-management-docs.lmig.com
release.lmig.com
smart-workflow-delivery-api.lmig.com
delivery-spreadsheet-import.lmig.com
paq-api.lmig.com
cas.lmig.com
mypayslip.lmig.com
ecliq-system-messages-fe.lmig.com
ecliq-system-messages.lmig.com
ci-envoy-billing-retrieve.lmig.com
libertygps.lmig.com
agilehero.lmig.com
api-lmre-aggregation.lmig.com
lmre-aggregation.lmig.com
grs-billing.lmig.com
photoadmin.lmig.com
discovery.lmig.com
eyesee.lmig.com
tapi.lmig.com
legal-app-inventory.lmig.com
codeofconduct.lmig.com
techspend.lmig.com
recruiting-portal.lmig.com
ci-envoy-billing-store.lmig.com
ci-envoy-billing-delete.lmig.com
ci-envoy-billing-update.lmig.com
cloudforgedb-docs.lmig.com
myhelp.lmig.com
giraffesquad.lmig.com
merit.lmig.com
eservice-bpm-docs.lmig.com
identityandvalues.lmig.com
content-management.lmig.com
paso.lmig.com
tdm-on-demand.lmig.com
survey.lmig.com
cxweek.lmig.com
ourteam-service.lmig.com
dbdeploy-docs.lmig.com
ci-hotlinks.lmig.com
tdm-on-demand-api.lmig.com
agency-ui.lmig.com
lsm-df-property-submission-triage.lmig.com
paymenthub.lmig.com
gwl.lmig.com
niproperty.lmig.com
ci-envoy-ppuw-update.lmig.com
api.lmr-cms.lmig.com
api.lmrusermanagement.lmig.com
ci-policy-edocs-preference-ui.lmig.com
ourteam.lmig.com
eventappcentral.lmig.com
lwlarchive.lmig.com
tpd-annual-sales-info.lmig.com
sollab.lmig.com
iprevent.lmig.com
creativeserviceseval.lmig.com
lmicmh.lmig.com
eservicetraining.lmig.com
acordconversionservice.lmig.com
tournamentguide.lmig.com
signage.lmig.com
f5-prod.lmig.com
scorecards.lmig.com
suretydnb.lmig.com
cs.lmig.com
retrospec.lmig.com
ama.lmig.com
libertycast.lmig.com
tpdf.lmig.com
ci-envoy-ppuw-delete.lmig.com
mypassport-docs.lmig.com
hredm.lmig.com
crs-reporting.lmig.com
auto-summary-tool.lmig.com
mypassword.lmig.com
password.lmig.com
mypayslip-extracts.lmig.com
us-east-1.firewall-tester.paas.lmig.com
cloudforge.lmig.com
console.forge.lmig.com
ci-envoy-claims-update.lmig.com
ci-envoy-claims-search.lmig.com
ci-envoy-claims-store.lmig.com
ci-envoy-claims-retrieve.lmig.com
ci-envoy-ppuw-search.lmig.com
uscm-envoy-ppuw-retrieve.lmig.com
ci-envoy-nondomain-translation.lmig.com
uscm-envoy-ppuw-search.lmig.com
ci-envoy-ppuw-store.lmig.com
gsrelease.lmig.com
frpp-wallboard.lmig.com
agilityhealthcheck.lmig.com
claims-career-academy-training-portal.lmig.com
ci-alt-quoting-prod.lmig.com
dsl-ci-prod-pol.lmig.com
puborchestration.lmig.com
weconnect-api.lmig.com
moratoriums.lmig.com
lulo.lmig.com
job-posting-notifications.lmig.com
timeplanner.lmig.com
performance-and-talent-review.lmig.com
hrds-api.lmig.com
arb.lmig.com
hrds-portal.lmig.com
compworkq.lmig.com
lit-compute.lmig.com
unpkg.lmig.com
shields.lmig.com
asmd.lmig.com
nscportal.lmig.com
asap.lmig.com
delivery-rules.lmig.com
workflow-delivery-api.lmig.com
surety-ip-lawson-payments.paas.lmig.com
oem-telematics.lmig.com
tpd-vehicle-info.lmig.com
tpd-service-registry.lmig.com
tpd-class-code-info.lmig.com
tpd-building-info.lmig.com
tpd-business-info.lmig.com
dial2-recipientlist-service.lmig.com
cmpa-aws.lmig.com
secrets-management-bot.lmig.com
myexpense-receipts.lmig.com
roadmaps.lmig.com
immpgoals.lmig.com
bpm-countdown.lmig.com
tacos.lmig.com
immpfeedback.lmig.com
oncall-dsc.lmig.com
immpbuilds.lmig.com
voc.lmig.com
ci-policy-ecliq-transformation.lmig.com
ci-policydownload.lmig.com
ivansservices-api.lmig.com
ci-paygo-preference-api.lmig.com
ivansdownload.lmig.com
innersource.lmig.com
lit-innersource.lmig.com
navigation.forge.lmig.com
cdn.forge.lmig.com
colossus.lmig.com
pso.lmig.com
docs.forge.lmig.com
surety-ip-bie-intake.lmig.com
mybambooinsights.lmig.com
claimsstatus.lmig.com
myobjectives.lmig.com
icompatliberty.lmig.com
icompatliberty-api.lmig.com
eclps-wcrce-service.lmig.com
aws-ci-premium-generation.lmig.com
im-architecture-guide.lmig.com
eclps-financial-balancing-feed.lmig.com
noteworthy.lmig.com
LibertyNonEmployeePortal.lmig.com
PolicyWatchlist.lmig.com
tdw.lmig.com
statuscenter.lmig.com
swa.lmig.com
accelerator.lmig.com
ci-rules-platform-transaction-logging.lmig.com
rules-platform-transaction-logging.lmig.com
enterprisenarrative.lmig.com

Other certificates including the domain name lmig.com

(limited to 100 certificates)
prod-eu-west-1-alfresco-repo.aws.lmig.com
ete-claims.safeco.com
*.kdc.paas.lmig.com
uram.lmig.com
atlas-services.lmig.com
cerc-ar.lmig.com
testcommercial.lmig.com
dev-fsda.lmig.com
rdc-registry-nprod.lmig.com
*.eu-west-1.np.paas.lmig.com
relativity.lmig.com
kdc-citbi.lmig.com
vmkip-hjss0001.lm.lmig.com
VMPIP-HSIWAE01.lm.lmig.com
requestit.lmig.com
vmkit-a4swb001.lm.lmig.com
statuspage.io
lm-pmmstgy-d01k.lm.lmig.com
*.app-severless.rancher.sandbox.aws.lmig.com
dev-ap-southeast-2-gs-alfresco-52-saml.aws.lmig.com
www.libertymutual.com
omni-messaging.us-east-1.lmig.com
dial-auditlog-retention.lmig.com
vx-eatknas-p02k.lmig.com.lmig.com
ispoappskdc.lmig.com
ci-envoy-reins-search.lmig.com
ete-claims.safeco.com
85a-sseaesdm1.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
aep-lm-soap-client-invoker.production.us-east-1.aws.lmig.com
amcontactcenter.lmig.com
*.aws.lmig.com
uscm-sasgrid-web.lmig.com
compassdocuments.lmig.com
vxpip-hhspds01.lmig.com
PeopleAtLiberty.com
lmpproducerextranet.lmig.com
lm-ise-psn.lmig.com
test-pmsrc.lmig.com
testAvayaDev.lmig.com
statuspage.io
pfet02k03.lmig.com
cmpsccosrv.lmig.com
lcpet-havsbc01-inside.lmig.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
test-import.lmig.com
eip.lmig.com
lmpin-hcybrk02-r.lmig.com
vm-ceg-prd2-1.azr.lmig.com
0055-blox-ext-grid.lmig.com
ete-www2.libertymutual.com
dr-sslvpn-kc.lmig.com
perf-driverrisk.cf.reuse.lmig.com
denodo-solution-manager-non-production.aws.lmig.com
vckit-haespc02.lmig.com
ecr-nocustids-kdc.lmig.com
lsm-fred.lmig.com
comp3-ui.aws.lmig.com
perfandcompstatement.lmig.com
snd-ciapstableau.aws.lmig.com
puma.lmig.com
logging-old.datahub.aws.lmig.com
test-securefile.libertymutual.com
dev-compworkq-cmis.lmig.com
gateway-client.cf.reuse.lmig.com
vendors.test.wem.gde.aws.lmig.com
vxkip-pwaslp05.lmig.com
api.eco-development.lmig.com
pmit-easysuite.lmig.com
cs-tappool-03p.lm.lmig.com
gw-gde-equifax-service.test.wem.gde.aws.lmig.com
0038-sbc-ext-01.lmig.com
lm-hscyrkp-p01p.lm.lmig.com
lmb-datalake-zeppelin-prod.aws.lmig.com
contracts-portal.lmig.com
clworkbench-ws.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
LM-HS-LTAS-A-T01P.LMIG.COM
2pr-rpama.lmig.com
vxpif-p7fsa002.lmig.com
b2b-boomi-batch-kc.lmig.com
wcsvtrigger.lmig.com
vmpip-m566u5fh.lm.lmig.com
bp1054598.saagie.com
vmkip-hvcvdi22.lm.lmig.com
ci-envoy-ppuw-stage-translation.lmig.com
sit-eu-west-1-gs-alfresco.aws.lmig.com
inspire-interactive.development.aws.lmig.com
dev-iam-console.lmig.com
vckip-hcmad201.lmig.com
leservices-imp.lmig.com
ciim-claims-service-test.np.lmig.com
perf-www.liucanada.com
statuspage.io
smart-workflow-rules.lmig.com
grs-informatica-mdm-aws-production.aws.lmig.com
prod-b-us-east-1-ci-alfresco-ingest-share.aws.lmig.com
vmpip-hcypvw03.lm.lmig.com
brmspolicy-uat.libertyinsurance.in

Certificate

The complete raw certificate details for pcf-BAZRbYqBVu.us-east-1.production.lmig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBccJFSHX8Za/ywYUu2L
g/LDj5W9SneiyONzIl/YLcLHye+6LLRPFjFb7+9NBEveGgv93kk+zGlkskbCU0Gq
wkPVgiRUlmkznNKn/f/PHeis02OUt9QHVoWTzHLmgbh3JdwU1mnGCMIgQJ/fwo+J
DpX/gQCfsJUx+WvX0z4IZSXG2W160BcBIIbDw+/4RPsYXMmUeNdodB+/DTHRqyZH
tHja5D6Mnbao8CxoVc7PNcFAg/PBWmt/KvYErrYlf8ZD/BFyHoOqnL+pAVeaM7lQ
H/Kr7TAvr9strkE22PScRPSZTpzuO3QPxtS8n4XRiCAaIZqj3QnHkhvC69Wr8CcT
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22552159270185062346363636946780651546
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 14:15:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-29 14:45:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pcf-BAZRbYqBVu.us-east-1.production.lmig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18694665065873647444036745069133376284095654394543178127995249381222961015687630768554401016105630196983048018978315345970220821780722491349649873498684276637249231169395172966239616956338717192382804922711661527233820027030095627439764310428177698914475463985795091665416753908294153333414137640559654662465408073640966267537724717608755439162418323739123223004196152280816751361821466069606493745676493583680241206052425350504292232056264444350716740353811545334022335795126036538922925251500250134968623134688472951871020605831114556740913917519461397871585663789835120929708139059595418284916466359954966269334373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4986 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcf-BAZRbYqBVu.us-east-1.production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gspngs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-ppuw-retrieve.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slim.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publiccloud-validation.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ami-services.us-east-1.paas.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publiccloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ground-control-docs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsm-us-cms.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsm-us-usermanagement.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectors.datahub.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manager-center.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertyhome.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertypublisher.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'doors.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpd-driver-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpd-auto-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropicss.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyportal-console.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'design-system.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-eclps-automatedrenewal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tropicss-font-icons.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AgileOperationalExcellence.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agileportfoliobuilder.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lit-oncall.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integrations-slim.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secrets-management-docs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-workflow-delivery-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-spreadsheet-import.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paq-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypayslip.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecliq-system-messages-fe.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecliq-system-messages.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-billing-retrieve.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertygps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilehero.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-lmre-aggregation.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmre-aggregation.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-billing.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photoadmin.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discovery.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eyesee.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapi.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legal-app-inventory.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codeofconduct.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techspend.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruiting-portal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-billing-store.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-billing-delete.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-billing-update.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudforgedb-docs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhelp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giraffesquad.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merit.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservice-bpm-docs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identityandvalues.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-management.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdm-on-demand.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxweek.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourteam-service.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbdeploy-docs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-hotlinks.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdm-on-demand-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-ui.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsm-df-property-submission-triage.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymenthub.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwl.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niproperty.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-ppuw-update.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lmr-cms.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lmrusermanagement.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-policy-edocs-preference-ui.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourteam.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventappcentral.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lwlarchive.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpd-annual-sales-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sollab.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iprevent.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creativeserviceseval.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmicmh.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservicetraining.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acordconversionservice.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tournamentguide.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signage.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f5-prod.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorecards.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suretydnb.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retrospec.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ama.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycast.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpdf.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-ppuw-delete.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypassport-docs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hredm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crs-reporting.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-summary-tool.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypassword.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'password.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypayslip-extracts.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1.firewall-tester.paas.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudforge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'console.forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-claims-update.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-claims-search.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-claims-store.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-claims-retrieve.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-ppuw-search.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscm-envoy-ppuw-retrieve.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-nondomain-translation.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscm-envoy-ppuw-search.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-envoy-ppuw-store.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsrelease.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frpp-wallboard.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agilityhealthcheck.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-career-academy-training-portal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-alt-quoting-prod.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsl-ci-prod-pol.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puborchestration.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weconnect-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moratoriums.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lulo.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'job-posting-notifications.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timeplanner.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-and-talent-review.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrds-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arb.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrds-portal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compworkq.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lit-compute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unpkg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shields.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmd.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscportal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asap.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delivery-rules.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workflow-delivery-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surety-ip-lawson-payments.paas.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oem-telematics.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpd-vehicle-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpd-service-registry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpd-class-code-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpd-building-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpd-business-info.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dial2-recipientlist-service.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpa-aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secrets-management-bot.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myexpense-receipts.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roadmaps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immpgoals.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpm-countdown.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacos.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immpfeedback.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oncall-dsc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immpbuilds.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-policy-ecliq-transformation.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-policydownload.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivansservices-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-paygo-preference-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ivansdownload.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innersource.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lit-innersource.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navigation.forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colossus.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybambooinsights.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsstatus.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myobjectives.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icompatliberty.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icompatliberty-api.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclps-wcrce-service.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws-ci-premium-generation.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'im-architecture-guide.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclps-financial-balancing-feed.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noteworthy.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LibertyNonEmployeePortal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PolicyWatchlist.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tdw.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statuscenter.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accelerator.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-rules-platform-transaction-logging.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rules-platform-transaction-logging.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterprisenarrative.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							030ef0a9e31bbcce7bcaa0cc7db8d61546d98616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ba501beda9c478a10d1f38f2f9d588afd1947be4c6b286b28275ecd57906b629216330bc08cbe5ceb5d51f9e8cfa34d747ae1a665699e2d1424c8afc118f67b8be04624b44c528406dd958662e8adb2ab9bbc3d9febd75ab173d7225fca9e448f46119339909f3f59314cc97210923ba8ed50b5384202e9aed2d721bfb1bbb3cff46e0822a39a108940bf8cb09f93d4f27c0cdeabdb144cb876fcc172586a5bb63b98070478d62259f9a8a8fd4e425bf8523db81414134e86348f0fc012b6f01e181e24ef5ff061886342384cc95ee62841798890374dd122a331e13719603ef6adcddd4d09023eeaeae5116c35f2b1015b6b7aaa08163367d670f6e3c6d6280