techcampus.libertymutual.com

- Liberty Mutual Group -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 01:ed:ee:44:13:b0:6a:9e:1c:d8:26:94:17:6e:18:c4 was issued on by DigiCert Inc.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Corp ETS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ed:ee:44:13:b0:6a:9e:1c:d8:26:94:17:6e:18:c4
Serial Number (int): 2564634958351879706770323011642726596
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f5:12:36:da:ca:76:41:37:a9:d7:73:eb:44:5e:0e:eb:be:17:b6:2e
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 3b:6d:75:41:5b:db:8a:df:32:9d:78:99:48:93:4e:af:c8:bc:03:25
Fingerprint (sha256): 06:54:04:68:97:90:33:50:64:dc:7f:17:66:e7:76:4b:b5:f5:95:fe:d7:52:85:d9:5a:74:44:8c:9a:d3:79:10

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate techcampus.libertymutual.com

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for techcampus.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ami-services.lmig.com
apis.solarialabs.com
careers.libertymutualgroup.com
ci-policyquoteapi.libertymutual.com
developers.libertymutual.com
developers.libertyseguros.com.br
developers.solarialabs.com
ecxmlservices-kc-leg1.libertymutual.com
ecxmlservices-kc-leg2.libertymutual.com
ecxmlservices-kc.libertymutual.com
ecxmlservices-leg1.lmig.com
ecxmlservices-leg2.lmig.com
ecxmlservices.lmig.com
eservices-kc-leg1.lmig.com
eservices-kc-leg2.lmig.com
eservices-leg1.lmig.com
eservices-leg2.lmig.com
fieldglass.libertymutual.com
hellochaser.com
legalhold.lmig.com
lmb.myLibertyConnection.com
lmidp.libertymutual.com
lmidp.lmig.com
mycareerdevelopmentcenter.libertymutual.com
sms-kdc-leg1.libertymutual.com
sms-kdc-leg2.libertymutual.com
sms-kdc.libertymutual.com
sms-pdc-leg1.libertymutual.com
sms-pdc-leg2.libertymutual.com
sms-pdc.libertymutual.com
sms.libertymutual.com
sts.libertymutual.com
techcampus.libertymutual.com
therightfit.libertymutual.com
www.careers.libertymutualgroup.com
www.gowandry.com
www.hellochaser.com
torchbearers.libertymutual.com
us-east-1-lmidp.libertymutual.com
eu-west-1-lmidp.libertymutual.com
security-workshop.libertymutual.com
access.libertymutual.com
helpingyousucceed-libertymutual.com
www.viewpoint.libertymutualgroup.com
Relativity.LibertyMutual.com
libertymutualfoundation.org
libertymutualcommunications.com
www.libertymutualfoundation.org
www.libertymutualcommunications.com
www.ReLibera.com
www.lmimeetings.com
lmimeetings.com
meetingrequestform.lmimeetings.com
www.meetingrequestform.lmimeetings.com
meetingrequestformportal.lmimeetings.com
www.attend.lmimeetings.com
attend.lmimeetings.com
www.meetingrequestformportal.lmimeetings.com
easmd.libertymutual.com
easmd-np.libertymutual.com
libertygts.com
www.libertygts.com
fusionrestapiapp.libertymutualgroup.com
gwlreview.libertymutualgroup.com
agentportal.libertymutual.com
storefront.libertymutual.com
mypassword-pilot.lmig.com
gwlreview.lmigex.com
prod-lmidp-smtokenext.libertymutual.com
invitationalassets.lmigex.com
welcome.lmigex.com
emailtraining.lmigex.com
apis.eu-west-1.libertymutual.com
apis.us-east-1.libertymutual.com
www.concur-lit.lmig.com
qcc.lmigex.com
hscct-app-gateway.libertymutual.com
risktracdirector-hms.lmigex.com
risktrac-csp.lmigex.com
risktracdirector-lmi.lmigex.com
eventapps.lmigex.com
lps.lmig.com
prod-access.libertymutual.com
prod-lmidp.libertymutual.com
lps.libertymutual.com
prod.myliberty.lmig.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for techcampus.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYCU+YU4jAn4kbLFNQgj
UMDBTWIfNeKjpfJ1ZlcdR0UVgJCy9AchK+6X9HWuz2LrdkXQYRF4RkZ0tgh3a3v1
1MJLzeXrzSHdZtNo+fctI/YC8kQi61YlAPeQYmjOfnsmg6AEDP3cxF6iSYrSa8y1
/Jvz11LECwzR1priA9oLfDOqbYUup5v6qYvZQUunjoGUxpRGBXE8J4ibH5ranw0C
rwozf9A8HclP9OoZ64fQvHjg0hrP0YgB3rNhIHNwUP+RBX3kv2NZveWqxrHBpE0w
fsoea2ut9go4/UYbaxwV8UUA9s5xCRhXgPEfHERLzB10siioa2WEmIpLjybvi0WA
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2564634958351879706770323011642726596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corp ETS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'techcampus.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25942258632076364943919400916274692936875962575973036655576067425402436949592325773379010691692004065124806739584117781742865766490719932288954014981762071579071323844690326779023283574406575281007350290784677425418537270452787647187021775938911109812599629484553215177073491511558638676385824549301142341355951360168334832044890407084362640771586783886776619370476442622530066448555920210454032689823926073703208986083368990978862802216696092291106156693535117991170183018663442030176275690278302125147621841240501208623998659065636531348936198659716253013426295203431551754240957011090653103284068759450428314583111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f51236daca764137a9d773eb445e0eebbe17b62e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2510 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ami-services.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-policyquoteapi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-kc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-kc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-kc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-kc-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-kc-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldglass.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellochaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalhold.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmb.myLibertyConnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmidp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycareerdevelopmentcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-kdc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-kdc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-kdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-pdc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-pdc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-pdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcampus.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therightfit.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gowandry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellochaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torchbearers.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-west-1-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-workshop.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpingyousucceed-libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewpoint.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Relativity.LibertyMutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ReLibera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingrequestform.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetingrequestform.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingrequestformportal.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attend.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attend.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetingrequestformportal.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easmd.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easmd-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionrestapiapp.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwlreview.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storefront.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypassword-pilot.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwlreview.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-lmidp-smtokenext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitationalassets.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailtraining.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.eu-west-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.us-east-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concur-lit.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcc.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hscct-app-gateway.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktracdirector-hms.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktrac-csp.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktracdirector-lmi.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventapps.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-access.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.myliberty.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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