test-www.libertyiu.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 4c:12:2b:2a:74:e0:a6:03:1c:c1:12:08:9e:14:8f:c3 was issued on by Symantec Corporation.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Global Specialties
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:12:2b:2a:74:e0:a6:03:1c:c1:12:08:9e:14:8f:c3
Serial Number (int): 101115664530474860352051344797114601411
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): dd:fb:a0:7a:a4:5a:6b:5d:ee:d2:28:25:f1:77:c0:a1:b7:f2:67:ce
Fingerprint (sha256): 06:d5:79:31:d7:72:4a:7e:c8:6e:67:4e:0e:5c:76:62:3d:66:d6:5c:f3:69:e3:a9:4f:49:1a:46:9b:00:17:19

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate test-www.libertyiu.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-www.libertyiu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test.liuquote.co.uk
www.yourliberty.fr
www-uat.liucanada.lmig.com
www-uat.liu-usa.lmig.com
www-uat.libertyinternational.com
uat.liupal.com
uat.liucargo.com
uat.liu-eil.com
uat-www.liu-latinamerica.com
uat-agents.libertymutualsurety.com
tst-www.lms.ae-libertyiu.com
tst-www.liurisk.com
tst-www.liu-usa.com
tst-www.liu-latinamerica.com
tst-www.libertysegurosperu.com
tst-www.ae-libertyiu.com
tst-agents.libertymutualsurety.com
trn-qiservicing.libertymutualsurety.com
trn-qi.libertymutualsurety.com
testing.liuquote.com.au
test.primerofianzas.info
test.liuquote.ie
test-www.libertyiu.com
test-serf.libertyfianzas.com
test-qiservicing.libertymutualsurety.com
test-qi.libertymutualsurety.com
test-ofacpayment.libertymutual.com
test-lmsuretyext.libertymutual.com
test-execute.lmig.com
test-bfl.libertymutualsurety.com
test-accidenthealth.libertyiu.com.au
staging-bonds.libertymutualsurety.com
stage-qiservicing.libertymutualsurety.com
stage-qi.libertymutualsurety.com
stage-ofacpayment.libertymutual.com
stage-bfl.libertymutualsurety.com
sme2uat.liuquote.com
sme1uat.liuquote.com
qa-qiservicing.libertymutualsurety.com
qa-qi.libertymutualsurety.com
ps-qi.libertymutualsurety.com
ps-bfl.libertymutualsurety.com
perf-www.lms.ae-libertyiu.com
perf-www.liurisk.com
perf-www.liucanada.com
perf-www.liu-usa.com
perf-www.liu-latinamerica.com
perf-www.libertysegurosperu.com
perf-www.ae-libertyiu.com
perf-qiservicing.libertymutualsurety.com
perf-qi.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-agents.libertymutualsurety.com
passport-test.lmig.com
mkt-qiservicing.libertymutualsurety.com
mkt-qi.libertymutualsurety.com
int-www.liurisk.com
drp.primerofianzas.info
dev-ofacpayment.libertymutual.com
dev-execute.lmig.com
dev-bfl.libertymutualsurety.com
cloudmonitor-test-www.libertyiu.com
bfl.qa.libertymutualsurety.com

Other certificates including the domain name libertyiu.com

(limited to 100 certificates)
storagetanks.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-03p.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
cs-pool-03k.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmsip-hlyncf01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
sip-kdc-03.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
secure.libertyiu.com
sip-pdc-03.libertymutual.com
secure.libertyiu.com
cswebext-pool-02p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
connect.libertyiu.com
cswebext-pool-03p.libertymutual.com
access-kdc-02.libertymutual.com
int-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cms.libertyiu.com
test-www.libertyiu.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
isoresponse.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
us-extranet.libertyiu.com
test-www.libertyiu.com
pdc-vpn-01.libertyiu.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
mail-na.lm.lmig.com
uk-secure.libertyiu.com
Cs-pool-03p.lm.lmig.com
test-www.libertyiu.com
cs-pool-02p.lm.lmig.com
cs-pool-02p.lm.lmig.com
cas-pdc.lm.lmig.com
cas-pdc.lm.lmig.com
uk-secure.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
secure.libertyiu.com
Cs-pool-03k.lm.lmig.com
www.libertyiu.com
connect.libertyiu.com
secure.libertyiu.com
webmail-ap.libertyiu.com
eu-access-01.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
storagetanks.libertyiu.com
vmsip-hsfbfe01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmqip-hlyncf01.lm.lmig.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
eu-pool-02.lm.lmig.com
test-www.libertyiu.com
sip-kdc-03.libertymutual.com
test-www.libertyiu.com
storagetanks.libertyiu.com
mail-na.lm.lmig.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cs-pool-02k.lm.lmig.com
cswebext-pool-03k.libertymutual.com
us-mdm.libertyiu.com
int-www.libertyiu.com
www.libertyiu.com
cs-pool-02k.lm.lmig.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for test-www.libertyiu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3J+ezpIgGBj1ohsUDtLs
4dJbkjPcc8wtHNQwajLHf1ZqhffFVebKU2PcroVnek3zIbbgScfqrsN4EhuRvurF
eVNSJdxk7m1BZ1C53R8vhzjLvrrnDdz6A08UHGkK+ab51YuGExAigy4iUbA+nSC1
a7rqjbQV3Hkkb4RsTFOF6Q9Ljda/8PSo039g42Q8Hzf3dmb4xdjw/Wvs9VxrNkDH
4lqxvLZDFaJoS8F8ILOmbR201CUdYuaxcrltaFkI7d1lwkQ+ofc93BqPem0Kefzn
r5ML+Hcth2CQe0mw7DUwNztFCWtid8AmXNHdHt3OXhWWyWTpHg94kpUmmfmXBvxC
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101115664530474860352051344797114601411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Global Specialties'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-www.libertyiu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27851138815576448213266148733857506784991327090168206014920903676525516608862619586818557450416193749097677274687657262094822066653812059241477056534640981590889769185044314166120969175983944099682905461447238674634150315646970011576074575129429199828221005238113536539210547223450451193367607820379986699942326466236505175251130730746702816912893006115932371021943709543405029834518130233614521354033590545678885259517043280319764505854085173416748273868479270214275331459004062142645854972123894479588765764637400755182036755711592553347475546260857762144415790588663376566525880512829142638167529375051339257365211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1888 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourliberty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.liucanada.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.liu-usa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.libertyinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertysegurosperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.liuquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.liuquote.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-lmsuretyext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-execute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-accidenthealth.libertyiu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-bonds.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme2uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme1uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertysegurosperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drp.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-execute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfl.qa.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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