www.libertymutual.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:ca:eb:4f:f3:3e:df:15:29:5c:08:e4:0f:37:46:8b was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Personal Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ca:eb:4f:f3:3e:df:15:29:5c:08:e4:0f:37:46:8b
Serial Number (int): 7699756644911175580405024070678562443
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8e:7a:f9:98:65:71:56:2e:77:df:d7:26:2d:ee:98:2c:46:6f:e5:86
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 30:55:ea:50:87:7f:28:bc:ab:ff:bd:a3:ff:6f:af:e4:17:a2:27:41
Fingerprint (sha256): 07:29:1f:de:8d:82:df:d1:99:0a:ad:fa:11:f1:0e:37:74:1d:f5:71:94:4a:ba:ce:04:7e:8f:6a:10:66:b3:08

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.libertymutual.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

direct-service.libertymutual.com
claimsai-apigateway.lmig.com
trn-tts-gateway.libertymutual.com
safeco-insurance-agent.lmig.com
kraken-notifications.libertymutual.com
fileaclaim.libertymutual.com
opschat.libertymutual.com
welcome-insurance-staging-external.libertymutual.com
edp-uscmfinservices.libertymutual.com
totalhomescore.com
www.totalhomescore.com
agencyinsights.libertymutual.com
esalesquotefeed.libertymutual.com
pmap.lmig.com
int-demo-news.agent.safeco.com
int-news.agent.safeco.com
int-demo-ignite.agent.safeco.com
tuitionbot.libertymutual.com
geo.libertymutual.com
int-cm-ignite.agent.safeco.com
int-ignite.agent.safeco.com
gigupjobs.com
www.gigupjobs.com
telematics.libertymutual.com
welcome-insurance.libertymutual.com
safeco-insurance-advisor-production.prod.uscm.libertymutual.com
hearsay.libertymutual.com
www.safeco.com
www.libertymutualonline.com
www.libertymutualimages.com
www.libertymutual.com
webchat-launch.libertymutual.com
tools.safeco.com
thirdpartytraining.libertymutual.com
teen.safeco.com
solarialabs.io
solarialabs.com
solaria.io
selfregistration.libertymutual.com
select-quote.safeco.com
select-quote.esurance.safeco.com
secure.safeco.com
salescompreporting.libertymutual.com
safesite.safeco.com
rpama-ext.safeco.com
rpama-ext.libertymutual.com
responsibility-project.libertymutual.com
realtimedocs.safeco.com
quoterequest.libertymutual.com
quote.safeco.com
quote.esurance.safeco.com
public.libertymutual-cdn.com
prospect.libertymutual.com
printportal.libertymutual.com
pmviews.libertymutual.com
pmsrc.lmig.com
pmactivityinbox-web.libertymutual.com
pi-login-secure.libertymutual.com
pi-eservices.libertymutual.com
openseas.safeco.com
online.libertymutual.com
myclaiminfoportal.libertymutual.com
mobilegateway.libertymutual.com
mobilefirst.libertymutual.com
mobile.online.libertymutual.com
mobile.libertymutual.com
mileage.safeco.com
maintenance.libertymutual.com
lifessstatus-portal.libertymutual.com
lifeips-portal.libertymutual.com
libertymutual-quotes.com
insurance.libertymutual.com
gcm-innovation.libertymutual.com
frontline.libertymutual.com
financialaccountservice.libertymutual.com
ext-pm-content.libertymutual.com
esign.libertymutual.com
eservice.safeco.com
eservice.libertymutual.com
esales.libertymutual.com
docs.libertymutual.com
customer.safeco.com
csw.libertymutual.com
cloudmonitor-www.libertymutual.com
claiminfoportalapps.libertymutual.com
claiminfoportal.libertymutual.com
cfplp.libertymutual.com
cfp.libertymutual.com
cfa.libertymutual.com
ccc-ext.tkn.libertymutual.com
billing.select-quote.safeco.com
billing.select-quote.esurance.safeco.com
apptraxx-portal.libertymutual.com
amseec.libertymutual.com
ampl.libertymutual.com
agent.safeco.com
welcome.libertymutual.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for www.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRujCCEKKgAwIBAgIQBcrrT/M+3xUpXAjkDzdGizANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgxMTA4MDAwMDAwWhcN
MjAwNjA2MTIwMDAwWjCBljELMAkGA1UEBhMCVVMxFjAUBgNVBAgTDU5ldyBIYW1w
c2hpcmUxEzARBgNVBAcTClBvcnRzbW91dGgxHTAbBgNVBAoTFExpYmVydHkgTXV0
dWFsIEdyb3VwMRswGQYDVQQLExJQZXJzb25hbCBJbnN1cmFuY2UxHjAcBgNVBAMT
FXd3dy5saWJlcnR5bXV0dWFsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBALyfVV18LdNkk0UOJP12Ji+UcrTvtYfv/4dPVsglLKOwGUwuzE07iDjr
LabJF9FrwO689A2vN2bbauCbqC1Jgg0dTMorcf9WRDODAc4NXucdj/fUWZ+8hQEw
fSkQ4xoTWz8e2TczliDu5ZWfG5wVNfKjLTJ48HiKKw+/wqBByKy5GafjYCKmV6fm
Oc4JRi5ec2GjIsJSAHkcO6wZGJi8hEHDC4NpCDT97OcDVYDPv6nVKdK3xv4vDkzy
exJufsq2ZEVg9lsTlRnJ5dZ7m7fKQBrA1JYqWFZ8mCKt5ko6o4I5Zo0W3r2pIbWQ
g87H0oXV238Lh2WBXv54PLGR74VgzGsCAwEAAaOCDkowgg5GMB8GA1UdIwQYMBaA
FA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBSOevmYZXFWLnff1yYt7pgs
Rm/lhjCCCw0GA1UdEQSCCwQwggsAgiBkaXJlY3Qtc2VydmljZS5saWJlcnR5bXV0
dWFsLmNvbYIcY2xhaW1zYWktYXBpZ2F0ZXdheS5sbWlnLmNvbYIhdHJuLXR0cy1n
YXRld2F5LmxpYmVydHltdXR1YWwuY29tgh9zYWZlY28taW5zdXJhbmNlLWFnZW50
LmxtaWcuY29tgiZrcmFrZW4tbm90aWZpY2F0aW9ucy5saWJlcnR5bXV0dWFsLmNv
bYIcZmlsZWFjbGFpbS5saWJlcnR5bXV0dWFsLmNvbYIZb3BzY2hhdC5saWJlcnR5
bXV0dWFsLmNvbYI0d2VsY29tZS1pbnN1cmFuY2Utc3RhZ2luZy1leHRlcm5hbC5s
aWJlcnR5bXV0dWFsLmNvbYIlZWRwLXVzY21maW5zZXJ2aWNlcy5saWJlcnR5bXV0
dWFsLmNvbYISdG90YWxob21lc2NvcmUuY29tghZ3d3cudG90YWxob21lc2NvcmUu
Y29tgiBhZ2VuY3lpbnNpZ2h0cy5saWJlcnR5bXV0dWFsLmNvbYIhZXNhbGVzcXVv
dGVmZWVkLmxpYmVydHltdXR1YWwuY29tgg1wbWFwLmxtaWcuY29tgh5pbnQtZGVt
by1uZXdzLmFnZW50LnNhZmVjby5jb22CGWludC1uZXdzLmFnZW50LnNhZmVjby5j
b22CIGludC1kZW1vLWlnbml0ZS5hZ2VudC5zYWZlY28uY29tghx0dWl0aW9uYm90
LmxpYmVydHltdXR1YWwuY29tghVnZW8ubGliZXJ0eW11dHVhbC5jb22CHmludC1j
bS1pZ25pdGUuYWdlbnQuc2FmZWNvLmNvbYIbaW50LWlnbml0ZS5hZ2VudC5zYWZl
Y28uY29tgg1naWd1cGpvYnMuY29tghF3d3cuZ2lndXBqb2JzLmNvbYIcdGVsZW1h
dGljcy5saWJlcnR5bXV0dWFsLmNvbYIjd2VsY29tZS1pbnN1cmFuY2UubGliZXJ0
eW11dHVhbC5jb22CP3NhZmVjby1pbnN1cmFuY2UtYWR2aXNvci1wcm9kdWN0aW9u
LnByb2QudXNjbS5saWJlcnR5bXV0dWFsLmNvbYIZaGVhcnNheS5saWJlcnR5bXV0
dWFsLmNvbYIOd3d3LnNhZmVjby5jb22CG3d3dy5saWJlcnR5bXV0dWFsb25saW5l
LmNvbYIbd3d3LmxpYmVydHltdXR1YWxpbWFnZXMuY29tghV3d3cubGliZXJ0eW11
dHVhbC5jb22CIHdlYmNoYXQtbGF1bmNoLmxpYmVydHltdXR1YWwuY29tghB0b29s
cy5zYWZlY28uY29tgiR0aGlyZHBhcnR5dHJhaW5pbmcubGliZXJ0eW11dHVhbC5j
b22CD3RlZW4uc2FmZWNvLmNvbYIOc29sYXJpYWxhYnMuaW+CD3NvbGFyaWFsYWJz
LmNvbYIKc29sYXJpYS5pb4Iic2VsZnJlZ2lzdHJhdGlvbi5saWJlcnR5bXV0dWFs
LmNvbYIXc2VsZWN0LXF1b3RlLnNhZmVjby5jb22CIHNlbGVjdC1xdW90ZS5lc3Vy
YW5jZS5zYWZlY28uY29tghFzZWN1cmUuc2FmZWNvLmNvbYIkc2FsZXNjb21wcmVw
b3J0aW5nLmxpYmVydHltdXR1YWwuY29tghNzYWZlc2l0ZS5zYWZlY28uY29tghRy
cGFtYS1leHQuc2FmZWNvLmNvbYIbcnBhbWEtZXh0LmxpYmVydHltdXR1YWwuY29t
gihyZXNwb25zaWJpbGl0eS1wcm9qZWN0LmxpYmVydHltdXR1YWwuY29tghdyZWFs
dGltZWRvY3Muc2FmZWNvLmNvbYIecXVvdGVyZXF1ZXN0LmxpYmVydHltdXR1YWwu
Y29tghBxdW90ZS5zYWZlY28uY29tghlxdW90ZS5lc3VyYW5jZS5zYWZlY28uY29t
ghxwdWJsaWMubGliZXJ0eW11dHVhbC1jZG4uY29tghpwcm9zcGVjdC5saWJlcnR5
bXV0dWFsLmNvbYIdcHJpbnRwb3J0YWwubGliZXJ0eW11dHVhbC5jb22CGXBtdmll
d3MubGliZXJ0eW11dHVhbC5jb22CDnBtc3JjLmxtaWcuY29tgiVwbWFjdGl2aXR5
aW5ib3gtd2ViLmxpYmVydHltdXR1YWwuY29tgiFwaS1sb2dpbi1zZWN1cmUubGli
ZXJ0eW11dHVhbC5jb22CHnBpLWVzZXJ2aWNlcy5saWJlcnR5bXV0dWFsLmNvbYIT
b3BlbnNlYXMuc2FmZWNvLmNvbYIYb25saW5lLmxpYmVydHltdXR1YWwuY29tgiNt
eWNsYWltaW5mb3BvcnRhbC5saWJlcnR5bXV0dWFsLmNvbYIfbW9iaWxlZ2F0ZXdh
eS5saWJlcnR5bXV0dWFsLmNvbYIdbW9iaWxlZmlyc3QubGliZXJ0eW11dHVhbC5j
b22CH21vYmlsZS5vbmxpbmUubGliZXJ0eW11dHVhbC5jb22CGG1vYmlsZS5saWJl
cnR5bXV0dWFsLmNvbYISbWlsZWFnZS5zYWZlY28uY29tgh1tYWludGVuYW5jZS5s
aWJlcnR5bXV0dWFsLmNvbYIlbGlmZXNzc3RhdHVzLXBvcnRhbC5saWJlcnR5bXV0
dWFsLmNvbYIgbGlmZWlwcy1wb3J0YWwubGliZXJ0eW11dHVhbC5jb22CGGxpYmVy
dHltdXR1YWwtcXVvdGVzLmNvbYIbaW5zdXJhbmNlLmxpYmVydHltdXR1YWwuY29t
giBnY20taW5ub3ZhdGlvbi5saWJlcnR5bXV0dWFsLmNvbYIbZnJvbnRsaW5lLmxp
YmVydHltdXR1YWwuY29tgilmaW5hbmNpYWxhY2NvdW50c2VydmljZS5saWJlcnR5
bXV0dWFsLmNvbYIgZXh0LXBtLWNvbnRlbnQubGliZXJ0eW11dHVhbC5jb22CF2Vz
aWduLmxpYmVydHltdXR1YWwuY29tghNlc2VydmljZS5zYWZlY28uY29tghplc2Vy
dmljZS5saWJlcnR5bXV0dWFsLmNvbYIYZXNhbGVzLmxpYmVydHltdXR1YWwuY29t
ghZkb2NzLmxpYmVydHltdXR1YWwuY29tghNjdXN0b21lci5zYWZlY28uY29tghVj
c3cubGliZXJ0eW11dHVhbC5jb22CImNsb3VkbW9uaXRvci13d3cubGliZXJ0eW11
dHVhbC5jb22CJWNsYWltaW5mb3BvcnRhbGFwcHMubGliZXJ0eW11dHVhbC5jb22C
IWNsYWltaW5mb3BvcnRhbC5saWJlcnR5bXV0dWFsLmNvbYIXY2ZwbHAubGliZXJ0
eW11dHVhbC5jb22CFWNmcC5saWJlcnR5bXV0dWFsLmNvbYIVY2ZhLmxpYmVydHlt
dXR1YWwuY29tgh1jY2MtZXh0LnRrbi5saWJlcnR5bXV0dWFsLmNvbYIfYmlsbGlu
Zy5zZWxlY3QtcXVvdGUuc2FmZWNvLmNvbYIoYmlsbGluZy5zZWxlY3QtcXVvdGUu
ZXN1cmFuY2Uuc2FmZWNvLmNvbYIhYXBwdHJheHgtcG9ydGFsLmxpYmVydHltdXR1
YWwuY29tghhhbXNlZWMubGliZXJ0eW11dHVhbC5jb22CFmFtcGwubGliZXJ0eW11
dHVhbC5jb22CEGFnZW50LnNhZmVjby5jb22CGXdlbGNvbWUubGliZXJ0eW11dHVh
bC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v
c3NjYS1zaGEyLWc2LmNybDAvoC2gK4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29t
L3NzY2Etc2hhMi1nNi5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggr
BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIw
fAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2Vy
dC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwCQYDVR0TBAIwADCCAX4GCisG
AQQB1nkCBAIEggFuBIIBagFoAHUApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fN
DsgN3BAAAAFm9I+9QQAABAMARjBEAiB75k/oC2d4c6gL+Z49FfqOxMXNTIGp2W0t
hZILqOjjLQIgTQnticYNuAqKvl7O7ZVQYg4KqheCcnJF8h51sKI9PLEAdgCHdb/n
WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWb0j74aAAAEAwBHMEUCIDAz
yPzjQsS0mB797+76BTxq2m77rjdMsoWifmBrj275AiEAyWyp3Tb75kKodwp5QSHF
Wnc0A12ThJ/S2vP3GtbT0LEAdwC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2
jh7RhQAAAWb0j74zAAAEAwBIMEYCIQCaDzrTNmSRbPhHbDiNm/OWuSZtRrP/AF3i
8g5K2muXmQIhAJlEePoY9UOEdKpgpskn7S1/OtdjzP1eDcJ/0IMi9gIwMA0GCSqG
SIb3DQEBCwUAA4IBAQBWPfUQKVIfk9qp0m5xLG8W54jKyEL7Oq6ItMAP/r8xusQk
mX4lwrstovn/tL833lZ+iVwTCSaaq+/d+TnW7XprRERFzs+6yHGTOl+lDIXYWxF/
6RQMMWzcFMIEW79JjwxKJAqs5jWTvznG0UwEyezxw5R+9Z82CuoQ8D2vJ4p7flVm
U6kLKtI6osfGxcFcmsX4CROVyXQBRHHAxhByJERJxAZDKNAP8mt47F5ta91v20Yx
yPo5CNOLuTkLmS0jwtoon3jz7eh8lrFDqeWro7CaVAfwQrFsImLGcdW8q2jgFcir
bDMaF3M1Gd6awNfzoxOsCN/5YqmEOPoAcvHfNGS3
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ9VXXwt02STRQ4k/XYm
L5RytO+1h+//h09WyCUso7AZTC7MTTuIOOstpskX0WvA7rz0Da83Zttq4JuoLUmC
DR1Myitx/1ZEM4MBzg1e5x2P99RZn7yFATB9KRDjGhNbPx7ZNzOWIO7llZ8bnBU1
8qMtMnjweIorD7/CoEHIrLkZp+NgIqZXp+Y5zglGLl5zYaMiwlIAeRw7rBkYmLyE
QcMLg2kINP3s5wNVgM+/qdUp0rfG/i8OTPJ7Em5+yrZkRWD2WxOVGcnl1nubt8pA
GsDUlipYVnyYIq3mSjqjgjlmjRbevakhtZCDzsfShdXbfwuHZYFe/ng8sZHvhWDM
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7699756644911175580405024070678562443
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Personal Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23811371589973830810420451471134039852873681255682539043493671468188656324429330241901432822204017045471498619936221035994569532453419892073969163797340274200989697031039446759785081251230475078801388854614011878502202989527890626557055580917340495844140439351550291167096232196162956870689889358484138368857368882854283176255282877617303963270708705601380841431183229230947779738712112634427363291248113842914268956889069207581470189221538526075148063073902539785806501615007730590463676617897176309923942523687008631557256945863190674429181787426995484822718303068355139744020703897345087451518441295811594579659883
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e7af9986571562e77dfd7262dee982c466fe586
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2820 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct-service.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsai-apigateway.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-tts-gateway.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeco-insurance-agent.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraken-notifications.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileaclaim.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opschat.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome-insurance-staging-external.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edp-uscmfinservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalhomescore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalhomescore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencyinsights.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esalesquotefeed.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmap.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-demo-news.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-news.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-demo-ignite.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuitionbot.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-cm-ignite.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-ignite.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigupjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gigupjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telematics.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome-insurance.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeco-insurance-advisor-production.prod.uscm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearsay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchat-launch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdpartytraining.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teen.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarialabs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solaria.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfregistration.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'select-quote.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'select-quote.esurance.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salescompreporting.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safesite.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpama-ext.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpama-ext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'responsibility-project.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtimedocs.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quoterequest.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.esurance.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.libertymutual-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospect.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmviews.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmsrc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmactivityinbox-web.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi-login-secure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi-eservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openseas.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclaiminfoportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilegateway.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefirst.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.online.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mileage.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifessstatus-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeips-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual-quotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurance.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcm-innovation.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialaccountservice.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-pm-content.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservice.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservice.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esales.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csw.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-www.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claiminfoportalapps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claiminfoportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfplp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfa.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc-ext.tkn.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.select-quote.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.select-quote.esurance.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apptraxx-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amseec.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampl.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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