securefile.libertymutual.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:47:91:c5:26:b9:9f:0f:1b:13:95:ea:43:bc:49:7b was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Corp ETS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:47:91:c5:26:b9:9f:0f:1b:13:95:ea:43:bc:49:7b
Serial Number (int): 17651573591485256696423959587681225083
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7f:56:b1:4b:51:7b:b5:3b:2e:6a:f6:5a:54:e0:5b:d0:c1:c0:e8:89
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 71:8b:12:17:1e:89:59:ff:3e:ec:42:d8:d2:d4:eb:f5:02:41:8d:91
Fingerprint (sha256): 07:93:95:37:cc:fc:25:60:9b:d1:26:0d:03:23:d2:c3:d3:c4:de:ac:d6:f8:6c:67:93:5b:da:31:c6:b4:1d:e6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate securefile.libertymutual.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securefile.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secrets-management-slackbot.libertymutual.com
sureroute-uswest1.libertymutual.com
www.libertymutualbrand.com
hotelr.libertymutual.com
sureroute-apse2.libertymutual.com
sureroute-euwest1.libertymutual.com
sureroute-useast1.libertymutual.com
viewpoint.libertymutualgroup.com
www.helpingyousucceed-libertymutual.com
datahub-listener.libertymutual.com
fileaccess-r.lmig.com
mobileaccess.lmig.com
fileaccess.lmig.com
emergencyportal.lmig.com
claims-intake.libertymutualsurety.com
libertymutualgrouptherightfit.com
libertymutualcampus.com
mylmpursuit.com
www.libertymutualcampus.com
www.libertymutualgrouptherightfit.com
www.mylmpursuit.com
b2b-wbft.libertymutual.com
b2b-wbft-test.libertymutual.com
googlerestapi.libertymutualgroup.com
ci.forge.libertymutual.com
forge.libertymutual.com
uscm.forge.libertymutual.com
workgrid.io
www.workgrid.io
whatsyourpursuit.libertymutualgroup.com
www-stage.libertymutualgroup.com
www.workgridsoftware.com
www.workgrid.com
workgridsoftware.com
workgrid.com
boardofdirectors.libertymutualgroup.com
www.lmi.com
www.lmi.co
www.lmglogos.com
www.lmemergencyportal.com
www.libertymutualsafetynet.com
www.libertymutualgroup.com
tuitionreimbursement.libertymutual.com
travelportal.libertymutual.com
tempstaffing.libertymutual.com
spacewalker.libertymutual.com
servewithliberty.libertymutual.com
securefile.libertymutual.com
search.libertymutualgroup.com
risktracresources.libertymutual.com
realestateatliberty.libertymutual.com
prod.emergencyportal.libertymutual.com
policyholders.libertynorthwest.com
partnercomm.libertymutual.com
myworkplacerequests.libertymutual.com
mytoken.libertymutual.com
mypersonalbest.libertymutual.com
lmsso.lmig.com
lmi.com
lmi.co
libertypac.libertymutual.com
libertymutualgroup.com
libertymmhtables.libertymutual.com
libertyhealthcenter.libertymutual.com
legallibrary.libertymutual.com
learningcenter.libertymutual.com
hiringatliberty.libertymutual.com
hal.libertymutual.com
givewithliberty.libertymutual.com
fusion.libertymutual.com
extecollaborate.lmig.com
everbridge.libertymutual.com
eservices.lmig.com
eservices-kc.lmig.com
eproc.libertymutual.com
enterpriseid-external.lmig.com
enavigatemobile.libertymutual.com
employeerecognitioncenter.libertymutual.com
employeelearningcenter.libertymutual.com
counsellink.libertymutual.com
corpsplash.lmig.com
cloudmonitor-securefile.libertymutual.com
cappp.lmig.com
buysmart.libertymutual.com
billinginquiry.lmig.com
b2b.libertymutual.com
avature.libertymutual.com
apis.libertymutual.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for securefile.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU8+P+vwxdSn+dAcuqFW
yE30xNueMs8fOV3+2A6VHBLgTuTAm8ZIR/JrIdD0H+KL3B2nFcMVKfkAsjXHNgKa
o3/oiuyJq1oGhUeAkYDEZrVHaHU6W42ld02PZun9yZ/bRIFbLv8IktuYsRtEUA2o
eWOUynJt4M0xtXBcfVOYgCA+SzW8Mm3IlUbcNyFEfIhT+Afk3XV0xuaZ9EXbv2F4
0vSBLwqg7PR6Yr74Uph32FlpQzHw5vhrSHUJrRTXXLvJC46x/aHRrnmBUESbuD1v
K+v2B+ITN9cphgR+N5IJkig3XsSpnivFeceSD7/EjWFBZ5ngtPtgjoEwV2jV5b19
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17651573591485256696423959587681225083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corp ETS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securefile.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23898115898586884079915224886215275658790091509870683880669012964561913094148456867099985506226611687805720979658450174001300221568894349253670857360494457067524663315310119668632903458554087579069013588265345308376860285697424855594350432251752612040394449310806027765146878359995179918979248511965691547611170692942460128085403579019176297431356910672496039016819055599589268746054733450569054486959958175441196587157068421342352569758941147934323878445498776144406783894890142901113438101684368874061569978335726934945330908903606129194631184668227435453175427777622840290784573706441011147589739315216767245974969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f56b14b517bb53b2e6af65a54e05bd0c1c0e889
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2576 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secrets-management-slackbot.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-uswest1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelr.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-apse2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-euwest1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-useast1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoint.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpingyousucceed-libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahub-listener.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileaccess-r.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileaccess.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileaccess.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyportal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-intake.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualgrouptherightfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylmpursuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualgrouptherightfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mylmpursuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-wbft.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-wbft-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlerestapi.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscm.forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgrid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgrid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsyourpursuit.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgridsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgridsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardofdirectors.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmglogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmemergencyportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsafetynet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuitionreimbursement.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempstaffing.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacewalker.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securefile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktracresources.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.emergencyportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnercomm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworkplacerequests.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytoken.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypersonalbest.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmsso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertypac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyhealthcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legallibrary.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiringatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extecollaborate.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everbridge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-kc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eproc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseid-external.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enavigatemobile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeerecognitioncenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeelearningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counsellink.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpsplash.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-securefile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysmart.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avature.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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