securefile.libertymutual.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:f8:a2:f1:71:a2:0a:9d:ed:fd:7a:ab:98:60:f1:f6 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Corp ETS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:f8:a2:f1:71:a2:0a:9d:ed:fd:7a:ab:98:60:f1:f6
Serial Number (int): 19900186441416119210385110226937377270
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 04:e0:08:dd:24:a4:4d:50:dd:c6:71:0d:3c:7f:3f:e6:3b:a1:b4:6f
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 27:47:28:d0:a7:92:1d:aa:55:45:36:86:77:a3:18:7a:3d:eb:e5:ac
Fingerprint (sha256): 08:a2:15:a2:dd:7d:f4:52:b0:cb:e3:da:1a:e5:67:c6:4a:94:5a:20:6b:fb:ff:52:d4:62:b8:c5:1e:34:34:8a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate securefile.libertymutual.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securefile.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.blueprint.lmig.com
blueprint.lmig.com
libertymutualsurety.com
www.libertymutualsurety.com
attend.lmimeetings.com
www.attend.lmimeetings.com
plan.lmimeetings.com
www.plan.lmimeetings.com
lrn.libertymutual.com
mypassport.lmig.com
www.LibertyMutualProperty.com
LibertyMutualProperty.com
qcc.libertymutualgroup.com
givingreport.libertymutualgroup.com
gis-nsc-slack.libertymutual.com
libertymutualbrand.com
secrets-management-slackbot.libertymutual.com
sureroute-uswest1.libertymutual.com
www.libertymutualbrand.com
hotelr.libertymutual.com
sureroute-apse2.libertymutual.com
sureroute-euwest1.libertymutual.com
sureroute-useast1.libertymutual.com
viewpoint.libertymutualgroup.com
www.helpingyousucceed-libertymutual.com
datahub-listener.libertymutual.com
fileaccess-r.lmig.com
mobileaccess.lmig.com
fileaccess.lmig.com
emergencyportal.lmig.com
claims-intake.libertymutualsurety.com
libertymutualgrouptherightfit.com
libertymutualcampus.com
mylmpursuit.com
www.libertymutualcampus.com
www.libertymutualgrouptherightfit.com
www.mylmpursuit.com
b2b-wbft.libertymutual.com
b2b-wbft-test.libertymutual.com
googlerestapi.libertymutualgroup.com
ci.forge.libertymutual.com
forge.libertymutual.com
uscm.forge.libertymutual.com
workgrid.io
www.workgrid.io
whatsyourpursuit.libertymutualgroup.com
www-stage.libertymutualgroup.com
www.workgridsoftware.com
www.workgrid.com
workgridsoftware.com
workgrid.com
boardofdirectors.libertymutualgroup.com
www.lmi.com
www.lmi.co
www.lmglogos.com
www.lmemergencyportal.com
www.libertymutualsafetynet.com
www.libertymutualgroup.com
tuitionreimbursement.libertymutual.com
travelportal.libertymutual.com
tempstaffing.libertymutual.com
spacewalker.libertymutual.com
servewithliberty.libertymutual.com
securefile.libertymutual.com
search.libertymutualgroup.com
risktracresources.libertymutual.com
realestateatliberty.libertymutual.com
prod.emergencyportal.libertymutual.com
policyholders.libertynorthwest.com
partnercomm.libertymutual.com
myworkplacerequests.libertymutual.com
mytoken.libertymutual.com
lmsso.lmig.com
lmi.com
lmi.co
libertypac.libertymutual.com
libertymutualgroup.com
libertymmhtables.libertymutual.com
legallibrary.libertymutual.com
learningcenter.libertymutual.com
hiringatliberty.libertymutual.com
hal.libertymutual.com
givewithliberty.libertymutual.com
fusion.libertymutual.com
extecollaborate.lmig.com
everbridge.libertymutual.com
eservices.lmig.com
eservices-kc.lmig.com
enterpriseid-external.lmig.com
enavigatemobile.libertymutual.com
employeerecognitioncenter.libertymutual.com
employeelearningcenter.libertymutual.com
counsellink.libertymutual.com
corpsplash.lmig.com
cloudmonitor-securefile.libertymutual.com
cappp.lmig.com
buysmart.libertymutual.com
billinginquiry.lmig.com
avature.libertymutual.com
apis.libertymutual.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for securefile.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKR2lCaY3dE4wfsOuCkk
P9peDUwGhXNRMNVggeabszpzArWe7lN/j24aptvbGPFEb2wwBP/fdVhQOrT4gceu
hFT7GZYsd5Le+6S6W0K7kwMKo1jZJDiW+37+H1TyQCOGQZWMIka8K3KQ7otwFfnK
P9J1BidL95SPoMX4Mct58GwQjGUVe7YPnK4B055Z25crS/3OPsRVGA718/hiy1Ji
KAKTmtawmLTT0ozi7UHytczkM+J/UQwpKZBMnH0/xcmhLeQNHci6DOUJD6xKD+sN
v8tQStKuxrLasq6LDPgc7uTyIqR/yiJE/DV8KwLmhHHxNrxFQVQX9xjziHblkgl9
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19900186441416119210385110226937377270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corp ETS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securefile.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20279228620185049497479601948924646790225707679262299318106350587715657216159526595112762235083570983758227997167495024746401336888210804028233433501557274531380016438801331147699208974944084775811347291932630632380231415581629535261435303530234949832870850264358606366838133667389568580140258888938059173629489119805399155625721536872626656113573617369977859300264914787902392130573475285164828378720768244666797407719485063076103039911144800464247699458755604356166793783449229156421630680725215696648253424645568126238756692683793710348100660431938797674361335700665403831964415034404767465129326234377789947608443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04e008dd24a44d50ddc6710d3c7f3fe63ba1b46f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2877 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blueprint.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprint.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attend.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attend.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plan.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrn.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypassport.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.LibertyMutualProperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LibertyMutualProperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingreport.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis-nsc-slack.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secrets-management-slackbot.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-uswest1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelr.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-apse2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-euwest1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-useast1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoint.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpingyousucceed-libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahub-listener.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileaccess-r.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileaccess.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileaccess.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyportal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-intake.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualgrouptherightfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylmpursuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualgrouptherightfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mylmpursuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-wbft.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-wbft-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlerestapi.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscm.forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgrid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgrid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsyourpursuit.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgridsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgridsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardofdirectors.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmglogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmemergencyportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsafetynet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuitionreimbursement.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempstaffing.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacewalker.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securefile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktracresources.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.emergencyportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnercomm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworkplacerequests.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytoken.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmsso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertypac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legallibrary.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiringatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extecollaborate.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everbridge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-kc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseid-external.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enavigatemobile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeerecognitioncenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeelearningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counsellink.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpsplash.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-securefile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysmart.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avature.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016659c0467e0000040300473045022044722b71b44ad2a691d32c4dca7d5c838cd67d65c01c742c3920a34373b8a713022100c751462f4370d7e273dd965b5d8d7632a78ee99b4b2263387fb4d5aed9f256ed0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016659c0473900000403004730450220064cfaffd2cb937fe1c67e715e13cab1d6440492151d950befcc7a6cca200c24022100a432bab5ebb882ecef30663560954cb5eb54d31554a7ff39a69e625188ce8663
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005d70291ee103e2f36a9662029ba89e3e44c782e2f142592b465a9fea23c46b9200946a7f75a11c7863d5dc963de33b8f62ac386ae997c28142eacd9e89996558d2315ee6ccd81c49ad12bdbd6220729704fe6c2598b97fdb92a14bc058426ee3b551aa0977a84aa724809581368fa1fa6a257b557ab16dba3e5d791eca8304d85608c50c5b21342042f2f240a573eeda9ab47daa46332f3f4eb82f8d715f1ea9ec110ed6fcf1a216a559ca63fa71e58eaf1ebf95c60028033973b2b6153d54a06196408cc56f613c6791001f34620b1faa2f3d382a03d94b76ab036257fc28e65d53e0b899fefd85923e2da1f9bde34f0f3aff90dbee84b4a2b8414d12004327