www.libertymutual.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:52:7e:5e:98:c5:97:29:b6:62:58:35:89:38:2a:06 was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Personal Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:52:7e:5e:98:c5:97:29:b6:62:58:35:89:38:2a:06
Serial Number (int): 7074471399662365407485803528873060870
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c3:45:ec:4b:b8:13:b3:5e:34:cd:89:01:06:7a:ed:70:ba:0c:36:6a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a5:71:a3:75:fe:b4:df:22:e5:3b:a4:d6:c2:43:c3:f4:75:ce:be:be
Fingerprint (sha256): 0a:18:5c:ed:74:97:21:cb:7a:26:07:7e:e4:54:46:c4:ec:31:e2:1c:5a:98:cf:37:13:45:05:65:e0:28:b9:9c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.libertymutual.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

getcertainly.com
www.getcertainly.com
direct-service.libertymutual.com
claimsai-apigateway.lmig.com
trn-tts-gateway.libertymutual.com
safeco-insurance-agent.lmig.com
kraken-notifications.libertymutual.com
fileaclaim.libertymutual.com
opschat.libertymutual.com
welcome-insurance-staging-external.libertymutual.com
edp-uscmfinservices.libertymutual.com
totalhomescore.com
www.totalhomescore.com
agencyinsights.libertymutual.com
esalesquotefeed.libertymutual.com
pmap.lmig.com
int-demo-news.agent.safeco.com
int-news.agent.safeco.com
int-demo-ignite.agent.safeco.com
tuitionbot.libertymutual.com
geo.libertymutual.com
int-ignite.agent.safeco.com
gigupjobs.com
www.gigupjobs.com
telematics.libertymutual.com
welcome-insurance.libertymutual.com
safeco-insurance-advisor-production.prod.uscm.libertymutual.com
hearsay.libertymutual.com
www.safeco.com
www.libertymutualonline.com
www.libertymutualimages.com
www.libertymutual.com
webchat-launch.libertymutual.com
tools.safeco.com
thirdpartytraining.libertymutual.com
teen.safeco.com
solarialabs.io
solarialabs.com
solaria.io
selfregistration.libertymutual.com
select-quote.safeco.com
select-quote.esurance.safeco.com
secure.safeco.com
salescompreporting.libertymutual.com
safesite.safeco.com
rpama-ext.safeco.com
rpama-ext.libertymutual.com
responsibility-project.libertymutual.com
realtimedocs.safeco.com
quoterequest.libertymutual.com
quote.safeco.com
quote.esurance.safeco.com
public.libertymutual-cdn.com
prospect.libertymutual.com
printportal.libertymutual.com
pmviews.libertymutual.com
pmsrc.lmig.com
pmactivityinbox-web.libertymutual.com
pi-login-secure.libertymutual.com
pi-eservices.libertymutual.com
openseas.safeco.com
online.libertymutual.com
myclaiminfoportal.libertymutual.com
mobilegateway.libertymutual.com
mobilefirst.libertymutual.com
mobile.online.libertymutual.com
mobile.libertymutual.com
mileage.safeco.com
maintenance.libertymutual.com
lifessstatus-portal.libertymutual.com
lifeips-portal.libertymutual.com
libertymutual-quotes.com
insurance.libertymutual.com
gcm-innovation.libertymutual.com
frontline.libertymutual.com
financialaccountservice.libertymutual.com
ext-pm-content.libertymutual.com
esign.libertymutual.com
eservice.safeco.com
eservice.libertymutual.com
esales.libertymutual.com
docs.libertymutual.com
customer.safeco.com
csw.libertymutual.com
cloudmonitor-www.libertymutual.com
claiminfoportalapps.libertymutual.com
claiminfoportal.libertymutual.com
cfplp.libertymutual.com
cfp.libertymutual.com
cfa.libertymutual.com
ccc-ext.tkn.libertymutual.com
billing.select-quote.safeco.com
billing.select-quote.esurance.safeco.com
apptraxx-portal.libertymutual.com
amseec.libertymutual.com
ampl.libertymutual.com
agent.safeco.com
welcome.libertymutual.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for www.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCp71fstoANP2RWewR7E
KkiserwyX6vMJ3Ap3RNsGdnG9FzjPGOnZxAWwIZ2SSQEVL8e5gyeET8grmgp+5m+
LBQ0rTjipMHZrG7lweIXRhVXUGJ9WGb47BUj9ASjhIduAeJIS5Ys8pIxg34MAB2z
NsbcqUadyGOYOe7pS9zydotCL4tqeDsPstLF3yVL2sHE5kgnd6rl+s/DgQkOVv4T
sU+LYzU37JnPV6yOz4OuaqiX/OkGCowd3Q5gEARAWuQGYBD9HY2VivFHJCLcgnmT
hkyC35yw8hBC6ablrPezEiZXM4+fNnz1hOEdrhv93Np+8lF84yUQhgz1ZrBHfPeQ
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7074471399662365407485803528873060870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Personal Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22238891183983455998696404780567006874870613825127203527530779409395164083745679918619040013620055108847504573886741239975473329959471506987112656917363752299872124367200718319943530438917900184906985771845431822651793817184781071271629545683431144069296479559827596546002657154564858817412284976520958775074347103848128746969997385714992799776203104265658083965186201447867578483693994808137239700954359855590927899391111254085963371907058998147825919946617503578519988111973814914494777436136149464587947162911352164375960071768400672022693811997107742086758469932132827132499715792354944774762119743686245631889573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c345ec4bb813b35e34cd8901067aed70ba0c366a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2828 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getcertainly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getcertainly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct-service.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsai-apigateway.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-tts-gateway.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeco-insurance-agent.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kraken-notifications.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fileaclaim.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opschat.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome-insurance-staging-external.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edp-uscmfinservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totalhomescore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totalhomescore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agencyinsights.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esalesquotefeed.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmap.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-demo-news.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-news.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-demo-ignite.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuitionbot.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geo.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-ignite.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gigupjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gigupjobs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telematics.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome-insurance.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeco-insurance-advisor-production.prod.uscm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hearsay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchat-launch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thirdpartytraining.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teen.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarialabs.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solaria.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfregistration.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'select-quote.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'select-quote.esurance.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salescompreporting.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safesite.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpama-ext.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rpama-ext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'responsibility-project.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realtimedocs.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quoterequest.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote.esurance.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.libertymutual-cdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prospect.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmviews.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmsrc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pmactivityinbox-web.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi-login-secure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pi-eservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openseas.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myclaiminfoportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilegateway.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilefirst.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.online.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mileage.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifessstatus-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeips-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual-quotes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurance.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcm-innovation.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frontline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financialaccountservice.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext-pm-content.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservice.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservice.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esales.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csw.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-www.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claiminfoportalapps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claiminfoportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfplp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfa.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccc-ext.tkn.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.select-quote.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.select-quote.esurance.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apptraxx-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amseec.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampl.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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