securefile.libertymutual.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0a:4b:5a:b1:0e:24:f2:38:e4:25:a1:fe:ae:eb:f6:6e was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Corp ETS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:4b:5a:b1:0e:24:f2:38:e4:25:a1:fe:ae:eb:f6:6e
Serial Number (int): 13683541666865819805454971461717194350
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:53:17:cd:67:e0:b3:1e:48:f6:bb:55:fe:8a:66:87:a5:db:96:0b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): fb:3c:9d:ec:00:57:8d:bf:5f:dd:51:6a:c3:0c:3e:86:dc:8e:e5:32
Fingerprint (sha256): 0a:da:d0:6f:61:c8:f1:e3:b7:53:38:8b:8c:9a:e7:4e:e8:fd:f0:be:e9:0d:1c:6d:dc:64:13:95:ed:2b:c8:0b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate securefile.libertymutual.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securefile.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apis.libertymutual.com
avature.libertymutual.com
billinginquiry.lmig.com
buysmart.libertymutual.com
cappp.lmig.com
cloudmonitor-securefile.libertymutual.com
corpsplash.lmig.com
counsellink.libertymutual.com
employeelearningcenter.libertymutual.com
employeerecognitioncenter.libertymutual.com
enavigatemobile.libertymutual.com
enterpriseid-external.lmig.com
eservices-kc.lmig.com
eservices.lmig.com
everbridge.libertymutual.com
extecollaborate.lmig.com
fusion.libertymutual.com
givewithliberty.libertymutual.com
hal.libertymutual.com
hiringatliberty.libertymutual.com
learningcenter.libertymutual.com
legallibrary.libertymutual.com
libertymmhtables.libertymutual.com
libertymutualgroup.com
libertypac.libertymutual.com
lmi.co
lmi.com
lmsso.lmig.com
mytoken.libertymutual.com
myworkplacerequests.libertymutual.com
partnercomm.libertymutual.com
policyholders.libertynorthwest.com
prod.emergencyportal.libertymutual.com
realestateatliberty.libertymutual.com
risktracresources.libertymutual.com
search.libertymutualgroup.com
securefile.libertymutual.com
servewithliberty.libertymutual.com
spacewalker.libertymutual.com
tempstaffing.libertymutual.com
travelportal.libertymutual.com
tuitionreimbursement.libertymutual.com
www.libertymutualgroup.com
www.libertymutualsafetynet.com
www.lmemergencyportal.com
www.lmglogos.com
www.lmi.co
www.lmi.com
boardofdirectors.libertymutualgroup.com
workgrid.com
workgridsoftware.com
www.workgrid.com
www.workgridsoftware.com
www-stage.libertymutualgroup.com
whatsyourpursuit.libertymutualgroup.com
www.workgrid.io
workgrid.io
uscm.forge.libertymutual.com
forge.libertymutual.com
ci.forge.libertymutual.com
googlerestapi.libertymutualgroup.com
b2b-wbft-test.libertymutual.com
b2b-wbft.libertymutual.com
www.mylmpursuit.com
www.libertymutualgrouptherightfit.com
www.libertymutualcampus.com
mylmpursuit.com
libertymutualcampus.com
libertymutualgrouptherightfit.com
claims-intake.libertymutualsurety.com
emergencyportal.lmig.com
datahub-listener.libertymutual.com
www.helpingyousucceed-libertymutual.com
viewpoint.libertymutualgroup.com
sureroute-useast1.libertymutual.com
sureroute-euwest1.libertymutual.com
sureroute-apse2.libertymutual.com
hotelr.libertymutual.com
www.libertymutualbrand.com
sureroute-uswest1.libertymutual.com
secrets-management-slackbot.libertymutual.com
libertymutualbrand.com
gis-nsc-slack.libertymutual.com
givingreport.libertymutualgroup.com
qcc.libertymutualgroup.com
LibertyMutualProperty.com
www.LibertyMutualProperty.com
mypassport.lmig.com
lrn.libertymutual.com
www.plan.lmimeetings.com
plan.lmimeetings.com
www.attend.lmimeetings.com
attend.lmimeetings.com
www.libertymutualsurety.com
libertymutualsurety.com
blueprint.lmig.com
www.blueprint.lmig.com
newhirenetwork.libertymutual.com
www.lifeafterliberty.com
lifeafterliberty.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for securefile.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwon5+XJhH72rBIaFvtUP
qCjr0+ae9YM21m98lEKCxvLMk9i3V07Ufjqx428sOB/uEa2n3Usq0Q88aCLNyaZF
R14qQgLsQsjH/INXJSznZjusz7NR/2i1aHDm6F7A1a9iUuawrAVPQc9giKltJbk6
WOjOGqwYfjwIdUoCIG/uEAX2qTbho4KkDNkaWAC4jv2osXSY4knR/ivRF+9OeDUG
UCTuMAmitv2zODhNQqrOOeRfSvAohXq70Ps/9u3RFU90MnY4wqhGnqZvdu+Pd2j0
mRxZXITOPhY4Vj1x3NHh6OKKmk4oEMarG2ctFiT75f/cUSwGJkkMjvyMGVhEtyxT
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13683541666865819805454971461717194350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corp ETS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securefile.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24558269892915266640744358130404140932890437049275334820140476696184351504007683093632523744696557413149870857736065865305449334984703164706164302761387792960175061496064260421918346399704367867705420617447452336079279041960531890314245184263561192480654652701917770402043809191919840410977443770881642066468009839743135235025679640523881474689109280466730135039869979722224275937061835940485850675865827419478046208892096260590878969432195197455183962224610825675631582412675283204466547774159430088512585840635247776256920106071957468476609285027599555429488825208684305344513173866307931063583189274103829500810099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c65317cd67e0b31e48f6bb55fe8a6687a5db960b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2892 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avature.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buysmart.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-securefile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corpsplash.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'counsellink.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeelearningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employeerecognitioncenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enavigatemobile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseid-external.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-kc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everbridge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extecollaborate.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusion.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiringatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legallibrary.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertypac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmsso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytoken.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myworkplacerequests.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnercomm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.emergencyportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestateatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'risktracresources.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'search.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securefile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spacewalker.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempstaffing.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuitionreimbursement.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsafetynet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmemergencyportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmglogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardofdirectors.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgridsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgridsoftware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stage.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsyourpursuit.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workgrid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workgrid.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uscm.forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci.forge.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'googlerestapi.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-wbft-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-wbft.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mylmpursuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualgrouptherightfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylmpursuit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualcampus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualgrouptherightfit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims-intake.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyportal.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahub-listener.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helpingyousucceed-libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoint.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-useast1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-euwest1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-apse2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelr.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-uswest1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secrets-management-slackbot.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualbrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gis-nsc-slack.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givingreport.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LibertyMutualProperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.LibertyMutualProperty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypassport.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrn.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plan.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attend.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attend.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blueprint.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blueprint.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newhirenetwork.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeafterliberty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeafterliberty.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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