test-libertymutual.myinstantincentives.com

- Liberty Mutual Group Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:c8:b7:5e:77:5d:97:7a:8b:ee:1c:d0:53:54:c6:97 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group Inc.

Organization: Liberty Mutual Group Inc.
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c8:b7:5e:77:5d:97:7a:8b:ee:1c:d0:53:54:c6:97
Serial Number (int): 2371406532838487603034164763536180887
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 70:db:a2:2e:2f:16:7e:2e:63:d5:b5:65:19:6e:41:21:b4:28:0e:5c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 4d:a0:46:81:d8:57:5e:5e:e1:a7:ac:4e:bb:83:54:67:33:a8:2b:9e
Fingerprint (sha256): 0d:e4:8c:c9:d2:78:5b:ab:d9:80:ad:01:66:74:1f:63:33:68:77:5a:9d:0d:7e:4e:9d:3f:a5:fb:54:a1:c6:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate test-libertymutual.myinstantincentives.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-libertymutual.myinstantincentives.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

np.oliveforlife.com
test-cmpubdocumentext.lmig.com
test3-ereport.libertymutual.com
test2-ereport.libertymutual.com
developer.np-lmb.libertymutual.com
test-af3.libertymutual.com
dev-af3.libertymutual.com
test-dmsservices-sbat.lmig.com
tst-benefits.mylibertyconnection.com
www-test2.mylibertyconnection.com
www-test.mylibertyconnection.com
tst-www.mybusinessonline.libertymutual.com
tst-www.libertymutualvantageport.com
tst-www.commercialportal.libertymutual.com
tst-secure.mybusinessonline.libertymutual.com
tst-public.libertymutualvantageport.com
tst-login.commercialportal.libertymutual.com
tst-auth.libertymutualvantageport.com
test.libertymutualprovidersupport.com
test-workerscompensationsupport.libertymutual.com
test-workerscompensationsupport.helmsmantpa.com
test-webquote.libertymutual.com
test-wcequote.libertymutual.com
test-suretyonline.myinstantincentives.com
test-stui.safeco.com
test-stui.peerless-ins.com
test-stui.ohiocasualty-ins.com
test-stui.montgomery-ins.com
test-stui.libertynorthwest-ins.com
test-stui.libertymutualgroup.com
test-stui.libertymutual.com
test-stui.indiana-ins.com
test-stui.goldeneagle-ins.com
test-stui.coloradocasualty-ins.com
test-stui.americafirst-ins.com
test-steps.safeco.com
test-steps.peerless-ins.com
test-steps.ohiocasualty-ins.com
test-steps.montgomery-ins.com
test-steps.lmig.com
test-steps.libertynorthwest-ins.com
test-steps.libertymutualgroup.com
test-steps.libertymutual.com
test-steps.indiana-ins.com
test-steps.goldeneagle-ins.com
test-steps.coloradocasualty-ins.com
test-steps.americafirst-ins.com
test-saml.mylibertyconnection.com
test-safeco.myinstantincentives.com
test-safeaudit.libertymutual.com
test-preferences.libertymutual.com
test-policyholders.libertynorthwest.com
test-obsc.peerless-ins.com
test-obsc.ohiocasualty-ins.com
test-obsc.montgomery-ins.com
test-obsc.libertynorthwest-ins.com
test-obsc.libertymutualgroup.com
test-obsc.indiana-ins.com
test-obsc.hawkeyesecurity-ins.com
test-obsc.goldeneagle-ins.com
test-obsc.coloradocasualty-ins.com
test-obsc.americafirst-ins.com
test-libertymutual.myinstantincentives.com
test-libertymmhtables.libertymutual.com
test-ixprs.libertymutual.com
test-helmsmantpa.lmig.com
test-feedback.libertymutual.com
test-elibertyquote.libertymutual.com
test-ecsgdisplay.libertymutual.com
test-clpi.libertymutual.com
test-cliq.lmig.com
test-claimstour.libertymutualgroup.com
test-claimseft.peerless-ins.com
test-claimseft.ohiocasualty-ins.com
test-claimseft.montgomery-ins.com
test-claimseft.libertymutualgroup.com
test-claimseft.indiana-ins.com
test-claimseft.hawkeyesecurity-ins.com
test-claimseft.goldeneagle-ins.com
test-claimseft.coloradocasualty-ins.com
test-claimseft.americafirst-ins.com
test-calm.libertymutual.com
test-billinginquiry.lmig.com
test-agentsportal.libertymutual.com
test-af.safeco.com
test-af.peerless-ins.com
test-af.ohiocasualty-ins.com
test-af.montgomery-ins.com
test-af.libertynorthwest-ins.com
test-af.libertymutualgroup.com
test-af.libertymutual.com
test-af.indiana-ins.com
test-af.goldeneagle-ins.com
test-af.coloradocasualty-ins.com
test-af.americafirst-ins.com
secure-test2.mylibertyconnection.com
secure-test.mylibertyconnection.com
cloudmonitor-test-libertymutual.myinstantincentives.com
auth-test.mylibertyconnection.com

Other certificates including the domain name myinstantincentives.com

(limited to 100 certificates)
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com

Certificate

The complete raw certificate details for test-libertymutual.myinstantincentives.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6kbJAuMgqOZJdPU8Y4I
FoEB/KLxl1E2qsEW+3LkyjVwAlzqTJbxx8geTMdO0oBE68mRZzB8Dhi9NQvdZQEJ
kxB058q/ogezsI9eLcn9oMN8go+uyy38xAxg+UBe4FKo8Ud8pMCa++P+h2u0wJxj
Zob+doo3iIJV4krsCFTxQCkq3doB9t62SquiASvmn3wDIpR6H00cZQKK/VL52rSm
EYd67eTGD+746Sl0VxYJf3sw79geBqhP1jHyUd/Suljk9Uzda7Dlhgh400dsRcz+
aXFs4u7eIzJq69CKEL9qQanjDqxh97pZBOQV8xZ5eviBQ+/GKf0bgfZAmXax0ND4
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2371406532838487603034164763536180887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21165186215141012548741384008948899550856271891022947619899644397555821883182067380679226157891408471284702078061008062394244115821351500451561965015854936820871467113423815542956677165377980542772690318185791907094393383759994648494140791315773272180272216098784394529276347854760729974861951707876235083005748373882934436048002277932898953069282776502946978667554975600603447477994908933724977253751057254378291010260674405054798510162605039416368803352982982979222179162053328528909906931546581837537174849528890062787219652173600000539390716303226967306566574003321773435510964282726664922343073067559443430963311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70dba22e2f167e2e63d5b565196e4121b4280e5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3356 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.oliveforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cmpubdocumentext.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3-ereport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2-ereport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af3.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-af3.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dmsservices-sbat.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-benefits.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-secure.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-login.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-webquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wcequote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-suretyonline.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-saml.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeco.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeaudit.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-preferences.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ixprs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-helmsmantpa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-feedback.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-elibertyquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecsgdisplay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cliq.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimstour.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-calm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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