test-icasemanagersecure.libertymutual.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 0c:99:89:af:97:d4:4f:f0:a9:19:ed:d8:10:17:6c:e3 was issued on by Symantec Corporation.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:99:89:af:97:d4:4f:f0:a9:19:ed:d8:10:17:6c:e3
Serial Number (int): 16747949970807865640255173239162498275
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 1d:79:63:dd:a7:49:01:70:32:b4:db:d2:e0:e9:2d:ed:66:df:07:bb
Fingerprint (sha256): 0e:42:c1:c6:56:5d:ad:ed:62:17:79:a8:79:dd:16:a0:af:9b:9a:5b:d4:38:ec:60:5b:9d:28:24:a5:8d:bf:28

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate test-icasemanagersecure.libertymutual.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-icasemanagersecure.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf-saml-lifessstatus.libertymutual.com
test-af2.libertymutual.com
dev-af2.libertymutual.com
stage-spsui.lmig.com
perf-cibilldocuments.libertymutual.com
test-icasemanagersecure.libertymutual.com
www.stage-commercialclaimportal.libertymutual.com
stage-farmpac.libertymutual.com
tst-lifemadeeasy.libertymutual.com
test-spsui.montgomery-ins.com
perf-saml.lmcissobrokerdc2.libertymutual.com
tst-notifications.np-lmb.libertymutual.com
test-analytics.libertymutual.com
test-cibilldocuments.libertymutual.com
prf-notifications.np-lmb.libertymutual.com
test-app.lmcissobrokerdc1.libertymutual.com
tst-mylifemadeeasy.libertymutual.com
test-cp.lmcissobrokerdc1.libertymutual.com
test-a-saml-lifessstatus.libertymutual.com
test-spsui.safeco.com
stage-equote.libertymutual.com
test-saml.lmcissobrokerdc1.libertymutual.com
stage-spsui.indiana-ins.com
stage-spsui.libertymutual.com
uat-saml-lifessstatus.libertymutual.com
perf-mylifemadeeasy.libertymutual.com
perf-riskvue.libertymutual.com
test-af1.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
dev-apptraxx.libertymutual.com
notifications.np-lmb.libertymutual.com
test-ereport.libertymutual.com
perf-risktracdocs.libertymutual.com
stage-farmpac-admin.libertymutual.com
perf-lifemadeeasy.libertymutual.com
tst-business.libertymutualgroup.com
perf-cp.lmcissobrokerdc2.libertymutual.com
test-risktracrmis.lmig.com
dev-af1.libertymutual.com
stage-spsui.libertynorthwest-ins.com
tst-wcvideo.helmsmantpa.com
stage-spsui.goldeneagle-ins.com
test-spsui.americafirst-ins.com
test-spsui.coloradocasualty-ins.com
test-a-saml-lifeips.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
test-spsui.libertymutual.com
stage-spsui.libertymutualgroup.com
test-spsui.indiana-ins.com
stage-spsui.safeco.com
bookme-np.libertymutual.com
tst-riskvue.libertymutual.com
hold-dev-b-saml-lifeips.libertymutual.com
test-auth.lmcissobrokerdc1.libertymutual.com
test-spsui.libertymutualgroup.com
perf-app.lmcissobrokerdc2.libertymutual.com
perf-saml-apptraxx.libertymutual.com
test-spsui.peerless-ins.com
testext-risktracrmis.lmig.com
stage-spsui.ohiocasualty-ins.com
tst-helmsmantpa.lmig.com
stage-spsui.montgomery-ins.com
test-equote.libertymutual.com
test-spsui.goldeneagle-ins.com
test-spsui.libertynorthwest-ins.com
test-spsui.lmig.com
benefitscoach-nonprod.libertymutual.com
test-portal.eclps.libertymutual.com
stage-spsui.americafirst-ins.com
tst-wcvideo.libertymutualgroup.com
perf-auth.lmcissobrokerdc2.libertymutual.com
np-developer.lmb.libertymutual.com
test-ereport-services.libertymutual.com
test-clpi.lmig.com
perf-demo-risktrac.libertymutual.com
stage-spsui.coloradocasualty-ins.com
www.tst-helmsmantpa.lmig.com
test-a-saml-apptraxx.libertymutual.com
public-uat.libertymutualsafetynet.com
stage-spsui.peerless-ins.com
test-training-risktrac.libertymutual.com
test-spsui.ohiocasualty-ins.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for test-icasemanagersecure.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0//28BTL8h7XM0vAecRN
qV/W2y3Y/sKiAi/jY0e+pQgTXHD/ItY6ZOjiNHsXcJ1HjZ5sAdBxJftcmTAm8fd2
jp5zJFhSriP7FF5qAohxSpYbNowLfikvjRZ+yLJk3esck/MYeh8P7y0JkhE6OCg3
RVYmAIM8+Hzz5BVziZgdSajIk3bTpm6Z3e+qDX8LpszOy69aDVdzXlSftzAk8Pak
RGmEFgv5CksbzHWUWrZoGVAxArimjrj8MhZ4pgCX8uDawiQ8Xp3GoV8TaCxbfdl+
p6c5PXB5d5Rv7WDsipmV98pXHKRAdYgpulvcP3EdZwuN12VWK61nBPiuCc5YHabL
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16747949970807865640255173239162498275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-icasemanagersecure.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26762503196832453523756409413533217051011534128160935959689286160291845447105080443120938096489667483086294459608767197999834581082444557548484661308628889296498646360035251276876040667372898590554768205760853843192426885769724722225820247201613818748913549952016905143911444604445619015416088221995278537197483652637831923354190955355829982853590081436610374656464893897383001971868205867518367281204174687223631655102861289478681121124779507347712668309748769470742082106210063333242167486558240661260686944126869520016607480046528309606164707792312456333479688419173175684603743600718892706639011026347370995960739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2932 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-saml-lifessstatus.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-af2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stage-commercialclaimportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-farmpac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-lifemadeeasy.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-saml.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-notifications.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-analytics.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prf-notifications.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-app.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-mylifemadeeasy.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cp.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a-saml-lifessstatus.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-equote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-saml.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-saml-lifessstatus.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-mylifemadeeasy.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-riskvue.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-notifications.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-apptraxx.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ereport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktracdocs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-farmpac-admin.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-lifemadeeasy.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-business.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-cp.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risktracrmis.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-af1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-wcvideo.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a-saml-lifeips.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-commercialclaimportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookme-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-riskvue.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-dev-b-saml-lifeips.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auth.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-app.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-saml-apptraxx.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testext-risktracrmis.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-helmsmantpa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-equote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefitscoach-nonprod.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-portal.eclps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-wcvideo.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-auth.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-developer.lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ereport-services.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tst-helmsmantpa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a-saml-apptraxx.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-uat.libertymutualsafetynet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-spsui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-training-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-spsui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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