af.libertymutual.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 6c:e7:95:48:4b:55:6f:d3:5a:09:0d:35:25:d5:9a:df was issued on by Symantec Corporation.

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6c:e7:95:48:4b:55:6f:d3:5a:09:0d:35:25:d5:9a:df
Serial Number (int): 144759071925865767094425635015598906079
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): f5:6c:5f:ed:25:58:ac:83:54:06:57:88:29:c7:0f:b6:a7:22:e6:09
Fingerprint (sha256): 0e:4f:cd:6a:11:75:3e:fa:9f:c0:21:2d:08:91:ea:d5:45:15:be:ed:11:c5:e5:66:7d:73:06:ac:9e:8b:9e:36

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate af.libertymutual.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for af.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

obsc.hawkeyesecurity-ins.com
steps.montgomery-ins.com
af.libertymutual.com
steps.libertymutual.com
cp.lmcissobrokerdc2.libertymutual.com
obsc.americafirst-ins.com
policyholders.libertynorthwest.com
billinginquiry.lmig.com
icasemanagersecure.libertymutual.com
test-cibilldocuments.libertymutual.com
steps.lmig.com
stui.montgomery-ins.com
claimseft.coloradocasualty-ins.com
business.libertymutualgroup.com
claimseft.indiana-ins.com
stui.indiana-ins.com
stui.ohiocasualty-ins.com
af.peerless-ins.com
steps.libertynorthwest-ins.com
stui.americafirst-ins.com
steps.goldeneagle-ins.com
farmpac.libertymutual.com
obsc.coloradocasualty-ins.com
claimseft.goldeneagle-ins.com
claimseft.peerless-ins.com
stui.libertymutual.com
cibilldocuments.libertymutual.com
af.ohiocasualty-ins.com
claimseft.hawkeyesecurity-ins.com
af.libertynorthwest-ins.com
claimseft.libertymutualgroup.com
wcvideo.libertymutualgroup.com
saml.lmcissobrokerdc2.libertymutual.com
farmpac-admin.libertymutual.com
steps.peerless-ins.com
public.safetynet.libertymutual.com
obsc.montgomery-ins.com
steps.libertymutualgroup.com
af.goldeneagle-ins.com
claimseft.americafirst-ins.com
af.libertymutualgroup.com
auth.lmcissobrokerdc2.libertymutual.com
obsc.libertymutualgroup.com
demo-risktrac.libertymutual.com
libertymmhtables.libertymutual.com
stui.goldeneagle-ins.com
af.coloradocasualty-ins.com
steps.safeco.com
safetynet.libertymutual.com
af.indiana-ins.com
claimseft.montgomery-ins.com
obsc.peerless-ins.com
obsc.indiana-ins.com
mylibertyconnection.com
stui.coloradocasualty-ins.com
wcvideo.helmsmantpa.com
stui.libertynorthwest-ins.com
obsc.ohiocasualty-ins.com
steps.americafirst-ins.com
obsc.goldeneagle-ins.com
app.lmcissobrokerdc2.libertymutual.com
af.americafirst-ins.com
steps.ohiocasualty-ins.com
steps.indiana-ins.com
af.safeco.com
claimseft.ohiocasualty-ins.com
steps.coloradocasualty-ins.com
stui.peerless-ins.com
video.claimstour.helmsmantpa.com
af.montgomery-ins.com
stui.libertymutualgroup.com
obsc.libertynorthwest-ins.com
stui.safeco.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for af.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuFYwDERX/LhX+0PWFbK
IInOZsuJPdWsQDCPEtlH/HnccS01HTp6VvYXIbUeAbyBdTcj/uCqcCBAu0eecOAH
uwYz6ijXV5lkmRGzUjTKx/M8HuQhbwYkDHBN0QW5/PzOzj1eNxaYC9Nzef4aRQSS
QDBKkLit9yILmbjf2dY+ECcfr7/SvMpPH6yhBqRBpkRIXUs7pB37qV0n0qnRYXaA
eWYpCFSmmk7XcAdK31dQOtEREA0Fy1o6iO3ouMmvJVM4A9ipTr9Axv6nLWMbRDL0
sPWG4WYkwtmMCeH9TY2n7w+nqcoPfnkie2krmJ5ZcuyhA11m9ohpmGD6Q5drTa3f
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 144759071925865767094425635015598906079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'af.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23591447314478642462487531884271387909350750184193904167012619265548464051812403418985582078438653549470814558430550901078423031614375866138193592888470899566542437811944324593028171925354231286015394135898418981788579884968392480250109737959490165721659841813834739215861917106953041469954123175112425896769298553685981525260312378200980645113498313849976026122042410142453820130391794380690642530495451783065815220708546442331361251409929661152249393662303316753777796224741642068071754093416153097035898493204952726846697168953711797743419890530220836290023193134185963538271517897886087687960347832191674273881893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2089 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmpac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saml.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmpac-admin.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.claimstour.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.safeco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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