test-risk-lifecycle-id.libertymutual.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 76:ed:af:fd:1b:7e:01:9e:00:00:00:00:50:f6:d4:4d was issued on by Entrust, Inc..

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:ed:af:fd:1b:7e:01:9e:00:00:00:00:50:f6:d4:4d
Serial Number (int): 158083047333007009857212369327395099725
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b8:ac:1a:f4:4a:8d:31:08:cf:b3:6b:e1:be:d9:21:c7:e1:02:5c:e5
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): ff:6c:b0:0c:f0:66:de:41:f1:14:dc:90:17:5a:43:d5:66:24:db:b1
Fingerprint (sha256): 0f:7d:9e:bc:b8:9f:20:c6:66:fb:c0:ed:e0:83:60:57:6d:c0:2f:04:62:4a:f0:de:4e:4e:8f:5e:2b:65:28:d8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate test-risk-lifecycle-id.libertymutual.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-risk-lifecycle-id.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tst-www.lms.ae-libertyiu.libertymutual.com
grs-bpm-ui-staging.libertymutual.com
dev-lfanalytics.aws.lmig.com
dev2-libertyfianzas.aws.lmig.com
dev-surety-ip-bie-intake.lmig.com
perf-surety-ip-bie-intake.lmig.com
surety-ip-bie-intake.lmig.com
uat-surety-ip-bie-intake.lmig.com
qa-surety-ip-bie-intake.lmig.com
grs-bpm-ui-test.libertymutual.com
dev-bie.lmig.com
development-gs-policy-number-generator.libertymutual.com
development-risk-link-id.libertymutual.com
test-risk-link-id.libertymutual.com
performance-gs-policy-number-generator.libertymutual.com
performance-risk-link-id.libertymutual.com
fianzas.nonprod.us-east-1.grs.lmig.com
connectstage.libertyspecialtymarkets.com
connectuat.libertyspecialtymarkets.com
perf-www.libertylink.co.uk
perf-www.libertylink.ae
perf-www.libertylink.eu
staging917328.libertyspecialtymarkets.com
uat917328.libertyspecialtymarkets.com
dev-pqm.aws.lmig.com
dev-pqmquo.aws.lmig.com
test-claims-intake.libertymutualsurety.com
perf-claims-intake.libertymutualsurety.com
devplatform.lsmitaly.com
perf.yourliberty.fr
test.liuquote.co.uk
www.yourliberty.fr
www-uat.liucanada.lmig.com
www-uat.liu-usa.lmig.com
www-uat.libertyinternational.com
uat.liupal.com
uat.liucargo.com
uat.liu-eil.com
uat-www.liu-latinamerica.com
tst-www.lms.ae-libertyiu.com
tst-www.liurisk.com
tst-www.liu-usa.com
tst-www.liu-latinamerica.com
tst-www.libertysegurosperu.com
tst-www.ae-libertyiu.com
tst-agents.libertymutualsurety.com
trn-qiservicing.libertymutualsurety.com
test.liuquote.ie
test-www.libertyiu.com
test-serf.libertyfianzas.com
test-qiservicing.libertymutualsurety.com
test-qi.libertymutualsurety.com
test-ofacpayment.libertymutual.com
test-lmsuretyext.libertymutual.com
test-execute.lmig.com
test-bfl.libertymutualsurety.com
test-accidenthealth.libertyiu.com.au
staging-bonds.libertymutualsurety.com
stage-qiservicing.libertymutualsurety.com
stage-qi.libertymutualsurety.com
stage-ofacpayment.libertymutual.com
stage-bfl.libertymutualsurety.com
sme2uat.liuquote.com
grs-bpm-ui-development.libertymutual.com
staging-billingandcommission.libertymutualsurety.com
nas-uw-auth-np.libertymutual.com
sme1uat.liuquote.com
qa-qiservicing.libertymutualsurety.com
qa-qi.libertymutualsurety.com
ps-qi.libertymutualsurety.com
ps-bfl.libertymutualsurety.com
perf-www.lms.ae-libertyiu.com
perf-www.liurisk.com
perf-www.liucanada.com
perf-www.liu-usa.com
perf-www.liu-latinamerica.com
perf-www.ae-libertyiu.com
perf-qiservicing.libertymutualsurety.com
perf-qi.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-agents.libertymutualsurety.com
passport-test.lmig.com
mkt-qiservicing.libertymutualsurety.com
mkt-qi.libertymutualsurety.com
dev-bfl.libertymutualsurety.com
cloudmonitor-test-www.libertyiu.com
bfl.qa.libertymutualsurety.com
nas-uw-users-np.libertymutual.com
uat.ironshorebind.com
qa.ironshorebind.com
performance-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for test-risk-lifecycle-id.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sktOB2ylJn28XwmWOx9
o7TgLKebGnchPmNFvqTIKMXL9AEQEH0ryZ4tDGSNVgyJQNzp4eP2AEMpbJX8ZyKd
qVYxBDkkOKCWuVDD9mJpHYFufGOAoFnOFOnbXGnhQwV/p/CaKzAFpY44MPpG8yIi
kz5rQ5D+bsR20iPWtJZWCLzRi4fXJLqOHDoElqyv/CY21B0BXZvbc4NSNunSNeXE
AuAm1T3P1N1yKCpxwjfAXtifFt4AWzW8+8UNiEjRUVwrBI6y5iaBCteaNEI5OX7d
72av4mUy/buvFzgRN6ZHYnbOE7UxTxtGD9nkSjjc19m+iKzN/XzZetWj4/3Na+6m
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158083047333007009857212369327395099725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 12:10:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 12:40:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-risk-lifecycle-id.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27619154379937983203567788044907135125767961540423615679501325017979736899763787307508726028216840164226817840308736228094518242502022172866803182151603484735099162149727260990140907567417756531034611055840354994748631201404776753048956362283400231590144358445767792147272846510382092702005097648111796707892238615568975918117454542765551004510150508224847251586195655061048824487829921617918619112661565654895873321504680724480812330257118499080324606519310351569426252706437788153562371968598008144190515509625197096269543663241931067441991802395272233487822093871740316874862531032468642828967028261146912111896251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3009 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.lms.ae-libertyiu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-bpm-ui-staging.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-libertyfianzas.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-bpm-ui-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bie.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development-gs-policy-number-generator.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development-risk-link-id.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risk-link-id.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-gs-policy-number-generator.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-risk-link-id.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fianzas.nonprod.us-east-1.grs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstage.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectuat.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertylink.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertylink.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertylink.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging917328.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat917328.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-pqm.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-pqmquo.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims-intake.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-claims-intake.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devplatform.lsmitaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.yourliberty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourliberty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.liucanada.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.liu-usa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.libertyinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertysegurosperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.liuquote.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-lmsuretyext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-execute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-accidenthealth.libertyiu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-bonds.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme2uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-bpm-ui-development.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-billingandcommission.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas-uw-auth-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme1uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfl.qa.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas-uw-users-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.ironshorebind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.ironshorebind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-risk-lifecycle-id.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risk-lifecycle-id.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8ac1af44a8d3108cfb36be1bed921c7e1025ce5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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