perf-www.libertymutualvantageport.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number eb:8b:12:c9:37:0f:06:d2:00:00:00:00:51:03:95:f5 was issued on by Entrust, Inc..

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRM US
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): eb:8b:12:c9:37:0f:06:d2:00:00:00:00:51:03:95:f5
Serial Number (int): 313090689298064943905443236424219596277
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a3:da:09:9b:29:94:63:2d:bd:ba:d4:a2:74:8c:95:ab:33:54:1f:f3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 27:a6:5e:0a:03:ae:bd:a3:8f:26:06:46:87:79:a3:6f:b6:00:3d:cb
Fingerprint (sha256): 0f:8b:fd:ab:c7:de:4a:06:50:63:3e:f4:ac:64:00:8a:ad:a0:db:3b:ec:04:b7:86:32:70:df:36:1e:fd:fc:e8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate perf-www.libertymutualvantageport.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf-www.libertymutualvantageport.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf-www.libertymutualvantageport.com
rotations-test.libertymutual.com
stage-ci-policybindapi.libertymutual.com
mlp-np-lmb.mylibertyconnection.com
perf-ezdrop.libertymutual.com
stage-ezdrop.libertymutual.com
urad-proto.libertymutual.com
salesforce-it-evt-rtr-development.libertymutual.com
hold-stage-feedback.libertymutual.com
perf-1-eclps.libertymutual.com
callcenter.np-lmb.libertymutual.com
tst-safetynet.libertymutual.com
tst-public.safetynet.libertymutual.com
stage-stui.safeco.com
stage-stui.peerless-ins.com
stage-stui.ohiocasualty-ins.com
stage-stui.montgomery-ins.com
stage-stui.libertynorthwest-ins.com
stage-stui.libertymutualgroup.com
stage-stui.libertymutual.com
stage-stui.indiana-ins.com
stage-stui.goldeneagle-ins.com
stage-stui.coloradocasualty-ins.com
stage-stui.americafirst-ins.com
stage-steps.safeco.com
stage-steps.peerless-ins.com
stage-steps.ohiocasualty-ins.com
stage-steps.montgomery-ins.com
stage-steps.libertynorthwest-ins.com
stage-steps.libertymutualgroup.com
stage-steps.libertymutual.com
stage-steps.indiana-ins.com
stage-steps.goldeneagle-ins.com
stage-steps.coloradocasualty-ins.com
stage-steps.americafirst-ins.com
stage-preferences.libertymutual.com
stage-policyholders.libertynorthwest.com
stage-obsc.peerless-ins.com
stage-obsc.libertymutualgroup.com
stage-feedback.libertymutual.com
stage-eclps.libertymutual.com
stage-clpi.libertymutual.com
stage-cliq.libertymutual.com
stage-claimseft.peerless-ins.com
stage-claimseft.ohiocasualty-ins.com
stage-claimseft.montgomery-ins.com
stage-claimseft.libertymutualgroup.com
stage-claimseft.indiana-ins.com
stage-claimseft.hawkeyesecurity-ins.com
stage-claimseft.goldeneagle-ins.com
stage-claimseft.coloradocasualty-ins.com
stage-claimseft.americafirst-ins.com
stage-calm.libertymutual.com
stage-billinginquiry.lmig.com
stage-agentsportal.libertymutual.com
stage-af.safeco.com
stage-af.peerless-ins.com
stage-af.ohiocasualty-ins.com
stage-af.montgomery-ins.com
stage-af.libertynorthwest-ins.com
stage-af.libertymutualgroup.com
stage-af.libertymutual.com
stage-af.indiana-ins.com
stage-af.goldeneagle-ins.com
stage-af.coloradocasualty-ins.com
stage-af.americafirst-ins.com
perf-www.mybusinessonline.libertymutual.com
perf-www.commercialportal.libertymutual.com
perf-workerscompensationsupport.libertymutual.com
perf-workerscompensationsupport.helmsmantpa.com
perf-webquote.libertymutual.com
perf-secure.mybusinessonline.libertymutual.com
perf-safetynet.libertymutual.com
perf-risktrac.libertymutual.com
perf-public.safetynet.libertymutual.com
perf-public.libertymutualvantageport.com
perf-login.commercialportal.libertymutual.com
perf-ecsgdisplay.libertymutual.com
perf-auth.libertymutualvantageport.com
dev-workerscompensationsupport.libertymutual.com
dev-workerscompensationsupport.helmsmantpa.com
dev-claimseft.peerless-ins.com
dev-claimseft.ohiocasualty-ins.com
dev-claimseft.montgomery-ins.com
dev-claimseft.libertymutualgroup.com
dev-claimseft.hawkeyesecurity-ins.com
dev-claimseft.goldeneagle-ins.com

Other certificates including the domain name libertymutualvantageport.com

(limited to 100 certificates)
perf-www.libertymutualvantageport.com
spadmin.libertymutualvantageport.com
public.libertymutualvantageport.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
perf-www.libertymutualvantageport.com
spadmin.libertymutualvantageport.com
vantageporttest.libertymutual.com
perf-www.libertymutualvantageport.com
libertymutual.myinstantincentives.com
perf-www.libertymutualvantageport.com
splash.libertymutualvantageport.com
tst-auth.libertymutualvantageport.com
vantageporttest.libertymutual.com
www.libertymutualvantageport.com
perf-ipa.libertymutualvantageport.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
perf-auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
perf-www.libertymutualvantageport.com
perf-www.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
perf-www.libertymutualvantageport.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
af.libertymutual.com
perf-sppriv.libertymutualvantageport.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
af.libertymutual.com
stage-af.libertymutual.com
vantageporttest.libertymutual.com
perf-auth.libertymutualvantageport.com
af.libertymutual.com
libertymutual.myinstantincentives.com
auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
af.libertymutual.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
af.libertymutual.com
stage-af.libertymutual.com
perf-www.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
af.libertymutual.com
stage-af.libertymutual.com
libertymutual.myinstantincentives.com
perf-auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
af.libertymutual.com
libertymutual.myinstantincentives.com
af.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
af.libertymutual.com
af.libertymutual.com
af.libertymutual.com
perf-www.libertymutualvantageport.com
vantageporttest.libertymutual.com
perf-spadmin.libertymutualvantageport.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
ipa.libertymutualvantageport.com
libertymutual.myinstantincentives.com
stage-af.libertymutual.com
perf-www.libertymutualvantageport.com
perf-sppublic.libertymutualvantageport.com
af.libertymutual.com
af.libertymutual.com
tst-www.libertymutualvantageport.com
af.libertymutual.com
af.libertymutual.com
libertymutual.myinstantincentives.com
auth.libertymutualvantageport.com
libertymutual.myinstantincentives.com
perf-auth.libertymutualvantageport.com
af.libertymutual.com
af.libertymutual.com
tst-ipa.libertymutualvantageport.com
ipa.libertymutualvantageport.com
af.libertymutual.com

Certificate

The complete raw certificate details for perf-www.libertymutualvantageport.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+9Sx8XGfspDwyq3puEj
67+53VAFc+dRjWeao+loiLKtOY8y1YkuQVoMcIQoctIvOidRXsstlffX8vZb19pv
HawoElwfhu4OnL8xLRW7ckIIxJsqjoqmjqP6alQHqwPDTnzR2gT/A/4RFj/XmdLe
aFSxcCgMBE9Mq/Sqme7T2LMtzBYv/pjxw5v5ee0CD31kM2l7mX1wg9X1fOXp78e+
g2WAq1TLDHSXGEA/PasUiFL+CRHX8Zd81OU9txpdYLOR9DFyWc2GIH1jdC3l7rMF
US4WS3OuqgGkYqT7pXxA3pfsJaQlF3gz7kVi2KNhInOLFRFJ8x1aIgpuA59fTUf7
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313090689298064943905443236424219596277
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-30 11:57:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-25 12:27:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRM US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf-www.libertymutualvantageport.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25744390655784025711822737365357068697376892035989619776990100181660545495036128795919202184260363879068356420015116656654195677091960225339525038469098995852944569694569072029381359680974380021098088989773683105832225593817281694618546890014682203267823259916666984995502978371748425082025369179980686187910813247296754371925907982515855830499902276627213722926136053982136849978723203130501433592408519183414411098450280793353205232702131299326240317477851955485395038003723305102714234124053003012963853423312226296290077138778733158955716994969468152005417942829601687530093256328083123459340461868380510977784769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3077 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotations-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ci-policybindapi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlp-np-lmb.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-ezdrop.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ezdrop.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urad-proto.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforce-it-evt-rtr-development.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-feedback.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-1-eclps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callcenter.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-public.safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-preferences.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-feedback.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-eclps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-clpi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-cliq.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-calm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-workerscompensationsupport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-workerscompensationsupport.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-webquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-secure.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-public.safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-login.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-ecsgdisplay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-workerscompensationsupport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-workerscompensationsupport.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3da099b2994632dbdbad4a2748c95ab33541ff3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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