test-securefile.libertymutual.com

- Liberty Mutual Group Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:c8:5c:82:67:03:87:6d:63:15:ed:fc:64:4f:de:34 was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group Inc.

Organization: Liberty Mutual Group Inc.
Organization unit: ETS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:c8:5c:82:67:03:87:6d:63:15:ed:fc:64:4f:de:34
Serial Number (int): 13003387646997093516250804971356806708
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6f:22:16:16:9b:fe:35:b5:98:6d:2e:a0:c1:3d:ff:2f:6b:92:ac:9e
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 4b:ba:6f:52:8d:d9:52:93:16:cb:43:ee:48:16:d7:58:95:27:e2:26
Fingerprint (sha256): 0f:e3:9d:a7:08:66:f8:24:7d:2c:b3:e8:8c:2a:11:36:b4:f1:d1:28:1f:fb:4e:7d:59:6a:d5:da:6e:4a:9f:d5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate test-securefile.libertymutual.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-securefile.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datahub-listener-np.libertymutual.com
test-relativity.libertymutual.com
access-test.libertymutual.com
emergencyportal-dev.lmig.com
emergencyportal-test.lmig.com
ssa-dev-idp.lmig.com
whatsyourpursuit-test.libertymutualgroup.com
www-test-stage.libertymutualgroup.com
test-torchbearers.libertymutual.com
test-securefile.libertymutual.com
boardofdirectors-test.libertymutualgroup.com
www.careers-test.libertymutualgroup.com
www-uat.libertymutualsafetynet.com
www-test.libertymutualgroup.com
uat-search.libertymutualgroup.com
uat-risktracresources.libertymutual.com
tstextecollaborate.lmig.com
test.lmi.co
test.lmemergencyportal.com
test.emergencyportal.libertymutual.com
test-www.lmglogos.com
test-www.lmemergencyportal.com
test-tuitionreimbursement.libertymutual.com
test-travelportal.libertymutual.com
test-tempstaffing.libertymutual.com
test-servewithliberty.libertymutual.com
test-realestateatliberty.libertymutual.com
test-pcf-ext.libertymutual.com
test-partnercomm.libertymutual.com
test-myworkplacerequests.libertymutual.com
test-mytoken.libertymutual.com
test-mypersonalbest.libertymutual.com
test-mycareerdevelopmentcenter.libertymutual.com
test-lmidp.lmig.com
test-lmidp.libertymutual.com
test-libertypac.libertymutual.com
test-libertyhealthcenter.libertymutual.com
test-legallibrary.libertymutual.com
test-legalhold.lmig.com
test-learningcenter.libertymutual.com
test-hiringatliberty.libertymutual.com
test-hal.libertymutual.com
test-givewithliberty.libertymutual.com
test-fusion.libertymutual.com
test-fieldglass.libertymutual.com
test-eservices.lmig.com
test-eservices-leg2.lmig.com
test-eservices-leg1.lmig.com
test-eservices-kc.lmig.com
test-eservices-kc-leg2.lmig.com
test-eservices-kc-leg1.lmig.com
test-enterpriseid-external.lmig.com
test-enavigatemobile.libertymutual.com
test-employeerecognitioncenter.libertymutual.com
test-employeelearningcenter.libertymutual.com
test-ecxmlservices.lmig.com
test-ecxmlservices-leg2.lmig.com
test-ecxmlservices-leg1.lmig.com
test-developers.solarialabs.com
test-counsellink.libertymutual.com
test-buysmart.libertymutual.com
test-b2b.libertymutual.com
test-avature.libertymutual.com
test-apis.solarialabs.com
test-apis.libertymutual.com
techcampus-test.libertymutual.com
sts-np.libertymutual.com
staging-ami-services.lmig.com
stage-ecxmlservices-kc.libertymutual.com
stage-ecxmlservices-kc-leg2.libertymutual.com
stage-ecxmlservices-kc-leg1.libertymutual.com
stage-ci-policyquoteapi.libertymutual.com
smst.libertymutual.com
smst-pdc.libertymutual.com
smst-pdc-leg2.libertymutual.com
smst-pdc-leg1.libertymutual.com
smst-kdc.libertymutual.com
smst-kdc-leg2.libertymutual.com
smst-kdc-leg1.libertymutual.com
sandbox-lmidp.lmig.com
rightfit-test.libertymutual.com
public-aws-test-url.libertymutual.com
perf-eproc.libertymutual.com
np.hellochaser.com
np.gowandry.com
mypassword-test.lmig.com
lmssonp.lmig.com
lmssodev.lmig.com
lmb-np.mylibertyconnection.com
insurifier-test.libertymutual.com
dev-ami-services.lmig.com
cloudmonitor-test-securefile.libertymutual.com
careers-test.libertymutualgroup.com
capnpn.lmig.com
capnn.lmig.com
dev.lmi.co

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for test-securefile.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQQXpkZVAsOSqAC2beDg
fn6SsmQ6XqV3L0u4SGQHWgbpsBlvpzNE/MnoOLtuiY9hKeCVVqg7cE/oGDf83ZM+
j154ZJ0GVLmD/f/bH9AOlmPpOPtKHOCXEkmwn0z8VU2nEs0kksSlkyn2wWPJz27d
9lSYbzK/aT9po1UlqF2bjiy/4oY4MP77FBwgB1ZrXKPMf7GHQmaRHGjDb3NxtwIc
SRe6hEgpvDp3Wt0/PCTRHCBuUJ9FouTNGvLmgF1d2XyD3KVuvqYcVCXFk7qoDQ4A
DGigoKrv5iJIItXekDvMGc7PR0yNPhKumImt3rA0KEIH5+L7Q/bZzlJRenMGtJpl
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13003387646997093516250804971356806708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ETS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-securefile.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24366010886684590142013526530248300434988514782760068296648363570144035185180381722748852033509067918471077556685283394310859549288737731068594313375319696234676737157879086773091469138932867539240502572875108549149762747402407446918513257161020550506550814884599212213015107665693446313093511497344091039646021834776198640851247641143874551153759393001635796026023868271873907619212341276724910262114054721729835681631796981615678681152856928722904935298883956136059742713014014606718040052555363965602076849848769134008093288022905060987530851802742303895579892695560063370325506429509756455981596582805678996481417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6f2216169bfe35b5986d2ea0c13dff2f6b92ac9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datahub-listener-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-relativity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyportal-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emergencyportal-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssa-dev-idp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whatsyourpursuit-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test-stage.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-torchbearers.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-securefile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boardofdirectors-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.libertymutualsafetynet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-search.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-risktracresources.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tstextecollaborate.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.lmemergencyportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.emergencyportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.lmglogos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.lmemergencyportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-tuitionreimbursement.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-travelportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-tempstaffing.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-servewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-realestateatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-pcf-ext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partnercomm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-myworkplacerequests.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mytoken.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mypersonalbest.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mycareerdevelopmentcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-lmidp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertypac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertyhealthcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-legallibrary.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-legalhold.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-learningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-hiringatliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-hal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-givewithliberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fusion.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fieldglass.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-kc.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-kc-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-eservices-kc-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-enterpriseid-external.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-enavigatemobile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-employeerecognitioncenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-employeelearningcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecxmlservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecxmlservices-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecxmlservices-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-developers.solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-counsellink.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-buysmart.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-b2b.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-avature.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-apis.solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-apis.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcampus-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-ami-services.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ecxmlservices-kc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ecxmlservices-kc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ecxmlservices-kc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ci-policyquoteapi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-pdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-pdc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-pdc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-kdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-kdc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smst-kdc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-lmidp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightfit-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public-aws-test-url.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-eproc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.hellochaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.gowandry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypassword-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmssonp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmssodev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmb-np.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insurifier-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ami-services.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-securefile.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capnpn.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capnn.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.lmi.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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