techcampus.libertymutual.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:4c:49:18:df:f2:df:15:6b:56:61:ec:c0:03:dc:73 was issued on by DigiCert Inc.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Corp ETS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:4c:49:18:df:f2:df:15:6b:56:61:ec:c0:03:dc:73
Serial Number (int): 17676061093138290883151333043269262451
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:1e:61:58:b6:a7:3c:7e:dd:f9:a4:28:7a:a1:cf:b9:b2:b4:36:12
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e2:4d:b8:0f:75:05:a2:b1:2d:6a:f3:97:f8:17:cb:95:c1:0c:2f:89
Fingerprint (sha256): 10:53:df:70:c1:9e:48:88:f5:cf:ec:a5:78:9c:6a:34:82:c9:80:fc:e7:a9:2f:fb:c5:d4:7c:42:15:60:de:6e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate techcampus.libertymutual.com

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for techcampus.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

PeopleAtLiberty.libertymutual.com
hscct-app-gateway.libertymutual.com
qcc.lmigex.com
www.concur-lit.lmig.com
apis.us-east-1.libertymutual.com
apis.eu-west-1.libertymutual.com
emailtraining.lmigex.com
welcome.lmigex.com
invitationalassets.lmigex.com
prod-lmidp-smtokenext.libertymutual.com
gwlreview.lmigex.com
mypassword-pilot.lmig.com
storefront.libertymutual.com
agentportal.libertymutual.com
gwlreview.libertymutualgroup.com
fusionrestapiapp.libertymutualgroup.com
www.libertygts.com
libertygts.com
easmd-np.libertymutual.com
easmd.libertymutual.com
www.meetingrequestformportal.lmimeetings.com
attend.lmimeetings.com
www.attend.lmimeetings.com
meetingrequestformportal.lmimeetings.com
www.meetingrequestform.lmimeetings.com
meetingrequestform.lmimeetings.com
lmimeetings.com
www.lmimeetings.com
www.ReLibera.com
www.libertymutualcommunications.com
www.libertymutualfoundation.org
libertymutualcommunications.com
libertymutualfoundation.org
Relativity.LibertyMutual.com
www.viewpoint.libertymutualgroup.com
helpingyousucceed-libertymutual.com
access.libertymutual.com
security-workshop.libertymutual.com
eu-west-1-lmidp.libertymutual.com
us-east-1-lmidp.libertymutual.com
torchbearers.libertymutual.com
www.hellochaser.com
www.gowandry.com
www.careers.libertymutualgroup.com
therightfit.libertymutual.com
techcampus.libertymutual.com
sts.libertymutual.com
sms.libertymutual.com
sms-pdc.libertymutual.com
sms-pdc-leg2.libertymutual.com
sms-pdc-leg1.libertymutual.com
sms-kdc.libertymutual.com
sms-kdc-leg2.libertymutual.com
sms-kdc-leg1.libertymutual.com
mycareerdevelopmentcenter.libertymutual.com
lmidp.lmig.com
lmidp.libertymutual.com
lmb.myLibertyConnection.com
legalhold.lmig.com
hellochaser.com
fieldglass.libertymutual.com
eservices-leg2.lmig.com
eservices-leg1.lmig.com
eservices-kc-leg2.lmig.com
eservices-kc-leg1.lmig.com
ecxmlservices.lmig.com
ecxmlservices-leg2.lmig.com
ecxmlservices-leg1.lmig.com
ecxmlservices-kc.libertymutual.com
ecxmlservices-kc-leg2.libertymutual.com
ecxmlservices-kc-leg1.libertymutual.com
developers.solarialabs.com
developers.libertyseguros.com.br
developers.libertymutual.com
ci-policyquoteapi.libertymutual.com
careers.libertymutualgroup.com
apis.solarialabs.com
ami-services.lmig.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for techcampus.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAoNMDkd9eSZhSmUgLS+
BEqu99VP/Yph0fEku8EJ+9IzLH9kkTgkbkXKy0mfAehKew1rmMzSOWd66DA0+wXe
Ndl5d97YdCIe/9KMietETlMn3lHTMIDR0vIz3BX5P7Si8rT7oYRWuUB3p6H1FAb4
U1MIcFQxRXJFDNVMz6tPmrYpw0XeCspqErG+zHgVl1KanOtqbSXEjyHUs8FCD87G
O5a/UmMQAcIn5FNdtCb6Sl8s+YFh/ucMQ/6iqV/03ht285oZtQEaTkEkGEyUXisq
X8ILdy14OaT0pdEl4TlhqpB/TqkqqXquWkHvz11dQoi9IZtbhXOkKpwvxkOeHwXQ
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17676061093138290883151333043269262451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corp ETS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'techcampus.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24242711141288143988830790607713129296055773100380296235782327215409416097893142677212321486749430169427846448078863490640028745992150886988352905253026551914112521681481724275253026793172917789913170179753926085068664284711424262915462057912456891164781106371711918287879555785053867275523496006040350958187804814505255980925859687531232513732276493594829713399432146710078154155377488212109607127054653407500915764424731839558500192807026469177034621529645019499136696117884254475523339817084077810752417707048106735303870627234156678219953726276181999369959713668393933713635177201847494875011804604546347098820689
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							781e6158b6a73c7eddf9a4287aa1cfb9b2b43612
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PeopleAtLiberty.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hscct-app-gateway.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qcc.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concur-lit.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.us-east-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.eu-west-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailtraining.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invitationalassets.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-lmidp-smtokenext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwlreview.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypassword-pilot.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storefront.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gwlreview.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fusionrestapiapp.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easmd-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easmd.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetingrequestformportal.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attend.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attend.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingrequestformportal.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meetingrequestform.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meetingrequestform.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmimeetings.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ReLibera.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualcommunications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualfoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Relativity.LibertyMutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewpoint.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpingyousucceed-libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security-workshop.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-west-1-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1-lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torchbearers.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hellochaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gowandry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'therightfit.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcampus.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sts.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-pdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-pdc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-pdc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-kdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-kdc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sms-kdc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycareerdevelopmentcenter.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmidp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmidp.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmb.myLibertyConnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legalhold.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellochaser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fieldglass.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-kc-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservices-kc-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-leg2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-leg1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-kc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-kc-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecxmlservices-kc-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developers.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-policyquoteapi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.solarialabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ami-services.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001696cde685c000004030047304502202ac0f43679ecac780e58c46a297f82a265c541878c9d7c7a4bab24f494e18398022100c88368e19311184a191e5976decdb5641d031d3342b79f9d812bac584866f77e007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001696cde68930000040300473045022100a29573df69082b1511f32796fd39317d10c78763988120031d56de65903b6e0402207f36e8a44fc01925c4448cfcc3097fcd8b41c19e0fd2029fd0e8225665e25d19
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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