PeopleAtLiberty.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3c:46:75:80:30:26:6a:5f:58:5e:ed:5c:2a:4e:3b:c3 was issued on by Entrust, Inc..

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3c:46:75:80:30:26:6a:5f:58:5e:ed:5c:2a:4e:3b:c3
Serial Number (int): 80119523725222541361725950457371573187
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 2a:b8:c3:7e:d9:ca:8d:05:4e:8f:d9:6c:c4:0d:79:12:b4:1c:32:42
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 89:e9:bd:8f:34:63:d0:8d:02:ad:4f:b4:a0:08:f6:0c:79:fe:a5:39
Fingerprint (sha256): 10:d1:9d:78:03:bb:db:2a:d8:e4:30:df:19:ea:f4:13:20:02:8e:a0:63:91:f1:28:8e:fd:b9:e6:98:e5:60:69

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate PeopleAtLiberty.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for PeopleAtLiberty.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

PeopleAtLiberty.com
www.PeopleAtLiberty.com
truservices.com
www.truservices.com
www.liberty-it.ie
liberty-it.ie
yourphoto.lmigex.com
lmig.co
beta.developer.libertymutual.com
apis.ap-southeast-1.libertymutual.com
devll.lmi.co
us.myliberty.lmig.com
www2.libertymutualgroup.com
prod-lmidp-smtokenext.lmig.com
lit.myliberty.lmig.com
lmconferences.lmigex.com
sureroute-kdc.libertymutual.com
redirect.lmig.co
libertylvp.lmigex.com
eliteuw.lmigex.com
leaderobjective.lmigex.com
redirect.workgrid.com
www.libertymutualfoundation.com
libertymutualfoundation.com
go.workgrid.com
wbft.libertymutual.com
LMstrategicventures.com
LMSV.vc
hold-icasemanagersecure.libertymutual.com
redirect.lmi.co
api.helphub.libertymutual.com
identityandvalues.lmigex.com
hold-risktracdocs.libertymutual.com
www2.liberty-it.co.uk
csvideoadmin.lmigex.com
techhelpapp.lmig.com
myliberty-events.lmig.com
myliberty-messaging.lmig.com
hold-risktrac.libertymutual.com
hold-demo-risktrac.libertymutual.com
pilot-ezdrop.libertymutual.com
pilot-ezdrop.helmsmantpa.com
pluralsight.libertymutual.com
liberty-it.co.uk
idv.lmigex.com
softwaredelivery.lmig.com
aat-synthetics-pa-prod-ext-ldap.lmig.com
aat-synthetics-pa-prod-ext-ad.lmig.com
aat-synthetics-pa-prod-ext-coreblox.libertymutual.com
myliberty-metadata.lmig.com
globaldir.lmigex.com
captioncontest.lmigex.com
hold-pmap.lmig.com
yeh.lmigex.com
api-dev.us.libertymutual.com
shields.lmig.com
health-screening.libertymutual.com
api-tst.libertymutual.com
api.libertymutual.com
api.us.libertymutual.com
conflict-waivers.libertymutual.com
cwh.lmig.com
www.liberty110gifts.com
developer.libertymutual.com
libertygifts.lmigex.com
libertyclaimscareers.lmigex.com
stackoverflow-event-collector.libertymutual.com
venafi1.lmig.com
video-myliberty.lmigex.com
api.libertyseguros.com.br
api.eu.libertymutual.com
libertymutualinvestments.com
fdc-loadbalancer.lmig.com
interndirectory.lmigex.com
www.libertymutualinvestments.com
developer.libertyseguros.com.br
common-ui.lmig.com
api.ap.libertymutual.com
libertymutualinternportal.com
www.libertymutualinternportal.com
libertyinternportal.com
publiccloud-iam-spi-service.libertymutual.com
www.libertyinternportal.com
publiccloud-cloudformation-spi-service.libertymutual.com
privileged-access-spi.libertymutual.com
reserve.lmig.com
hold-dev-obsc.peerless-ins.com
hold-dev-stui.lmig.com
revtrac.aws.lmig.com
packages.forge.lmig.com
libertylinks.libertymutual.com
testsecureassets.libertyspecialtymarketsap.com
algds-production-dr.lmig.com
direct-deposit-enrollment-ui-test.libertymutual.com
lmi.com
secureassets.libertyspecialtymarketsap.com
publiccloud-execution-spi-service-stg.libertymutual.com

Other certificates including the domain name PeopleAtLiberty.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for PeopleAtLiberty.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurk4S/yVbxpYlIyxj+7N
ZT9kneRn7CXxrCOFVW2DHxU6iM9Efp3Daze9a8aCnYt1AsyigX+w0+yZGckU1XgH
LD/GPOs3etEGPJAvY6/cX7rfjLr/NVQ5a8fG+ElMOune1bXqYTK+U+BJkrdbrFRC
gS+Ob6mdWBomsy5qiwEpSCZLfbdUpHhreKIe3BaXlYm4RIbGgOKeTnxggbZBHzSd
7bUan1CBQT03mnYjCN8cKJPDclLQna/02YDTKmIfIIMYFgXdTqKVDNUoSc0NDcDc
Ou5/XUp7KXyRgos2SYYirj74d1CiNbdSh0UYu4WGv6xcfP7CPuMP0YsNrOxebqOb
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80119523725222541361725950457371573187
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-15 22:31:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-13 22:31:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PeopleAtLiberty.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23571660065158565841019323573577208073979275543465366230095266786487079419670961159814309784087121688044178716723398052631208347414463982643580102700418979202643564479540169833870334540717083736021419904441795322802616638836030911909168491923626229843308088601699783199800451975029385264372431131686464027969296732391020844036241195079070300915455091397545291097343605663792660103384947020788377276401150022374036230116765477823619013431182142230326429139085911308286723035683337667286915652880283726682586801749611041801816598219539264995356124737066320092083457652312563399229363888707646559289677679341512832555829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ab8c37ed9ca8d054e8fd96cc40d7912b41c3242
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2745 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'PeopleAtLiberty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.PeopleAtLiberty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'truservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.truservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty-it.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty-it.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourphoto.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmig.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.developer.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.ap-southeast-1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devll.lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.myliberty.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-lmidp-smtokenext.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lit.myliberty.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmconferences.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sureroute-kdc.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.lmig.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylvp.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eliteuw.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leaderobjective.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.workgrid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wbft.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LMstrategicventures.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LMSV.vc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.helphub.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identityandvalues.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-risktracdocs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.liberty-it.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csvideoadmin.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techhelpapp.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myliberty-events.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myliberty-messaging.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-ezdrop.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-ezdrop.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pluralsight.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty-it.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idv.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwaredelivery.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aat-synthetics-pa-prod-ext-ldap.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aat-synthetics-pa-prod-ext-ad.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aat-synthetics-pa-prod-ext-coreblox.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myliberty-metadata.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globaldir.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'captioncontest.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-pmap.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yeh.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-dev.us.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shields.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health-screening.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-tst.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.us.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conflict-waivers.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwh.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty110gifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertygifts.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyclaimscareers.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stackoverflow-event-collector.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'venafi1.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-myliberty.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.eu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdc-loadbalancer.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interndirectory.lmigex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualinvestments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'common-ui.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ap.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualinternportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualinternportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinternportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publiccloud-iam-spi-service.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinternportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publiccloud-cloudformation-spi-service.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privileged-access-spi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reserve.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-dev-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-dev-stui.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revtrac.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'packages.forge.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylinks.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testsecureassets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algds-production-dr.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct-deposit-enrollment-ui-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureassets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'publiccloud-execution-spi-service-stg.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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