test-libertymutual.myinstantincentives.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 67:c6:f1:80:7a:47:1a:19:08:c3:8f:16:85:61:9e:e4 was issued on by Symantec Corporation.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:c6:f1:80:7a:47:1a:19:08:c3:8f:16:85:61:9e:e4
Serial Number (int): 137943456583598640832673947952240238308
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 26:07:95:54:92:11:1c:31:70:ec:37:ce:7e:5e:6f:99:ee:e7:73:4f
Fingerprint (sha256): 15:97:66:52:45:f0:74:95:54:68:3e:d3:5f:d3:ff:61:69:b5:54:23:73:c7:4d:e3:00:57:fe:8f:68:52:48:43

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate test-libertymutual.myinstantincentives.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-libertymutual.myinstantincentives.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-auth.lmcissobrokerdc1.libertymutual.com
www-test.mylibertyconnection.com
www-test2.mylibertyconnection.com
tst-www.mybusinessonline.libertymutual.com
tst-www.libertymutualvantageport.com
tst-www.commercialportal.libertymutual.com
tst-secure.mybusinessonline.libertymutual.com
tst-public.libertymutualvantageport.com
tst-login.commercialportal.libertymutual.com
tst-auth.libertymutualvantageport.com
test-workerscompensationsupport.libertymutual.com
test-workerscompensationsupport.helmsmantpa.com
test-webquote.libertymutual.com
test-wcequote.libertymutual.com
test-suretyonline.myinstantincentives.com
test-stui.safeco.com
test-stui.peerless-ins.com
test-stui.ohiocasualty-ins.com
test-stui.montgomery-ins.com
test-stui.libertynorthwest-ins.com
test-stui.libertymutualgroup.com
test-stui.libertymutual.com
test-stui.indiana-ins.com
test-stui.goldeneagle-ins.com
test-stui.coloradocasualty-ins.com
test-stui.americafirst-ins.com
test-steps.safeco.com
test-steps.peerless-ins.com
test-steps.ohiocasualty-ins.com
test-steps.montgomery-ins.com
test-steps.lmig.com
test-steps.libertynorthwest-ins.com
test-steps.libertymutualgroup.com
test-steps.libertymutual.com
test-steps.indiana-ins.com
test-steps.goldeneagle-ins.com
test-steps.coloradocasualty-ins.com
test-steps.americafirst-ins.com
test-saml.mylibertyconnection.com
test-safeco.myinstantincentives.com
test-safeaudit.libertymutual.com
test-risktracrmis.lmig.com
test-risktracdocuments.lmig.com
test-preferences.libertymutual.com
test-policyholders.libertynorthwest.com
test-obsc.peerless-ins.com
test-obsc.ohiocasualty-ins.com
test-obsc.montgomery-ins.com
test-obsc.libertynorthwest-ins.com
test-obsc.libertymutualgroup.com
test-obsc.indiana-ins.com
test-obsc.hawkeyesecurity-ins.com
test-obsc.goldeneagle-ins.com
test-obsc.coloradocasualty-ins.com
test-obsc.americafirst-ins.com
test.libertymutualprovidersupport.com
test-libertymutual.myinstantincentives.com
test-libertymmhtables.libertymutual.com
test-ixprs.libertymutual.com
test-helmsmantpa.lmig.com
test-feedback.libertymutual.com
test-elibertyquote.libertymutual.com
test-ecsgdisplay.libertymutual.com
test-clpi.libertymutual.com
test-claimseft.peerless-ins.com
test-claimseft.ohiocasualty-ins.com
test-claimseft.montgomery-ins.com
test-claimseft.libertymutualgroup.com
test-claimseft.indiana-ins.com
test-claimseft.hawkeyesecurity-ins.com
test-claimseft.goldeneagle-ins.com
test-claimseft.coloradocasualty-ins.com
test-claimseft.americafirst-ins.com
test-calm.libertymutual.com
test-billinginquiry.lmig.com
test-agentsportal.libertymutual.com
test-af.safeco.com
test-af.peerless-ins.com
test-af.ohiocasualty-ins.com
test-af.montgomery-ins.com
test-af.libertynorthwest-ins.com
test-af.libertymutualgroup.com
test-af.libertymutual.com
test-af.indiana-ins.com
test-af.goldeneagle-ins.com
test-af.coloradocasualty-ins.com
test-af.americafirst-ins.com
secure-test.mylibertyconnection.com
secure-test2.mylibertyconnection.com
cloudmonitor-test-libertymutual.myinstantincentives.com
auth-test.mylibertyconnection.com
test-claimstour.libertymutualgroup.com
ecdev-sam-dev.apps.safeco.com
ecdev-sam-tin.apps.safeco.com
safesite.qa.safeco.com
test-cliq.libertymutual.com
test-cliq.lmig.com
test-clpi.lmig.com

Other certificates including the domain name myinstantincentives.com

(limited to 100 certificates)
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com

Certificate

The complete raw certificate details for test-libertymutual.myinstantincentives.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05O/fHKozeQaP7f3SHOu
wSYNwFQPf0C8ZmfgkXURcsgQqgdx7lPA8yrB+GJOIoEH4+sPO/dPmRHYgobtKmUF
6CEIY7unoGrmp6cdc+pNswIoDMv14eJdo9hk0L6yWYko3US2NUU/MIEPgCfSau0X
xoBMyVrVVj2dPlA/w01DGQCMsYYjYFcXMadUBuIdAmzy0kQ3kCq7Z/1uENlNShsh
ZmwcOfgNoSybh6/dkzlTL7cRQrUz2HtvelNh0gGptYgbDHfBd5HqDBPk5bwDxA4Y
hCLdjfuppyYU2GLM+3s0m2c2/5/ViLdd8ymfTVyModgQ2aqbLlvePuRgEu3IkMuT
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 137943456583598640832673947952240238308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26709139598452873239033995514000159714612524309711635389653745787815506250309384533338569946381648816308077361938496974154532728075279860839952755521349820397200498454435493400399667446796048613709401225731628658979591003155466767025574670635648886880463321986739503017176327779026943087216635621672623870848330349014311034723753099102854287219747787079686291142819296535972152429420923167197351699470104343065849583874203333643715401202479002580795153701680198352865564145142271624060407808375079332118322108879365045068381653876543590447972874933712959434115471310471971240836471848948763097439729006602883670184789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auth.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-secure.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-login.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-webquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wcequote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-suretyonline.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-saml.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeco.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeaudit.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risktracrmis.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risktracdocuments.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-preferences.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ixprs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-helmsmantpa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-feedback.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-elibertyquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecsgdisplay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-calm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimstour.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecdev-sam-dev.apps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecdev-sam-tin.apps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safesite.qa.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cliq.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cliq.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007edeb4c1fcb39a36e3fd072c5adf88860ec47e498b92989d6a985de394226a62b2d43bfd8d9f67441beb2e364c6cbcce3e3b68c81008254e8d4030b59b6a0495b66a7f59e1b773edb62db8d9a9e5564c1ecfdeb16bcb39bcdf66f1bf17189cc38967a8dcb292ed9b89777f891995b6ebe0e872c64cde9efe5996c3396293df9f1149274f4d8bd5a8187b5a61a730436ae33cc8478a421b7b30198196020bd94b6643aec6873bb8de6f3b854abf051a0f7069630ac08cd661fcd9751a12e5ea0b837ca055b96f80d05e44dccd48c105cbb4c1fae807a09967385fbc212d0e27d38a91a2fbe5f8f781ded982cee284cd8885cdff529d996015556af3131f9209bb