af.libertymutual.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 4c:f2:00:1a:af:81:e9:d9:8c:57:c9:d8:3f:e7:c7:e7 was issued on by Symantec Corporation.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:f2:00:1a:af:81:e9:d9:8c:57:c9:d8:3f:e7:c7:e7
Serial Number (int): 102277865633668192471578914356707444711
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 03:ce:80:4b:98:ea:42:ab:a1:5a:d6:20:d4:21:ac:f3:35:b4:76:4b
Fingerprint (sha256): 16:5c:1b:ca:77:96:60:e8:0f:24:b9:37:d4:49:9e:a0:b1:3d:bd:de:27:ab:e8:22:ad:4d:d6:73:3f:ec:4b:13

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate af.libertymutual.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for af.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

np.libertypethealth.com
www.oliveforlife.com
cmpubdocumentext.libertymutual.com
largecommercialclaimportal.libertymutual.com
custom-protector.libertymutual.com
dmsservices3-r.lmig.com
benefits.libertymutual.com
esales.lmb.libertymutual.com
wrs.libertymutual.com
dmsservices-sbat.lmig.com
dr-www.libertymutualvantageport.com
dr-public.libertymutualvantageport.com
dr-sppriv.libertymutualvantageport.com
dr-spadmin.libertymutualvantageport.com
dr-auth.libertymutualvantageport.com
wcvideo.libertymutualgroup.com
wcvideo.helmsmantpa.com
video.claimstour.helmsmantpa.com
test-cibilldocuments.libertymutual.com
stui.safeco.com
stui.peerless-ins.com
stui.ohiocasualty-ins.com
stui.montgomery-ins.com
stui.libertynorthwest-ins.com
stui.libertymutualgroup.com
stui.libertymutual.com
stui.indiana-ins.com
stui.goldeneagle-ins.com
stui.coloradocasualty-ins.com
stui.americafirst-ins.com
steps.safeco.com
steps.peerless-ins.com
steps.ohiocasualty-ins.com
steps.montgomery-ins.com
steps.lmig.com
steps.libertynorthwest-ins.com
steps.libertymutualgroup.com
steps.libertymutual.com
steps.indiana-ins.com
steps.goldeneagle-ins.com
steps.coloradocasualty-ins.com
steps.americafirst-ins.com
saml.lmcissobrokerdc2.libertymutual.com
safetynet.libertymutual.com
public.safetynet.libertymutual.com
policyholders.libertynorthwest.com
obsc.peerless-ins.com
obsc.ohiocasualty-ins.com
obsc.montgomery-ins.com
obsc.libertynorthwest-ins.com
obsc.libertymutualgroup.com
obsc.indiana-ins.com
obsc.hawkeyesecurity-ins.com
obsc.goldeneagle-ins.com
obsc.coloradocasualty-ins.com
obsc.americafirst-ins.com
mylibertyconnection.com
libertymmhtables.libertymutual.com
icasemanagersecure.libertymutual.com
helmsmantpa.com
demo-risktrac.libertymutual.com
claimseft.peerless-ins.com
claimseft.ohiocasualty-ins.com
claimseft.montgomery-ins.com
claimseft.libertymutualgroup.com
claimseft.indiana-ins.com
claimseft.hawkeyesecurity-ins.com
claimseft.goldeneagle-ins.com
claimseft.coloradocasualty-ins.com
claimseft.americafirst-ins.com
cibilldocuments.libertymutual.com
business.libertymutualgroup.com
billinginquiry.lmig.com
auth.lmcissobrokerdc2.libertymutual.com
app.lmcissobrokerdc2.libertymutual.com
analytics.libertymutual.com
af.safeco.com
af.peerless-ins.com
af.ohiocasualty-ins.com
af.montgomery-ins.com
af.libertynorthwest-ins.com
af.libertymutualgroup.com
af.libertymutual.com
af.indiana-ins.com
af.goldeneagle-ins.com
af.coloradocasualty-ins.com
af.americafirst-ins.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for af.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+BzOaVNhJDl1zqlGV8Q
qgEDyVKfnr1fTEfDmCPV0kkNLmonNpjWZWSx8BuhnBcnA5gBHBU1ZY4eWY41mUVm
I07uiz6P0163ZbCVrXgjQztB/91BTSGQhRUQ1PYWy3b3eOeotUvzfrDxODOlBhB4
cLpKZTEEX6eJk0fPNYRQnrLQ2fHUNRcDpUkKrlHg68oED33KoiNNglJPNs8ZDaXi
kjTEIZhP3spmBeqEkDPBh/qCRe59f3pKj0CbAJyJDVKyJEjcB7rZd3ip3i9i8MFF
XXaQdvFVUbRb6x96aVxpdxMTvboK/4ReAIEZSmnQOJMg0N4GMWeQ/hh1UuDOR5s1
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102277865633668192471578914356707444711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'af.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23212290277404539519442216692545671245235822656625762222554852835935172369024199635194368338403615705081954144990137613869762472127977205464349437592446506680583755994668894446910407535975183618918834676003184610537231102277318000614637438678529603399084200129267166990431549682412559972751118967103191526704028056526806455186072851913807506237297776286279932077272625959104364882044530965255984279404569895875426629285212708592641296725031597614368759793630555792348475345302313297620381068887582989150456963922278101173140963237457448117025081244490827327952960495374594312379423614287124005826885320706230289380711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2530 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.libertypethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliveforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpubdocumentext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'largecommercialclaimportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-protector.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsservices3-r.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esales.lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsservices-sbat.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-sppriv.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-spadmin.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.claimstour.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saml.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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