digital.libertyinsurance.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 49:b2:12:1b:20:28:58:2a:00:00:00:00:50:f8:82:76 was issued on by Entrust, Inc..

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRM East
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 49:b2:12:1b:20:28:58:2a:00:00:00:00:50:f8:82:76
Serial Number (int): 97958239765603605345142460815395816054
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 69:43:aa:66:49:23:10:b2:b1:f2:14:e7:0f:db:ae:41:88:5d:ce:80
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 1f:01:b5:c9:2d:a2:d6:6a:a8:44:d2:54:8b:e7:cb:a5:96:f0:68:22
Fingerprint (sha256): 16:b4:dd:26:91:22:6b:9e:f2:0f:2d:5c:ac:63:85:0a:e1:03:5a:4d:2b:b4:69:3d:0b:81:16:d8:e4:08:50:b5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate digital.libertyinsurance.com.sg

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digital.libertyinsurance.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital.libertyinsurance.com.sg
affinity.libertyinsurance.in
simplify.com.hk
www.simplify.com.hk
www.lmginsurance.co.th
ww02.libertymutual.com.hk
lbis.lmginsurance.co.th
lbis-admin.lmginsurance.co.th
www.lmgpacific.com
payment-apac.libertymutual.com
easypay.libertyinsurance.com.hk
easypay.libertyinsurance.com.sg
Pare-uat.libertyinsurance.in
lfoservices.libertyinsurance.in
Services.libertyinsurance.in
mobilityservice.libertyinsurance.in
espaider.libertyseguros.com.br
ws-tpaclaims.ah-east.libertymutual.com
autodiscover.lmginsurance.co.th
ebiz2.lmginsurance.co.th
ebiz3.lmginsurance.co.th
ebiz4.lmginsurance.co.th
ebiz5.lmginsurance.co.th
lbis-poi.lmginsurance.co.th
libertyinsurance.com.sg
libertyinternational.com.hk
libertymutual.com.hk
onelink.libertyinsurance.com.sg
online.libertyinsurance.com.sg
printprod.lmginsurance.co.th
www.libertyinsurance.com.hk
www.libertyinsurance.com.sg
www.libertyinsuranceni.co.uk
www.libertymutual.com.hk
www.liil.com.hk
livechat.libertyinsurance.com.vn
www.libertyinsurance.com.vn
online.libertyinsurance.com.hk
notification-center.lmig.com
ws-tpaclaims.ah-east.lmig.com
master.lhc.libertymutual.com.hk
oem.libertyinsurance.in
pare.libertyinsurance.in
vendor.libertyinsurance.in
appservices.libertyinsurance.in
livestream.libertyinsurance.in
S2SPay.libertyinsurance.in
mobility.libertyinsurance.in
livmobile.libertyinsurance.in
quotation.libertyinsurance.in
partner.libertyinsurance.in
healthinsurance.libertyinsurance.in
healthinsurancepartner.libertyinsurance.in
business.libertyinsurance.in
api.libertyinsurance.in
motorpi.libertyinsurance.in
www.libertyinsurance.in
brmspolicy.libertyinsurance.in
brmsclaims.libertyinsurance.in
lgiwhatsapp.libertyinsurance.in
ecm.libertyinsurance.in
ithink.libertyinsurance.in
authen.lhc.libertymutual.com.hk
claim.lhc.libertymutual.com.hk
policy.lhc.libertymutual.com.hk
api.lhc.libertymutual.com.hk
easyclaim.libertyinsurance.com.hk
printaws.lmginsurance.co.th
ebizcrm.lmginsurance.co.th
moem.libertyinsurance.in
videostreaming.libertyinsurance.in
payment.libertyinsurance.com.sg
api.libertyinsurance.com.sg

Other certificates including the domain name libertyinsurance.com.sg

(limited to 100 certificates)
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
digital.libertyinsuranceasia.com
www.libertyseguros.com.br
www.libertyseguros.com.br
www.libertyseguros.com.br
act-dmz.libertyseguros.com.br
sip-kdc-03.libertymutual.com
sip-pdc-03.libertymutual.com
uat.mediedge.com
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
uat.mediedge.com
digital.libertyinsurance.com.sg
uat.mediedge.com
libertymutual.com
libertymutual.com
libertyinsurance.com.sg
nonprod-corp.libertyinsurance.com.hk
brmspolicy-uat.libertyinsurance.in
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
filetransfer.libertyinsurance.com.sg
uat.mediedge.com
libertymutual.com
libertymutual.com
uat.mediedge.com
libertymutual.com
digital.libertyinsurance.com.sg
online.libertyinsurance.com.sg
pwkipgf-gflnc02.gfab.lmig.com
filetransfer.libertyinsurance.com.sg
nonprod-easycare.libertymedicalinsurance.com
mail-na.lm.lmig.com
digital.libertyinsurance.com.sg
uat.mediedge.com
digital.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
uat.mediedge.com
libertymutual.com
sg-webmail.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
www.libertyinsurance.com.sg
digital.libertyinsurance.com.sg
onelink.libertyinsurance.com.sg
libertymutual.com
digital.libertyinsuranceasia.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
act-dmz.libertyseguros.com.br
act-dmz.libertyseguros.com.br
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
brmspolicy-uat.libertyinsurance.in
uat.mediedge.com
www.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
uat.mediedge.com
act-dmz.libertyseguros.com.br
libertymutual.com
uat.mediedge.com
www.libertyinsurance.com.sg
libertymutual.com
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
act-dmz.libertyseguros.com.br
ezcare.libertyinsurance.com.sg
www.libertyinsurance.com.sg
act-dmz.libertyseguros.com.br
onelink.libertyinsurance.com.sg
libertymutual.com
uat.mediedge.com
libertymutual.com
act-dmz.libertyseguros.com.br
ezcare.libertyinsurance.com.sg
uat.mediedge.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com
libertymutual.com
act-dmz.libertyseguros.com.br
pwwipgf-gflnc02.gfab.lmig.com
libertymutual.com
mail-na.lm.lmig.com
pwkipgf-gflnc02.gfab.lmig.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
nonprod-easycare.libertymedicalinsurance.com
nonprod-easycare.libertymedicalinsurance.com

Certificate

The complete raw certificate details for digital.libertyinsurance.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCjudlbXKvCgxjd31NSm
5rVPbhwVWQZR/ToWitGcjqq9mvwc0jP8PWn1pvMRN5mf8t8HhrbXUKgjUGwRRYjU
ECV7emxiTmQ2BIQvDhKJt0Jjy2US+zmo3V5N6YbdpXk5gBIyj9L231d6HPF+e87j
Pxp1aDiTB06N3QfQFoMQ3WGu8YKxfJN0d4ONMGF6nFLYddVnxpZb8J6Ui4jhiDq/
ZwPbUYwsFooE6RKLFXXCCG8f41YFVaB5Tlx745JB4zGFrqP2siZBphpKVaNZPKlu
LJxDEDSDztcY6oTxSUEn9GkvcUQAQS2v1lJA4+Yk2pgP7lrv2MdOBbINXxSWzzOe
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 97958239765603605345142460815395816054
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 12:46:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 13:16:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRM East'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digital.libertyinsurance.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23752985405193102692825357600385917266353346206459672929143898430090704133187241089885642562113732521340874979458106501478795055161607332697929828828111921503544394718542834240109035376336356505272831521984427304726540411270300405851443680457438041057255326603458200715389848569462808011644924644869843260096585889969782459683673754763281327848991281468952415754601725159933259593632342972152607736241199262376811427113098533927948797935938166842987304343547373502992158103835213976302960957945419886478489106283253608008642336347643878639361282022165674565524151542267652489637844056849450052707311375648413327793833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2166 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinity.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplify.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplify.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww02.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis-admin.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmgpacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment-apac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easypay.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easypay.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Pare-uat.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfoservices.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Services.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilityservice.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaider.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-tpaclaims.ah-east.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz2.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz3.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz4.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz5.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis-poi.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelink.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printprod.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsuranceni.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liil.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livechat.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notification-center.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-tpaclaims.ah-east.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'master.lhc.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oem.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pare.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vendor.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appservices.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestream.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'S2SPay.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobility.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livmobile.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotation.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthinsurance.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthinsurancepartner.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorpi.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brmspolicy.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brmsclaims.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lgiwhatsapp.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecm.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ithink.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authen.lhc.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claim.lhc.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policy.lhc.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lhc.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyclaim.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printaws.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebizcrm.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moem.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videostreaming.libertyinsurance.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016dbaf6fea10000040300463044022067c99fce7a76132b900b7e27379a5d7a93ab7f21eb8733cf11e0e5a7b5f98ed1022010d50142603ea9260a8b9376d74017358004a7eebc31b7fc57d897e9a0ddfb870076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016dbaf6fea9000004030047304502205c4cb733998d6f251046f980b76bc3e6334fa361a9867d7c458d0b9ecc331907022100a2b8e88e37db40fa020a1c0193c5f6839b6dc6441a8e01fd7b1ee99a86e67991007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbaf6fe990000040300483046022100b1a3f61dc3e103bca7622840107ec9bdaf80ce59d18083c27c874e0b4de095a4022100a526f7a07e8dc1ad4e52ded04b1f7162dc4186e9d60e7deb70456af18eeb4b29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6943aa66492310b2b1f214e70fdbae41885dce80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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