libertycerts.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 6d:7e:19:9a:c6:29:d3:b5:0f:f0:1e:7f:c9:3e:42:4a was issued on by Entrust, Inc..

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 6d:7e:19:9a:c6:29:d3:b5:0f:f0:1e:7f:c9:3e:42:4a
Serial Number (int): 145540600267436934578745937874493784650
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 33:30:27:8f:af:d2:51:47:d7:60:65:8b:85:97:4e:f2:81:aa:30:ba
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d6:14:d7:b7:68:ff:f7:8c:a7:2f:73:06:50:bb:56:34:ce:5e:b3:58
Fingerprint (sha256): 17:ce:46:c0:46:71:f0:db:d5:ff:b3:36:89:98:fa:94:a2:ee:94:d8:07:06:31:68:2f:82:62:12:b6:7d:4e:43

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate libertycerts.com.sg

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertycerts.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libertycerts.com.sg
lsmcert.com
www.libertycerts.com.sg
www.lsmcert.com
www.libertymutualsurety.be
www.libertymutualsurety.nl
libertymutualsurety.be
libertymutualsurety.nl
DR.libertycargo.com.au
DR.libertyquote.com.au
agents.libertymutualsurety.lmig.com
business.libertymutual.com
www.business.libertymutual.com
libertyassemble.ca
www.libertyassemble.ca
globalclaimcenter-batch.lmig.com
authorization-policy-api-production.lmig.com
libertyspecialtymarketslatam.com
www.libertyspecialtymarketslatam.com
naymu.libertymutual.com
liu-latinamerica.com
serf.aws.libertyfianzas.com
www.borgonline.nl
www.borgonline.be
www.nationaleborg.com
nationaleborg.nl
nationaleborg.be
www.nationaleborg.nl
www.nationaleborg.be
nationaleborg.com
nationaleborg.co.uk
nationaleborg.de
nationaleborg.eu
nationaleborg.fr
nationaleborg.lu
nationaleborg.org
nationaleborg.uk
www.nationaleborgre.com
libertyspecialtymarketsap.com
www.libertyspecialtymarketsap.com
media.libertyspecialtymarketsap.com
www.libertyspecialtymarkets.com.au
libertyspecialtymarkets.com.au
www.policydocumentation.libertyspecialtymarkets.com.au
policydocumentation.libertyspecialtymarkets.com.au
www.libertyspecialtymarkets.com.sg
libertyspecialtymarkets.com.sg
libertyspecialtymarkets.com.hk
www.libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.my
www.libertyspecialtymarkets.com.my
policydocumentation.liuaustralia.com.au
www.policydocumentation.liuaustralia.com.au
www.liuasiapacific.com
liuasiapacific.com
liuaustralia.com.au
www.liuaustralia.com.au
liusingapore.com.sg
www.liusingapore.com.sg
liuhongkong.com.hk
www.liuhongkong.com.hk
liumalaysia.com.my
www.liumalaysia.com.my
assets.libertyspecialtymarketsap.com
assets.liuasiapacific.com
nationaleborgre.com
borgonline.nl
borgonline.be
libertyfianzas.com
libertyseguros.com.mx
www.libertyseguros.com.mx
www.libertyseguros.com.pr
www.contratafianza.libertyfianzas.com
claimportal.libertymutualsurety.com
grs-billing-parallel.lmig.com
claimportal-api.libertymutualsurety.com
wc-isobatch-np.libertymutual.com
wc-isobatch.libertymutual.com
blmg-forms.libertymutual.com
cotizador.libertyfianzas.com
ironshore.com
wcclaims.iso.lmig.com
seguro-garantia.libertyseguros.com.br
hold-agents.libertymutualsurety.com
sgf.libertyfianzas.com
enroll.libertymutualsurety.com
libertytradecredit.com
libertymbtc.com
helmsmanmanagementprovidersupport.com
www.helmsmanmanagementprovidersupport.com
libertyspecialtymarkets.au
www.libertyspecialtymarkets.au
liuquote.co.uk
www.libertylinkap.com
libertylinkap.com
review.id3e.lmig.com
wlsquotation.libertyseguros.co
sdi.libertymutual.com

Other certificates including the domain name libertycerts.com.sg

(limited to 100 certificates)
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg

Certificate

The complete raw certificate details for libertycerts.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m8mLRZ8g9YHotJ0KE68
LTmGo3Vrfm304nl5bE2skIam1SPeAlNTaJzf9+y9UX67Xmb5ZWRLguwE5u3smvBC
vso6xGFhPHYVLe0NskWgUqNEQ/NNaMK2O2DW/LTB5H4LIFXPu5wM1fsp5hK7PMyX
SPnaOn13RYxRpnR5xWb9WNm8Q9SrsX6djfCBX82AK5HTQVseEJsiohivWIusgyhQ
tYq7egNUsyepTT6t7dU8UufmP64ScmbAfXayOcIr8nhADJsfZ8k7aN6ovZQANavd
uO6qs1iIvDOgb71T8oUY27U99AvmAL65VPw0iikOTHYyUGGutbXRv/pVr47/Kll9
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145540600267436934578745937874493784650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 23:20:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-28 23:20:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertycerts.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26564853719433979633118847986650432749152393110079675739092156102949431877961315923557188035186692915693923325257476532123322288040454734358963869649883009401994755213717344610247441263472023931469168604974769485626074983986917648156265816670604956690084563749100190983385405068060694279665301645789530785013683315167244557162341865966627596239909279787976806634775410943196483753231150292448476153635399472121071649650594295773312111059870035014678190324898320951802284424323834050242253055541300295233749875109231602798595491571439024597694146998173699656253783738082850064114734176096403204985568903747124369915317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3330278fafd25147d760658b85974ef281aa30ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2683 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-billing-parallel.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal-api.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blmg-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytradecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymbtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlsquotation.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdi.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018c228862b0000004030047304502205d6aa8e5a0d19be5a27e6bf94b44d3e81a8f0c93c3673e82d3dbce5e46daed8d0221009626e1b196550de8d00dc9eada383fbb25733db70cad60abb5d8241e183c7d260077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c228862c50000040300483046022100a083e497eaa74b435592aaa2893ee0af79d7fafbf9f2caf872f9fafc0a6e88d4022100e94393ec74be77632843eace014f4551d25abdfbe19268571f55bf06e5197265007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c228862d4000004030046304402207c483205cae963cff68eaee68b7315c23d3bb312a7dd077b7aac2dea20ad9b53022021c9cdcd9ab57f0e287a4a132e14ff29052d9da4dc971041833702e5b18eaa7a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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