test-libertymutual.myinstantincentives.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 7a:43:ac:0b:26:00:ac:27:6a:6a:ab:7b:c3:79:95:29 was issued on by Symantec Corporation.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:43:ac:0b:26:00:ac:27:6a:6a:ab:7b:c3:79:95:29
Serial Number (int): 162517188833004429036933951993255925033
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 36:f6:b7:7b:64:55:bc:ca:3e:1f:17:43:4a:f6:c0:b5:42:17:c6:a8
Fingerprint (sha256): 18:0e:70:3a:f0:e7:c5:8d:b5:1c:9e:8a:42:14:12:41:ba:7f:32:a4:f6:0d:50:cb:56:4e:8c:70:4e:74:cb:fe

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate test-libertymutual.myinstantincentives.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-libertymutual.myinstantincentives.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-claimstour.libertymutualgroup.com
auth-test.mylibertyconnection.com
cloudmonitor-test-libertymutual.myinstantincentives.com
ecdev-sam-dev.apps.safeco.com
ecdev-sam-tin.apps.safeco.com
safesite.qa.safeco.com
secure-test2.mylibertyconnection.com
secure-test.mylibertyconnection.com
test-af.americafirst-ins.com
test-af.coloradocasualty-ins.com
test-af.goldeneagle-ins.com
test-af.indiana-ins.com
test-af.libertymutual.com
test-af.libertymutualgroup.com
test-af.libertynorthwest-ins.com
test-af.montgomery-ins.com
test-af.ohiocasualty-ins.com
test-af.peerless-ins.com
test-af.safeco.com
test-agentsportal.libertymutual.com
test-billinginquiry.lmig.com
test-calm.libertymutual.com
test-claimseft.americafirst-ins.com
test-claimseft.coloradocasualty-ins.com
test-claimseft.goldeneagle-ins.com
test-claimseft.hawkeyesecurity-ins.com
test-claimseft.indiana-ins.com
test-claimseft.libertymutualgroup.com
test-claimseft.montgomery-ins.com
test-claimseft.ohiocasualty-ins.com
test-claimseft.peerless-ins.com
test-cliq.libertymutual.com
test-cliq.lmig.com
test-clpi.libertymutual.com
test-clpi.lmig.com
test-ecsgdisplay.libertymutual.com
test-elibertyquote.libertymutual.com
test-feedback.libertymutual.com
test-helmsmantpa.lmig.com
test-ixprs.libertymutual.com
test-libertymmhtables.libertymutual.com
test-libertymutual.myinstantincentives.com
test.libertymutualprovidersupport.com
test-obsc.americafirst-ins.com
test-obsc.coloradocasualty-ins.com
test-obsc.goldeneagle-ins.com
test-obsc.hawkeyesecurity-ins.com
test-obsc.indiana-ins.com
test-obsc.libertymutualgroup.com
test-obsc.libertynorthwest-ins.com
test-obsc.montgomery-ins.com
test-obsc.ohiocasualty-ins.com
test-obsc.peerless-ins.com
test-policyholders.libertynorthwest.com
test-preferences.libertymutual.com
test-risktracdocuments.lmig.com
test-risktracrmis.lmig.com
test-safeaudit.libertymutual.com
test-safeco.myinstantincentives.com
test-saml.mylibertyconnection.com
test-steps.americafirst-ins.com
test-steps.coloradocasualty-ins.com
test-steps.goldeneagle-ins.com
test-steps.indiana-ins.com
test-steps.libertymutual.com
test-steps.libertymutualgroup.com
test-steps.libertynorthwest-ins.com
test-steps.lmig.com
test-steps.montgomery-ins.com
test-steps.ohiocasualty-ins.com
test-steps.peerless-ins.com
test-steps.safeco.com
test-stui.americafirst-ins.com
test-stui.coloradocasualty-ins.com
test-stui.goldeneagle-ins.com
test-stui.indiana-ins.com
test-stui.libertymutual.com
test-stui.libertymutualgroup.com
test-stui.libertynorthwest-ins.com
test-stui.montgomery-ins.com
test-stui.ohiocasualty-ins.com
test-stui.peerless-ins.com
test-stui.safeco.com
test-suretyonline.myinstantincentives.com
test-wcequote.libertymutual.com
test-webquote.libertymutual.com
test-workerscompensationsupport.helmsmantpa.com
test-workerscompensationsupport.libertymutual.com
tst-auth.libertymutualvantageport.com
tst-login.commercialportal.libertymutual.com
tst-public.libertymutualvantageport.com
tst-secure.mybusinessonline.libertymutual.com
tst-www.commercialportal.libertymutual.com
tst-www.libertymutualvantageport.com
tst-www.mybusinessonline.libertymutual.com
www-test2.mylibertyconnection.com
www-test.mylibertyconnection.com
test-auth.lmcissobrokerdc1.libertymutual.com

Other certificates including the domain name myinstantincentives.com

(limited to 100 certificates)
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com

Certificate

The complete raw certificate details for test-libertymutual.myinstantincentives.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12f1xJhH0kCMZNg6Vryo
tUNNjBIovy5PQ9JPIucmHaQYP2qt7fKMCymgjR3WPVNv1J8ev3oAJ+vftuLq7dSN
nwz5R53XuYKUH3k0Zd/V0OEjYRUvp0CQFJnyrZeb5NAUjfDnecrehpEYAbEYCCYT
4E1NVEkAKE/76jCxuOuXnQo3cozsQqUA+leBO9vCTkBZT/LAfSgxUYy9aLQorPaJ
5cfHGP6FzcrvhTtKDx4bKsaI8gto4UpMsbvCgA8cvryhEVVRSaXe7PZZStQae8d5
pXj+mc/TY6vShQ3o9K3PgKRoAXXn1oOu+v2rcD/+A1CHcDebysb13RtgnIWNmYNS
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 162517188833004429036933951993255925033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27192500169670886968764277319765862154293684418173093413935273569545567627100761426168437046772797891888029628301712126937491626493208328486273510750005095898288811804326931216016466040671237307292843562963025959769358058001321085109188800848856908338384326296623521765389656032086734995783559124620411175439208942207145929100465302993399936851246839644217814548703136772957164123270409280644426985799087884016741946130113168885464205092771729932998802807464924765292273394199280304846487730786914627295852374605843847396701734173693226108953377825320825375140192086845433120480745951486971949851460246021930643313261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimstour.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecdev-sam-dev.apps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecdev-sam-tin.apps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safesite.qa.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-calm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cliq.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cliq.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecsgdisplay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-elibertyquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-feedback.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-helmsmantpa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ixprs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-preferences.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risktracdocuments.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risktracrmis.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeaudit.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeco.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-saml.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-suretyonline.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wcequote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-webquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-login.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-secure.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auth.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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