clientlist.qa.safeco.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 58:62:c2:9b:a1:7c:4c:e3:a4:9b:eb:0b:06:0f:87:3e was issued on by Entrust, Inc..

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 58:62:c2:9b:a1:7c:4c:e3:a4:9b:eb:0b:06:0f:87:3e
Serial Number (int): 117484855839014664540159288094642636606
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 4f:23:28:1f:94:08:78:17:d2:de:fe:62:9f:04:bc:36:0e:09:c3:ca
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 57:0f:90:58:1f:ec:cf:6e:aa:78:29:41:75:04:df:d8:27:b0:66:8d
Fingerprint (sha256): 1e:6f:98:7f:f4:89:bc:34:04:fe:96:d0:9a:2c:44:5f:8f:63:6f:15:c7:3e:ba:48:77:cc:c0:27:15:6a:9e:3a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate clientlist.qa.safeco.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clientlist.qa.safeco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clientlist.qa.safeco.com
perf-risktrac-leg1.libertymutual.com
perf-risktrac-leg2.libertymutual.com
sak-test.libertymutual.com
test.oneinc-gateway.hydra-crux.libertymutual.com
hold-test-obsc.peerless-ins.com
hold-stage-obsc.libertymutualgroup.com
hold-stage-obsc.peerless-ins.com
test-obsc.ohiocasualty-ins.com
hold-test-obsc.indiana-ins.com
hold-stage-obsc.ohiocasualty-ins.com
test-a-eclaims.safeco.com
staging-eft-enrollment.libertymutual.com
www.dev.lmsafe.co
agency-financials-portal.libertymutual.com
agency-financials-portal-stage.libertymutual.com
test-auto-quote-widget.libertymutual.com
test-partnerservices.libertymutual.com
stage-billinginquiry.libertymutual.com
login-dev.libertymutual.com
test-choice-portal.libertymutual.com
grmus-twilio-media-stream-service-test.libertymutual.com
stage-adp-report.libertymutual.com
login-dev.safeco.com
book-assessment-tool-development.lmig.com
referralprogram-test.libertymutual.com
login-np.safeco.com
stage-bl-identity.libertymutual.com
dev-bl-identity.libertymutual.com
test-fetch.libertymutual.com
test.api.spire.libertymutual.com
test.gpe-hydra-notifications.apac.hydra-crux.libertymutual.com
stage-bl-super-admin-reports.libertymutual.com
test.gpe-generic-payments-page.apac.hydra-crux.libertymutual.com
hold-perf-risktrac.libertymutual.com
hold-stage-agentsportal.libertymutual.com
hold-test-obsc.libertymutualgroup.com
stage-agent-portal-forms.libertymutual.com

Other certificates including the domain name safeco.com

(limited to 100 certificates)
ete-claims.safeco.com
www.libertymutual.com
rewind-webservice.safeco.com
ete-claims.safeco.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
libertymutual.myinstantincentives.com
ete-www2.libertymutual.com
billing.safesite.safeco.com
cswebext-pool-03p.libertymutual.com
cla-haps-http-prd.apps.safeco.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
salescompreporting.safeco.com
test-equote.libertymutual.com
search.libertymutual.com
uat-eservice.safeco.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
dev-a-dpec.safeco.com
ete-www2.libertymutual.com
cm-now.agent.safeco.com
ete-www2.libertymutual.com
dev-i-dpec.safeco.com
MVSA.SAFECO.COM
quotes.safeco.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
ltm-dev-a-dpec.safeco.com
ete-pmds.libertymutual.com
www.libertymutual.com
whalebot.libertymutual.com
search.libertymutual.com
libertymutual.myinstantincentives.com
4-internal.us-east-1.non-production.paas.lmig.com
test.aspire.safeco.com
cs-pool-03k.lm.lmig.com
www.libertymutual.com
2pr-realtimedocs.safeco.com
qni-cpa-np.safeco.com
cswebext-pool-02p.libertymutual.com
uat-agencyservicingpreferences.safeco.com
ete-claims.safeco.com
whalebot.libertymutual.com
customer-pf-pdc.safeco.com
www.libertymutual.com
ete-www2.libertymutual.com
perf-www.libertymutualvantageport.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
qa-rpama.safeco.com
msb-prefill.libertyec.com
perf-dpec.safeco.com
1-internal.us-east-1.production.paas.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
ete-www2.libertymutual.com
sip-kdc-03.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-claims.safeco.com
insurance-agent.safeco.com
pcf-WhrmGXwiYi.us-east-1.non-production.lmig.com
dev-c-docupload.safeco.com
vantageporttest.libertymutual.com
agent.safeco.com
cswebext-pool-03p.libertymutual.com
www.libertymutual.com
www.libertymutual.com
dr-spagent.safeco.com
sip-pdc-03.libertymutual.com
legacysafecodocumentloader.safeco.com
libertymutual.myinstantincentives.com
cswebext-pool-02p.libertymutual.com
af.safeco.com
steps.safeco.com
pmds.libertymutual.com
hsp-dev.aws.lmig.com
dev-af2.safeco.com
stage-steps.safeco.com
www.righttrack.safeco.com
uat-dpec.safeco.com
ete-claims.safeco.com
uat-pi-marketservices.libertyec.com
intranet.safeco.com
safesite.qa.safeco.com
dev-i-dpec.safeco.com
cswebext-pool-03p.libertymutual.com
ete-claims.libertymutual.com
search.libertymutual.com
ete-claims.safeco.com
www.libertymutual.com
www.libertymutual.com
test-steps.safeco.com
bps-prd-be.apps.safeco.com
whalebot.libertymutual.com
ltm-test-a-dpec.safeco.com
www.libertymutual.com
billing.safesite.safeco.com
quote.esurance.qa.safeco.com

Certificate

The complete raw certificate details for clientlist.qa.safeco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKNbipBhmE3NKMx084+0
CJgKdOJ5xEwc7jCDOJxlatWlIcK9qvtSqxkTlnLsRexiTW4J2ZFN55asfZUBA0SB
OOPp/UjWY/TLQlYD0ehP1X6DGVMuBMOfdMpXvUXW9qt12P6MswUdMBEUrNosCKfo
H7/Ls8g7w/fWydUCq9RDYyJEMqxwypjcgg2pnG8/D6Dsj8cuWhXCZpsLKBlihbeS
I0j/uhygWpKNr3rgRc6uUqAcJ4TEqbFJNOp1wZZBwXR319nlZ5EjtrdUX3zcWXuW
QopdKbuVEolnN32fWVhz1BWC1DBHvxmuJVjfocae1W/guOoM8Y8dhxE0R9Bd+LGW
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 117484855839014664540159288094642636606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 22:45:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 22:45:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clientlist.qa.safeco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16744010882042951436764896453690048062984846849507098345106287026492366608598253281112839661292979595290025563053590186147202397887905925184880375932884312648531327244938576298686505000388836982018485507150554884949558050864693405267026758054351520936657288654118079289013251212253199642282516552914820917671092327830680944912904805171171785813455219884259708466305783496794053855675906195898723720018992476508434452308918351827964462125535490403771863963206521268708182934584093121644057801371295000247343331243609844809946064540148627105503720872783245889281786447231461823235723112869435886692347959860283460130447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f23281f94087817d2defe629f04bc360e09c3ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1462 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientlist.qa.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sak-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.oneinc-gateway.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a-eclaims.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-eft-enrollment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.lmsafe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-financials-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-financials-portal-stage.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auto-quote-widget.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partnerservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-billinginquiry.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-choice-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grmus-twilio-media-stream-service-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-adp-report.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-assessment-tool-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referralprogram-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-np.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fetch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.spire.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gpe-hydra-notifications.apac.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bl-super-admin-reports.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gpe-generic-payments-page.apac.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-perf-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-agent-portal-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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