welcome.libertymutual.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 5c:c8:f0:a4:4e:f7:88:e2:95:31:b9:fa:3a:02:fd:b2 was issued on by Entrust, Inc..

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:c8:f0:a4:4e:f7:88:e2:95:31:b9:fa:3a:02:fd:b2
Serial Number (int): 123332315780081836438175599459821616562
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 18:c4:f6:83:26:91:eb:16:60:e6:f2:e2:0e:ae:3d:6a:76:79:46:8a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 3a:ed:8d:4a:27:61:f9:c4:e8:2b:ca:01:6a:f5:8d:07:c0:30:30:97
Fingerprint (sha256): 1f:e4:66:14:8a:43:25:ab:d3:48:40:41:90:01:90:bd:e6:d3:74:b3:f3:60:a5:0d:cc:87:48:7e:05:a3:ba:f5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate welcome.libertymutual.com

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for welcome.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

welcome.libertymutual.com
hold.lmi.co
ciit-billing-portal.libertymutual.com
direct-service.safeco.com
coverage-compare-ui.safeco.com
dev-widgets.safeco.com
widgets.safeco.com
www.triton.libertymutual.com
comparioninsurance.com
www.comparioninsurance.com
www.comparioninsuranceagency.com
www.comparionagency.com
www.comparionagents.com
pagro-public-gateway.libertymutual.com
partnerportal.libertymutual.com
property-supplements.libertymutual.com
faa-pm-client.libertymutual.com
crest.agent.safeco.com
eservice.bms.libertymutual.com
sapanalytics.lmig.com
addressanalyst.libertymutual.com
mybusiness.libertymutual.com
bl-find-an-agent.libertymutual.com
amvim.lmig.com
quote-widget.lmig.com
ampliq.libertymutual.com
amvim-ws.lmig.com
test.plaid-gateway.hydra-crux.libertymutual.com
api.spire.libertymutual.com
invoicerecreate.lmig.com
invoicerecreate2.lmig.com
grmusinvoicerecreate.lmig.com
brandbuilder.libertymutual.com
airportal.libertymutual.com
airportal.safeco.com
data-virt.libertymutual.com
pagro-public-gateway2.libertymutual.com
customer-single.safeco.com
www.lmsafe.co
auto-quote-widget.libertymutual.com
partnerservices.libertymutual.com
choice-portal.libertymutual.com
adp-report.libertymutual.com
plaid-gateway.hydra-crux.libertymutual.com
login.libertymutual.com
login.safeco.com
www.libertymutualonline.com
bl-identity.libertymutual.com
www.safeconow.com
safeconow.com
safecoplaza.com
www.safecoplaza.com
bl-super-admin-reports.libertymutual.com
dev-galileo.libertymutual.com
agent-portal-forms.libertymutual.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for welcome.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdYS5k7+IdCKiCm6pCRx
/W5+HigoJgD1P75agZdZ4Pa86byjeYoCgWuiaW86rhbzqLQmRw50o6XdpJ432XaV
C6tBcOClgEyMhXuVDPyN+hnSVee4RtGObmjXxfATzn7vFt3s/GK/mclcylqdMBo3
fjoEDkTBVe/9SbtyVEJappLcz59tiwXvc1kgMAzc6GXWXtclJjB6JlNDXiXpMMUI
l8nFXXCcLy26PvwAnsMfhxCrsxIgupkPKq8l8HFJP/sLVHAN4+CGLA6BUfPhkxju
YqP6SBG9dTSa8dPKMp7H2Vc26Fwh6LVqdgcC7g1kkRYWdssdaQqoH7mnqiPIXFLz
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 123332315780081836438175599459821616562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 20:18:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 20:18:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'welcome.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21439837277638789020142708205462012672608280857155466713145708285818384587864100060287685159701154474875728361577355228159275678605306043973539584099331223778844882884565273385917269371646614620611551654921187954976512372964041707296070534608339875099024926511855617406321676446871727024973643641897535348599376634593747817149908855536421237722000958430588647558033690758735330857995060612429556130096768383364985662182556353976349082965058927045327729991704665747463305603626211364566382891976444643693714261521985264364766790544274848741441863614975077950860794058640650670080308646638729449848645739592211454161831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18c4f6832691eb1660e6f2e20eae3d6a7679468a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1584 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welcome.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold.lmi.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciit-billing-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct-service.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coverage-compare-ui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-widgets.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.triton.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comparioninsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comparioninsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comparioninsuranceagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comparionagency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comparionagents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagro-public-gateway.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property-supplements.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faa-pm-client.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crest.agent.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservice.bms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapanalytics.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'addressanalyst.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusiness.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl-find-an-agent.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amvim.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quote-widget.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ampliq.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amvim-ws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.plaid-gateway.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.spire.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoicerecreate.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invoicerecreate2.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grmusinvoicerecreate.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brandbuilder.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportal.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data-virt.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pagro-public-gateway2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-single.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmsafe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto-quote-widget.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choice-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adp-report.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plaid-gateway.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualonline.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safeconow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeconow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safecoplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safecoplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl-super-admin-reports.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-galileo.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent-portal-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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