libertymutual.com

- Liberty Mutual Group Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:30:2c:88:e0:ad:f1:17:c7:9f:eb:37:4c:1a:91:7f was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group Inc.

Organization: Liberty Mutual Group Inc.
Organization unit: Liberty International
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:30:2c:88:e0:ad:f1:17:c7:9f:eb:37:4c:1a:91:7f
Serial Number (int): 8225501494506754472797458465486967167
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f9:31:e0:2f:c4:68:bc:d7:bb:7e:1f:c1:d3:c8:71:d7:0e:a2:72:f9
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): a0:e4:fc:0a:bc:98:c6:bb:de:8f:d9:07:e3:74:b0:9c:9c:51:3c:95
Fingerprint (sha256): 21:66:7c:7e:c2:a4:9a:6d:4f:f6:9f:1f:36:a2:9d:d3:0e:ed:52:cd:46:42:d3:b4:8a:32:56:1d:2a:32:72:88

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate libertymutual.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trydwellbeing.com
www.trydwellbeing.com
www.libertyinsurance.com.vn
livechat.libertyinsurance.com.vn
soap2017.pentagenerales.cl
seguros.pentagenerales.cl
netstorage.libertyseguros.pt
meuespaco.aliroseguro.com.br
www.liberty-insurance.ie
www2.libertyseguros.com.br
www2.indiana.com.br
www.quinn-insurance.com
www.quinn-direct.co.uk
www.portaldesegurosliberty.com.br
www.mediedge.com
www.lmgpacific.com
www.liil.com.hk
www.libertyweb.com.br
www.libertyseguros.com.br
www.libertymutual.com.hk
www.libertyinternational.com.hk
www.libertyinsuranceni.co.uk
www.libertyinsurance.com.sg
www.libertyinsurance.com.hk
www.liberty.ec
www.liberty.cl
www.indiana.com.br
www.genesis.es
windscreencover.quinn-direct.com
windscreencover.libertyinsurance.ie
webmail1.libertyseguros.com.br
webcalcauto.indiana.com.br
wct.libertyseguros.com.br
vp.libertyseguros.com.br
transporte.libertyseguros.com.br
tools.libertyseguros.com.br
social.libertyseguros.com.br
sip.indiana.com.br
siniestros.pentagenerales.cl
seguroonline.libertyseguros.com.br
securequotes.libertyinsurance.ie
quotes.libertyinsurance.ie
printprod.lmginsurance.co.th
portalmarketing.libertyseguros.com.br
portalintegracao.libertyseguros.com.br
pivote.liberty.ec
personallines.libertyseguros.com.br
online.libertyinsurance.com.sg
onelink.libertyinsurance.com.sg
novomeuespaco.libertyseguros.com.br
novoinstitucional.libertyseguros.com.br
newsel.libertyseguros.com.br
meuespacocorretor.libertyseguros.com.br
meuespaco.libertyseguros.com.br
m2.libertyseguros.com.br
lms.libertyseguros.com.br
libertymutual.com.hk
libertymutual.com
libertyinternational.com.hk
libertyinsurance.com.sg
liberty.ec
lbis-poi.lmginsurance.co.th
imobiliario.libertyseguros.com.br
extranet.libertyseguros.com.br
emissao.libertyseguros.com.br
ebiz5.lmginsurance.co.th
ebiz4.lmginsurance.co.th
ebiz3.lmginsurance.co.th
ebiz2.lmginsurance.co.th
dw.indiana.com.br
cotador.libertyseguros.com.br
corporativo.libertyseguros.com.br
connectapp.libertyseguros.pt
connect.libertyseguros.pt
commerciallines.libertyseguros.com.br
clientes.libertyseguros.pt
chat.libertyseguros.com.br
chat.indiana.com.br
callmeback.libertyinsurance.ie
av.indiana.com.br
autos.liberty.ec
autodiscover.lmginsurance.co.th
affinitydr.libertyseguros.com.br
adselfservice.libertyseguros.pt

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1clmabtVgeeJaTd3KE65
Mv4XqgnUCjsNc1eGMIc2BXWpyceaytmb6m2iHsqTdF+snVfDAS8Qd9QSdjT7+vEv
LqGTVvpHBYvtG9BlBbDFZWBTrfgoliN+HA62CN6qHGyCzizJ5Nd0x4rNdlXlzBmD
/F4JdtSihCilMEkEE8zlZakyQvCcNoS/jAuzJVv3tAaLBL5on+p8OSsaO6G6YGhm
3TEzj6VGgUKgzmXVI+6h/kZxOCg8JssWIWCJ9pzgh4EXR/hzlYrX1w84N940rto1
jviXJ44l9oBF7KSJBM98LNOgh6vFiqLKScUoEQgIJlc7MhrQm5lcFrGcmLLWL63+
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8225501494506754472797458465486967167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26988073024325063854720236850667503353100911891180339880896803728462978980453088979168230768057528232532245407803936818465852724907505411164399245106215438067254519566998588050860391839475458755834918585198733377548882269837590785805467695138488352898989641301117244187109124013907512527388689841240823161477961648448578052729404917561599276952275074631634995133854132884034490937962519887007481006148794364591195175443483705295920243484550344771722697576507701120140529543085145211828604592021751371212048035958979881081880538482511784062153245694769099235135435693253019554616752187526432870898813451504822841638573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f931e02fc468bcd7bb7e1fc1d3c871d70ea272f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trydwellbeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trydwellbeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livechat.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soap2017.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguros.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netstorage.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespaco.aliroseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty-insurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quinn-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quinn-direct.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldesegurosliberty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmgpacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liil.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsuranceni.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windscreencover.quinn-direct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windscreencover.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail1.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcalcauto.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wct.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vp.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transporte.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siniestros.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroonline.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securequotes.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printprod.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalmarketing.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalintegracao.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pivote.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personallines.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelink.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novomeuespaco.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novoinstitucional.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsel.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespacocorretor.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespaco.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis-poi.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobiliario.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emissao.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz5.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz4.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz3.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz2.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dw.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotador.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporativo.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectapp.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerciallines.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callmeback.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autos.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitydr.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adselfservice.libertyseguros.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000161fb74c5c000000403004730450221009e6eb6bdebba07d8bdc9de17a08b38e3233fcbf5558f0fa853f9a9b9070c495e0220615294068b1d651af5031225b6b20e58923702b0ff5567e0ec66a247340c438d0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000161fb74c7eb0000040300463044022031d7179ca9a05904f274ae21502895beb5f97b5b636f35fb82e92effaccd47f502202169fadbb1bb218cbdff0a7640656c9a2654bfe8b9a6a4ea7b2022b6976a1335
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066b1d3ab6c6243db96364f6cecfa76ec9a88efa54b85ff7594ab4edea23cc2ed8edac6dd64f06874e1d92af828435505ac613be1273c4c57bc4746e3d61396abdea8fc2c99282213f9441d4b8264d428b0869baeadf128352b4908fc3c1c9a72260c124ab663d92ef46f11222a7282b8eb0718c24b22a9691eb33f5621891a1233f17cff7665d07633c0fd80007ac667909b8be3c5ea3edee7b3f9ddf5b7a5b63018c6f0f8b62c9e53a3e8c074f32cd95188c9472445527986935a215f966e54c77806bef084155ceb1ab20975505726279fee53243c3fe79dfeb69e38f96e3aaa18ff42267052f6662406211ba7a442b151056f166480da3beb3db434e76206