af.libertymutual.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 4d:39:bf:68:97:e7:11:e1:2e:e3:4a:2e:aa:0b:ba:79 was issued on by Symantec Corporation.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4d:39:bf:68:97:e7:11:e1:2e:e3:4a:2e:aa:0b:ba:79
Serial Number (int): 102650398823349789122441801381075204729
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 1d:8e:38:34:3c:2e:69:c2:82:d0:bb:f0:4a:86:19:d8:f5:92:c7:d5
Fingerprint (sha256): 2a:92:a2:2c:7d:5f:bb:d5:87:a5:03:c4:ad:6f:ab:4a:8b:eb:e2:3f:31:a0:cf:ef:96:c7:8b:aa:5e:d3:f4:17

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate af.libertymutual.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for af.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

commercialclaimdocuments.libertymutual.com
benefits.mylibertyconnection.com
www.libertypethealth.com
np.libertypethealth.com
www.oliveforlife.com
cmpubdocumentext.libertymutual.com
largecommercialclaimportal.libertymutual.com
custom-protector.libertymutual.com
dmsservices3-r.lmig.com
benefits.libertymutual.com
esales.lmb.libertymutual.com
wrs.libertymutual.com
dmsservices-sbat.lmig.com
dr-www.libertymutualvantageport.com
dr-public.libertymutualvantageport.com
dr-sppriv.libertymutualvantageport.com
dr-spadmin.libertymutualvantageport.com
dr-auth.libertymutualvantageport.com
wcvideo.libertymutualgroup.com
wcvideo.helmsmantpa.com
video.claimstour.helmsmantpa.com
test-cibilldocuments.libertymutual.com
stui.safeco.com
stui.peerless-ins.com
stui.ohiocasualty-ins.com
stui.montgomery-ins.com
stui.libertynorthwest-ins.com
stui.libertymutualgroup.com
stui.libertymutual.com
stui.indiana-ins.com
stui.goldeneagle-ins.com
stui.coloradocasualty-ins.com
stui.americafirst-ins.com
steps.safeco.com
steps.peerless-ins.com
steps.ohiocasualty-ins.com
steps.montgomery-ins.com
steps.lmig.com
steps.libertynorthwest-ins.com
steps.libertymutualgroup.com
steps.libertymutual.com
steps.indiana-ins.com
steps.goldeneagle-ins.com
steps.coloradocasualty-ins.com
steps.americafirst-ins.com
saml.lmcissobrokerdc2.libertymutual.com
safetynet.libertymutual.com
public.safetynet.libertymutual.com
policyholders.libertynorthwest.com
obsc.peerless-ins.com
obsc.ohiocasualty-ins.com
obsc.montgomery-ins.com
obsc.libertynorthwest-ins.com
obsc.libertymutualgroup.com
obsc.indiana-ins.com
obsc.hawkeyesecurity-ins.com
obsc.goldeneagle-ins.com
obsc.coloradocasualty-ins.com
obsc.americafirst-ins.com
mylibertyconnection.com
libertymmhtables.libertymutual.com
icasemanagersecure.libertymutual.com
helmsmantpa.com
demo-risktrac.libertymutual.com
claimseft.peerless-ins.com
claimseft.ohiocasualty-ins.com
claimseft.montgomery-ins.com
claimseft.libertymutualgroup.com
claimseft.indiana-ins.com
claimseft.hawkeyesecurity-ins.com
claimseft.goldeneagle-ins.com
claimseft.coloradocasualty-ins.com
claimseft.americafirst-ins.com
cibilldocuments.libertymutual.com
business.libertymutualgroup.com
billinginquiry.lmig.com
auth.lmcissobrokerdc2.libertymutual.com
app.lmcissobrokerdc2.libertymutual.com
analytics.libertymutual.com
af.safeco.com
af.peerless-ins.com
af.ohiocasualty-ins.com
af.montgomery-ins.com
af.libertynorthwest-ins.com
af.libertymutualgroup.com
af.libertymutual.com
af.indiana-ins.com
af.goldeneagle-ins.com
af.coloradocasualty-ins.com
af.americafirst-ins.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for af.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQwzCCD6ugAwIBAgIQTTm/aJfnEeEu40ouqgu6eTANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MTAxNjAwMDAwMFoX
DTE5MTAyNjIzNTk1OVowgZcxCzAJBgNVBAYTAlVTMRYwFAYDVQQIDA1OZXcgSGFt
cHNoaXJlMRMwEQYDVQQHDApQb3J0c21vdXRoMR0wGwYDVQQKDBRMaWJlcnR5IE11
dHVhbCBHcm91cDEdMBsGA1UECwwUQ29tbWVyY2lhbCBJbnN1cmFuY2UxHTAbBgNV
BAMMFGFmLmxpYmVydHltdXR1YWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAznbTGSegXfvf2LWTtGXKOtTYWCBHYFNFsb7eDt5jQtpV27fvDX9Y
cAN56ADle2oMm9Stag31I47Uw8xdYBtkPCAslaILcwxAfxIquMN3oH/hJ+38B0Sm
Ovfk72eMmQYqJVws3NRF4UPs8bSusMIvtkvaHS+2lMpngJoVmllBUVQocW/27Xw1
RV9ERsfv/inHKjhLyIqTWtPjrzlEWuOvVEmKR3u7lrDzDzKyCzmgs+W4TrtXAbkk
QaykDuPTlHr4KfAp5MYm6bJVbmRjCXjm4FHWkxOiYclZvtdbWspoHCtmCvxEbQMy
1qgtKDHrMpl5i2Vk5LqdnSuHz0SmA/gPSwIDAQABo4INITCCDR0wggpTBgNVHREE
ggpKMIIKRoIqY29tbWVyY2lhbGNsYWltZG9jdW1lbnRzLmxpYmVydHltdXR1YWwu
Y29tgiBiZW5lZml0cy5teWxpYmVydHljb25uZWN0aW9uLmNvbYIYd3d3LmxpYmVy
dHlwZXRoZWFsdGguY29tghducC5saWJlcnR5cGV0aGVhbHRoLmNvbYIUd3d3Lm9s
aXZlZm9ybGlmZS5jb22CImNtcHViZG9jdW1lbnRleHQubGliZXJ0eW11dHVhbC5j
b22CLGxhcmdlY29tbWVyY2lhbGNsYWltcG9ydGFsLmxpYmVydHltdXR1YWwuY29t
giJjdXN0b20tcHJvdGVjdG9yLmxpYmVydHltdXR1YWwuY29tghdkbXNzZXJ2aWNl
czMtci5sbWlnLmNvbYIaYmVuZWZpdHMubGliZXJ0eW11dHVhbC5jb22CHGVzYWxl
cy5sbWIubGliZXJ0eW11dHVhbC5jb22CFXdycy5saWJlcnR5bXV0dWFsLmNvbYIZ
ZG1zc2VydmljZXMtc2JhdC5sbWlnLmNvbYIjZHItd3d3LmxpYmVydHltdXR1YWx2
YW50YWdlcG9ydC5jb22CJmRyLXB1YmxpYy5saWJlcnR5bXV0dWFsdmFudGFnZXBv
cnQuY29tgiZkci1zcHByaXYubGliZXJ0eW11dHVhbHZhbnRhZ2Vwb3J0LmNvbYIn
ZHItc3BhZG1pbi5saWJlcnR5bXV0dWFsdmFudGFnZXBvcnQuY29tgiRkci1hdXRo
LmxpYmVydHltdXR1YWx2YW50YWdlcG9ydC5jb22CHndjdmlkZW8ubGliZXJ0eW11
dHVhbGdyb3VwLmNvbYIXd2N2aWRlby5oZWxtc21hbnRwYS5jb22CIHZpZGVvLmNs
YWltc3RvdXIuaGVsbXNtYW50cGEuY29tgiZ0ZXN0LWNpYmlsbGRvY3VtZW50cy5s
aWJlcnR5bXV0dWFsLmNvbYIPc3R1aS5zYWZlY28uY29tghVzdHVpLnBlZXJsZXNz
LWlucy5jb22CGXN0dWkub2hpb2Nhc3VhbHR5LWlucy5jb22CF3N0dWkubW9udGdv
bWVyeS1pbnMuY29tgh1zdHVpLmxpYmVydHlub3J0aHdlc3QtaW5zLmNvbYIbc3R1
aS5saWJlcnR5bXV0dWFsZ3JvdXAuY29tghZzdHVpLmxpYmVydHltdXR1YWwuY29t
ghRzdHVpLmluZGlhbmEtaW5zLmNvbYIYc3R1aS5nb2xkZW5lYWdsZS1pbnMuY29t
gh1zdHVpLmNvbG9yYWRvY2FzdWFsdHktaW5zLmNvbYIZc3R1aS5hbWVyaWNhZmly
c3QtaW5zLmNvbYIQc3RlcHMuc2FmZWNvLmNvbYIWc3RlcHMucGVlcmxlc3MtaW5z
LmNvbYIac3RlcHMub2hpb2Nhc3VhbHR5LWlucy5jb22CGHN0ZXBzLm1vbnRnb21l
cnktaW5zLmNvbYIOc3RlcHMubG1pZy5jb22CHnN0ZXBzLmxpYmVydHlub3J0aHdl
c3QtaW5zLmNvbYIcc3RlcHMubGliZXJ0eW11dHVhbGdyb3VwLmNvbYIXc3RlcHMu
bGliZXJ0eW11dHVhbC5jb22CFXN0ZXBzLmluZGlhbmEtaW5zLmNvbYIZc3RlcHMu
Z29sZGVuZWFnbGUtaW5zLmNvbYIec3RlcHMuY29sb3JhZG9jYXN1YWx0eS1pbnMu
Y29tghpzdGVwcy5hbWVyaWNhZmlyc3QtaW5zLmNvbYInc2FtbC5sbWNpc3NvYnJv
a2VyZGMyLmxpYmVydHltdXR1YWwuY29tghtzYWZldHluZXQubGliZXJ0eW11dHVh
bC5jb22CInB1YmxpYy5zYWZldHluZXQubGliZXJ0eW11dHVhbC5jb22CInBvbGlj
eWhvbGRlcnMubGliZXJ0eW5vcnRod2VzdC5jb22CFW9ic2MucGVlcmxlc3MtaW5z
LmNvbYIZb2JzYy5vaGlvY2FzdWFsdHktaW5zLmNvbYIXb2JzYy5tb250Z29tZXJ5
LWlucy5jb22CHW9ic2MubGliZXJ0eW5vcnRod2VzdC1pbnMuY29tghtvYnNjLmxp
YmVydHltdXR1YWxncm91cC5jb22CFG9ic2MuaW5kaWFuYS1pbnMuY29tghxvYnNj
Lmhhd2tleWVzZWN1cml0eS1pbnMuY29tghhvYnNjLmdvbGRlbmVhZ2xlLWlucy5j
b22CHW9ic2MuY29sb3JhZG9jYXN1YWx0eS1pbnMuY29tghlvYnNjLmFtZXJpY2Fm
aXJzdC1pbnMuY29tghdteWxpYmVydHljb25uZWN0aW9uLmNvbYIibGliZXJ0eW1t
aHRhYmxlcy5saWJlcnR5bXV0dWFsLmNvbYIkaWNhc2VtYW5hZ2Vyc2VjdXJlLmxp
YmVydHltdXR1YWwuY29tgg9oZWxtc21hbnRwYS5jb22CH2RlbW8tcmlza3RyYWMu
bGliZXJ0eW11dHVhbC5jb22CGmNsYWltc2VmdC5wZWVybGVzcy1pbnMuY29tgh5j
bGFpbXNlZnQub2hpb2Nhc3VhbHR5LWlucy5jb22CHGNsYWltc2VmdC5tb250Z29t
ZXJ5LWlucy5jb22CIGNsYWltc2VmdC5saWJlcnR5bXV0dWFsZ3JvdXAuY29tghlj
bGFpbXNlZnQuaW5kaWFuYS1pbnMuY29tgiFjbGFpbXNlZnQuaGF3a2V5ZXNlY3Vy
aXR5LWlucy5jb22CHWNsYWltc2VmdC5nb2xkZW5lYWdsZS1pbnMuY29tgiJjbGFp
bXNlZnQuY29sb3JhZG9jYXN1YWx0eS1pbnMuY29tgh5jbGFpbXNlZnQuYW1lcmlj
YWZpcnN0LWlucy5jb22CIWNpYmlsbGRvY3VtZW50cy5saWJlcnR5bXV0dWFsLmNv
bYIfYnVzaW5lc3MubGliZXJ0eW11dHVhbGdyb3VwLmNvbYIXYmlsbGluZ2lucXVp
cnkubG1pZy5jb22CJ2F1dGgubG1jaXNzb2Jyb2tlcmRjMi5saWJlcnR5bXV0dWFs
LmNvbYImYXBwLmxtY2lzc29icm9rZXJkYzIubGliZXJ0eW11dHVhbC5jb22CG2Fu
YWx5dGljcy5saWJlcnR5bXV0dWFsLmNvbYINYWYuc2FmZWNvLmNvbYITYWYucGVl
cmxlc3MtaW5zLmNvbYIXYWYub2hpb2Nhc3VhbHR5LWlucy5jb22CFWFmLm1vbnRn
b21lcnktaW5zLmNvbYIbYWYubGliZXJ0eW5vcnRod2VzdC1pbnMuY29tghlhZi5s
aWJlcnR5bXV0dWFsZ3JvdXAuY29tghRhZi5saWJlcnR5bXV0dWFsLmNvbYISYWYu
aW5kaWFuYS1pbnMuY29tghZhZi5nb2xkZW5lYWdsZS1pbnMuY29tghthZi5jb2xv
cmFkb2Nhc3VhbHR5LWlucy5jb22CF2FmLmFtZXJpY2FmaXJzdC1pbnMuY29tMAkG
A1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjBhBgNVHSAEWjBYMFYGBmeBDAECAjBMMCMGCCsGAQUFBwIBFhdodHRw
czovL2Quc3ltY2IuY29tL2NwczAlBggrBgEFBQcCAjAZDBdodHRwczovL2Quc3lt
Y2IuY29tL3JwYTAfBgNVHSMEGDAWgBRfYM9hkFXfhEMUimAqsvV69EMY7zArBgNV
HR8EJDAiMCCgHqAchhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNybDBXBggrBgEF
BQcBAQRLMEkwHwYIKwYBBQUHMAGGE2h0dHA6Ly9zcy5zeW1jZC5jb20wJgYIKwYB
BQUHMAKGGmh0dHA6Ly9zcy5zeW1jYi5jb20vc3MuY3J0MIIBfgYKKwYBBAHWeQIE
AgSCAW4EggFqAWgAdwDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAA
AV8lXK4FAAAEAwBIMEYCIQDh/c1nR1rI3gAUNr1gbK82934nNfKdheWy9uOLko7T
BwIhAIS/gNlFAginORka3sMfpGRDPILMxbw9d2mkIeboVNPXAHYApLkJkLQYWBSH
uxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFfJVyuQgAABAMARzBFAiEA+JdNOSjk
o3fQsTiDajdz6htXcrVHAOLezqsvPVqE4lkCIGGWqQoMD8t+sNnI70uvi7cvHx9R
uXpskdNGphllgvvtAHUA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csA
AAFfJVyv/wAABAMARjBEAiAeq8Zdv67rDCIlzM3CNQZxb7TB3Vk6ncFMnvp2hri0
5wIgOYOp2fEcGYoKsldi0YKWHHH3FPns5bGPh33RmrHFyKUwDQYJKoZIhvcNAQEL
BQADggEBAI2v+B28q4qliVzJq4jbZZMnbtCrDG7CS2HrpznnAqSkbvY2mZjg2fjt
lVxj/xqfXRZU7a9YG8vevrr/o9sC28+XHdzYR9kSUQmxi0HIKQanpRX0YNAvKveZ
0a2PNaeqm/+EZhXMEJhUZKEoUS+xfquO7CcFr76HO/0cepNynMGsSgTpBJ/auLQ0
NqDU2T02qPPKUbQV0L0tSU2fOva2AzANr+1sx+ZfFcbaOMCQQpadz/IzCj0Zrkb5
qENqS0jfDDukvx2jqZ6191FkQ5XO3afmfXjj5M36MWgxn/0Bzm4lq0WyfcDfszAD
82rOdMlS1wDR+aXZ1mF9tc2QnjQR0iA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznbTGSegXfvf2LWTtGXK
OtTYWCBHYFNFsb7eDt5jQtpV27fvDX9YcAN56ADle2oMm9Stag31I47Uw8xdYBtk
PCAslaILcwxAfxIquMN3oH/hJ+38B0SmOvfk72eMmQYqJVws3NRF4UPs8bSusMIv
tkvaHS+2lMpngJoVmllBUVQocW/27Xw1RV9ERsfv/inHKjhLyIqTWtPjrzlEWuOv
VEmKR3u7lrDzDzKyCzmgs+W4TrtXAbkkQaykDuPTlHr4KfAp5MYm6bJVbmRjCXjm
4FHWkxOiYclZvtdbWspoHCtmCvxEbQMy1qgtKDHrMpl5i2Vk5LqdnSuHz0SmA/gP
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 102650398823349789122441801381075204729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'af.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26063685418391562733142182517476077790539202780465432300711147162875668086450736508730253737401478281513508790764498843758110325537849876006831782909334074831606880825736913601687357512351998528462943823536698854590184952543130009837123243696708566614802914454952791741856654973881632529942351223454933468029347074785527722525086669904042792971038877763687596267476784217923927039591496583717703410754895079794894405451044586963220557813350946544266151603501188397931491236405554096520561463462468148931485065062436393292909461022957311903694200846076021472680295111876920874906285760257971759131820758128361423245131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2634 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialclaimdocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertypethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.libertypethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliveforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpubdocumentext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'largecommercialclaimportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-protector.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsservices3-r.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esales.lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsservices-sbat.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-sppriv.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-spadmin.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.claimstour.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saml.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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