af.libertymutual.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 6e:28:44:67:fb:9a:af:92:00:2a:8d:ec:2d:ff:86:f0 was issued on by Symantec Corporation.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:28:44:67:fb:9a:af:92:00:2a:8d:ec:2d:ff:86:f0
Serial Number (int): 146424158852903667556124977118998136560
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 42:04:0e:f1:c0:f3:0b:d4:75:ef:94:d0:45:04:7b:d1:73:19:96:b0
Fingerprint (sha256): 2e:37:0c:21:1f:5d:d9:42:60:0d:e9:2d:c6:e0:85:44:46:b9:48:c5:36:a2:20:32:f4:21:3b:84:26:04:58:e1

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate af.libertymutual.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for af.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.libertypethealth.com
np.libertypethealth.com
www.oliveforlife.com
cmpubdocumentext.libertymutual.com
largecommercialclaimportal.libertymutual.com
custom-protector.libertymutual.com
dmsservices3-r.lmig.com
benefits.libertymutual.com
esales.lmb.libertymutual.com
wrs.libertymutual.com
dmsservices-sbat.lmig.com
dr-www.libertymutualvantageport.com
dr-public.libertymutualvantageport.com
dr-sppriv.libertymutualvantageport.com
dr-spadmin.libertymutualvantageport.com
dr-auth.libertymutualvantageport.com
wcvideo.libertymutualgroup.com
wcvideo.helmsmantpa.com
video.claimstour.helmsmantpa.com
test-cibilldocuments.libertymutual.com
stui.safeco.com
stui.peerless-ins.com
stui.ohiocasualty-ins.com
stui.montgomery-ins.com
stui.libertynorthwest-ins.com
stui.libertymutualgroup.com
stui.libertymutual.com
stui.indiana-ins.com
stui.goldeneagle-ins.com
stui.coloradocasualty-ins.com
stui.americafirst-ins.com
steps.safeco.com
steps.peerless-ins.com
steps.ohiocasualty-ins.com
steps.montgomery-ins.com
steps.lmig.com
steps.libertynorthwest-ins.com
steps.libertymutualgroup.com
steps.libertymutual.com
steps.indiana-ins.com
steps.goldeneagle-ins.com
steps.coloradocasualty-ins.com
steps.americafirst-ins.com
saml.lmcissobrokerdc2.libertymutual.com
safetynet.libertymutual.com
public.safetynet.libertymutual.com
policyholders.libertynorthwest.com
obsc.peerless-ins.com
obsc.ohiocasualty-ins.com
obsc.montgomery-ins.com
obsc.libertynorthwest-ins.com
obsc.libertymutualgroup.com
obsc.indiana-ins.com
obsc.hawkeyesecurity-ins.com
obsc.goldeneagle-ins.com
obsc.coloradocasualty-ins.com
obsc.americafirst-ins.com
mylibertyconnection.com
libertymmhtables.libertymutual.com
icasemanagersecure.libertymutual.com
helmsmantpa.com
demo-risktrac.libertymutual.com
claimseft.peerless-ins.com
claimseft.ohiocasualty-ins.com
claimseft.montgomery-ins.com
claimseft.libertymutualgroup.com
claimseft.indiana-ins.com
claimseft.hawkeyesecurity-ins.com
claimseft.goldeneagle-ins.com
claimseft.coloradocasualty-ins.com
claimseft.americafirst-ins.com
cibilldocuments.libertymutual.com
business.libertymutualgroup.com
billinginquiry.lmig.com
auth.lmcissobrokerdc2.libertymutual.com
app.lmcissobrokerdc2.libertymutual.com
analytics.libertymutual.com
af.safeco.com
af.peerless-ins.com
af.ohiocasualty-ins.com
af.montgomery-ins.com
af.libertynorthwest-ins.com
af.libertymutualgroup.com
af.libertymutual.com
af.indiana-ins.com
af.goldeneagle-ins.com
af.coloradocasualty-ins.com
af.americafirst-ins.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for af.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHOWw9VmGH8JH+ZFatA+
qdqes4uN3bgCCyFcK0GFU7BEwyZmFqgapqy0t967uAh/AcbykD3ufQt7blOXpnIT
jxTbPh+q/YK59S/DoBKVGY9d7HoE54srBdkqJtGOyryaHIuO+5ypRxTdAnYd+VH/
MVZf7nC7HZZ/eITeJu4auzyjFaXGliiC81EJ6T0SqFRO/2zKwDTyO8zFgmgkDtiN
Jm81JpUnr67uXms8eF2jeV8fGAwsLEaY+JdaIAqxe+zB8lq1zKU3+xza+OGg1b9+
zLjZ68WDlWDwx9YQEQncMO/oFKuN5A1zloJSK9k7SNHqnyEFJcy2nh+WWBSnZEj2
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 146424158852903667556124977118998136560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'af.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23789800357256222590082958401443839447628247593043389738328323601409759454660158475569175525616320456431899961446969135739331599758479742828389980486409538404434319400103218865342150575112458929919184456964304234144214715436335726218512665492170487838356040691368685996194709440249714626689741028543564149928589995178898587280772485054258398976183310318168799114658606154715776458351304469773742691865437765987309347719135698379404447405277527182291771609887127388010590173264609708774025245952079407203439208441718397411297203715266315693691831954446378435709851951054267393982062905237953249625689799692505812891391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2556 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertypethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.libertypethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliveforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpubdocumentext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'largecommercialclaimportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-protector.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsservices3-r.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esales.lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsservices-sbat.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-sppriv.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-spadmin.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.claimstour.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saml.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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