test-risk-lifecycle-id.libertymutual.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number cc:61:fb:b6:e2:3b:2c:51:00:00:00:00:50:f5:57:e8 was issued on by Entrust, Inc..

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cc:61:fb:b6:e2:3b:2c:51:00:00:00:00:50:f5:57:e8
Serial Number (int): 271671269309751958639022716115525916648
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7b:28:78:02:23:3d:7f:f8:25:cd:65:4b:14:66:c6:5c:05:9a:83:2d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d8:ae:0e:2e:c5:f6:2e:42:88:64:20:a8:96:05:f1:2e:9c:6d:f2:99
Fingerprint (sha256): 30:18:13:08:50:05:c3:06:fd:70:f1:67:2b:be:e7:86:16:a9:03:8e:0e:10:54:f1:e1:09:5f:aa:29:4c:81:75

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate test-risk-lifecycle-id.libertymutual.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-risk-lifecycle-id.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-lfanalytics.aws.lmig.com
dev2-libertyfianzas.aws.lmig.com
dev-surety-ip-bie-intake.lmig.com
perf-surety-ip-bie-intake.lmig.com
surety-ip-bie-intake.lmig.com
uat-surety-ip-bie-intake.lmig.com
qa-surety-ip-bie-intake.lmig.com
grs-bpm-ui-test.libertymutual.com
dev-bie.lmig.com
development-gs-policy-number-generator.libertymutual.com
development-risk-link-id.libertymutual.com
test-risk-link-id.libertymutual.com
performance-gs-policy-number-generator.libertymutual.com
performance-risk-link-id.libertymutual.com
fianzas.nonprod.us-east-1.grs.lmig.com
connectstage.libertyspecialtymarkets.com
connectuat.libertyspecialtymarkets.com
perf-www.libertylink.co.uk
perf-www.libertylink.ae
perf-www.libertylink.eu
staging917328.libertyspecialtymarkets.com
uat917328.libertyspecialtymarkets.com
dev-pqm.aws.lmig.com
dev-pqmquo.aws.lmig.com
test-claims-intake.libertymutualsurety.com
perf-claims-intake.libertymutualsurety.com
devplatform.lsmitaly.com
perf.yourliberty.fr
test.liuquote.co.uk
www.yourliberty.fr
www-uat.liucanada.lmig.com
www-uat.liu-usa.lmig.com
www-uat.libertyinternational.com
uat.liupal.com
uat.liucargo.com
uat.liu-eil.com
uat-www.liu-latinamerica.com
tst-www.lms.ae-libertyiu.com
tst-www.liurisk.com
tst-www.liu-usa.com
tst-www.liu-latinamerica.com
tst-www.libertysegurosperu.com
tst-www.ae-libertyiu.com
tst-agents.libertymutualsurety.com
trn-qiservicing.libertymutualsurety.com
test.liuquote.ie
test-www.libertyiu.com
test-serf.libertyfianzas.com
test-qiservicing.libertymutualsurety.com
test-qi.libertymutualsurety.com
test-ofacpayment.libertymutual.com
test-lmsuretyext.libertymutual.com
test-execute.lmig.com
test-bfl.libertymutualsurety.com
test-accidenthealth.libertyiu.com.au
staging-bonds.libertymutualsurety.com
stage-qiservicing.libertymutualsurety.com
stage-qi.libertymutualsurety.com
stage-ofacpayment.libertymutual.com
stage-bfl.libertymutualsurety.com
sme2uat.liuquote.com
grs-bpm-ui-development.libertymutual.com
staging-billingandcommission.libertymutualsurety.com
nas-uw-auth-np.libertymutual.com
sme1uat.liuquote.com
qa-qiservicing.libertymutualsurety.com
qa-qi.libertymutualsurety.com
ps-qi.libertymutualsurety.com
ps-bfl.libertymutualsurety.com
perf-www.lms.ae-libertyiu.com
perf-www.liurisk.com
perf-www.liucanada.com
perf-www.liu-usa.com
perf-www.liu-latinamerica.com
perf-www.ae-libertyiu.com
perf-qiservicing.libertymutualsurety.com
perf-qi.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-agents.libertymutualsurety.com
passport-test.lmig.com
mkt-qiservicing.libertymutualsurety.com
mkt-qi.libertymutualsurety.com
dev-bfl.libertymutualsurety.com
cloudmonitor-test-www.libertyiu.com
bfl.qa.libertymutualsurety.com
nas-uw-users-np.libertymutual.com
uat.ironshorebind.com
qa.ironshorebind.com
performance-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for test-risk-lifecycle-id.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBeV9/pZDaT5lJqO5vgR
1JalOyv5NzxTsqAv3o78X+he0qj1MZavtn2BdihxBJUIufpmvcrqux+hCTr4BlPC
QkCWWZOq4s2A3gCrCPnTu0/P1kCC0ng4uT5hk3jLDgIqPwIK58V9L5wvfvFgk7JX
DXFrfIURhcEjDq8jAeFwgZAcEauEVQjzMt/zmNAFUFVabxz18uTH7MZQb8qoZmcT
0o0q491Swf2PQMaj/mkZDYIJzH40qKhczdzPP+dI3qV6OojByIAtxrg2Wby6gjjB
cm5g8FJvNWo1K5dwpUVrG1n7Y2ulaM3VJx1Kym5bR+tbSyVUh0L6raLH0nRqy/p4
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271671269309751958639022716115525916648
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 12:31:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 13:01:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-risk-lifecycle-id.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21724619053062697066094239394218314587801914631188221349985615147111014409269791837976151622810921477870128578861447009287841588962145705600054943650975631877874225917264174011441589743063170020731749819086108837127309615235394695380578365766972089944553262323663960445970947073842854694271555942943954310272482252134633394835225814948826919803346421971169676647362289600926063195919909130525415424467644161755904439077915678720564817089149284495859824405863680767767333396719179055874614158107597226020833287026027937833557991195174938353413703538454767195741597694418279165644175986661237339249383132404099017504879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2927 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-libertyfianzas.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-bpm-ui-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bie.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development-gs-policy-number-generator.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development-risk-link-id.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risk-link-id.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-gs-policy-number-generator.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-risk-link-id.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fianzas.nonprod.us-east-1.grs.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectstage.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectuat.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertylink.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertylink.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertylink.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging917328.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat917328.libertyspecialtymarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-pqm.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-pqmquo.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claims-intake.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-claims-intake.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devplatform.lsmitaly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.yourliberty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourliberty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.liucanada.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.liu-usa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.libertyinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertysegurosperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.liuquote.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-lmsuretyext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-execute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-accidenthealth.libertyiu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-bonds.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme2uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-bpm-ui-development.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-billingandcommission.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas-uw-auth-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme1uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfl.qa.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nas-uw-users-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.ironshorebind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.ironshorebind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performance-risk-lifecycle-id.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risk-lifecycle-id.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b287802233d7ff825cd654b1466c65c059a832d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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