perf-www.liucanada.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 26:5e:2b:f6:bd:a4:bf:e1:ba:57:41:58:f8:36:54:48 was issued on by Entrust, Inc..

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 26:5e:2b:f6:bd:a4:bf:e1:ba:57:41:58:f8:36:54:48
Serial Number (int): 50999631436961849324875747214142886984
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: de:6f:7a:02:b6:8e:bc:cb:fa:62:85:94:7e:44:a5:30:ce:73:a5:8d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 80:af:91:6f:0a:c8:32:3f:04:e2:56:8e:dc:d4:e3:3a:4f:48:74:ce
Fingerprint (sha256): 31:01:12:99:ff:c2:f4:eb:8d:df:5c:a0:ef:39:34:a8:94:2e:d2:51:e1:8c:b2:42:62:d8:06:2c:1c:63:b8:14

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate perf-www.liucanada.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf-www.liucanada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf-www.liucanada.com
passport-test.lmig.com
perf-agents.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-qi.libertymutualsurety.com
perf-www.ae-libertyiu.com
perf-www.liu-usa.com
perf-www.lms.ae-libertyiu.com
ps-bfl.libertymutualsurety.com
ps-qi.libertymutualsurety.com
qa-qi.libertymutualsurety.com
qa-qiservicing.libertymutualsurety.com
test.primerofianzas.info
uat-www.liu-latinamerica.com
uat.liu-eil.com
uat.liucargo.com
dev2-lfanalytics.aws.lmig.com
uat-agents.libertymutualsurety.com
dev-www.liuquote.com
test-mstr.libertyfianzas.com
test-www.libertyfianzas.com
staging.helmsmantpa.com
test.helmsmantpa.com
unqork-ironshore.lmig.com
archivus.lmig.com
dev-marinecargo.liuquote.com
DEV.liuquote.com
DEV-libertycargo.liuquote.com
uat.libertyquote.ca
dev.eventsatlibertymutual.com
DEV.libertyquote.com.au
dev.libertycargo.com.au
dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
globalclaimcenter-batch-sit1-cloud.lmig.com
tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
uat-wcclaims.iso.lmig.com
sit.libertymutualcargo.com
perf-wcclaims.iso.lmig.com
globalclaimcenter-batch-uat-cloud.lmig.com
dev.libertymutualprovidersupport.com
test-surety-ip-bie-intake.lmig.com
dev-serf.aws.libertyfianzas.com
test-icasemanager-ext-ping.lmig.com
hold-test-icasemanagersecure.libertymutual.com
UAT-Cloud.libertymutualcargo.com
devnaymu.libertymutual.com
authorization-policy-api-development.lmig.com
testnaymu.libertymutual.com
authorization-policy-api-test.lmig.com
test-serf.aws.libertyfianzas.com
test-www.borgonline.nl
grs-lsm-auth0-external-web-site.lmig.com
test-validador.libertyfianzas.com
suretyclaimsportal-test.aws.lmig.com
www.test-contratafianza.libertyfianzas.com
sit-www.libertylink.co.uk
staging-seguro-garantia.libertyseguros.com.br
test-cotizador.libertyfianzas.com
staging-agents.libertymutualsurety.com
staging-enroll.libertymutualsurety.com
uat-agents-surety.libertymutual.com
testing.libertyspecialtymarketsap.com
tst-enroll.libertymutualsurety.com
authorization-policy-api-training.lmig.com
auth0.libertymutual.com
test.review.id3e.lmig.com
dev.review.id3e.lmig.com
np-venti-console.lmig.com
test.libertyfianzas.com
test-serf-login.libertyfianzas.com
ibnr-development.lmig.com
ibnr-test.lmig.com
b2b-usmarine-sit.liuquote.com

Other certificates including the domain name liucanada.com

(limited to 100 certificates)
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
tst-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
tst-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for perf-www.liucanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoTJzJWEWGbUueDFoHZu
WZ5nlukitu5kE8mP3Sxw2c8GXIrDfHojOO+rcsc73VicA7fIFdod7CspG60J8k4p
n6WG3WGUPH4otO+F0shlvrN3FbGuHhcHHfc6np+p+9EKUoF2+0+MmYXKzAXoC4wd
gk9fmYd4cnWliX/sKkF9HC6MEu/fNfRnzALDz4So0h28888Wh2d/jhLByUGq+7ps
z14VnGHPEzHSmsJc0cQlF9ABIYHO7OylvwlgzXxOn5JTuShgjhMgsPnqSfWqUMjm
/Za9T9bhrvnTdL1QNok66eG1+hjDpi37hzIMRcOSF1QeIkF1Qzjn2ouBKljY1ATd
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50999631436961849324875747214142886984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 07:27:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 07:27:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf-www.liucanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24555711503760627613205845377757795526396241551267447118857503050873672832356088462045208078061423948019698154098214252956718847453068310170820641277918058374987871012381799368064458364123033641858759299364692428491549165401276807454093719211361807751177158078815128802566852892473921382888291522095641059034633023051869162331686477637019702673624755135347630778624842131960764057760240171116204367008292056973340400152527600246757627706683725822124275068309705864652818294966484675517509343000817760375554977613094545777172774973298751856933218981499386695389391005849287302345577200220038210335304976110054294216021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de6f7a02b68ebccbfa6285947e44a530ce73a58d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2357 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mstr.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unqork-ironshore.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivus.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-marinecargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV-libertycargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.libertyquote.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eventsatlibertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-sit1-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-uat-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-icasemanager-ext-ping.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UAT-Cloud.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-lsm-auth0-external-web-site.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-validador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suretyclaimsportal-test.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-www.libertylink.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents-surety.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-training.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth0.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-venti-console.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf-login.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnr-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnr-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-usmarine-sit.liuquote.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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