cs-pool-02k.lm.lmig.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 8f:f3:93:a4:c0:a4:41:e6:00:00:00:00:50:f8:37:b2 was issued on by Entrust, Inc..

With 73 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Hosting
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8f:f3:93:a4:c0:a4:41:e6:00:00:00:00:50:f8:37:b2
Serial Number (int): 191344326101117018990568581676540639154
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1d:92:e3:c4:2c:00:93:1a:ac:47:fa:44:2c:91:1d:97:68:25:21:05
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 65:ce:2b:25:c4:06:29:bb:02:4c:18:d0:f5:8f:83:53:b3:6d:18:2e
Fingerprint (sha256): 31:66:6d:bd:db:1a:e6:5c:c8:5f:e2:c6:9e:94:d2:38:e0:d4:ae:04:11:2a:50:e6:93:1c:27:12:e7:a1:cb:45

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cs-pool-02k.lm.lmig.com

73

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs-pool-02k.lm.lmig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs-pool-02k.lm.lmig.com
lyncdiscover.libertyfianzas.com
sip.libertyfianzas.com
lyncdiscoverinternal.libertyfianzas.com
lyncdiscover.primerofianzas.com
sip.primerofianzas.com
lyncdiscoverinternal.primerofianzas.com
lyncdiscover.lmi.com
sip.lmi.com
lyncdiscoverinternal.lmi.com
csweb-pool-02k.lm.lmig.com
cswebext-pool-02k.libertymutual.com
lm-hslynfe-p01k.lm.lmig.com
lm-hslynfe-p02k.lm.lmig.com
lm-hslynfe-p03k.lm.lmig.com
lm-hslynfe-p04k.lm.lmig.com
lm-hslynfe-p05k.lm.lmig.com
lm-hslynfe-p06k.lm.lmig.com
lm-hslynfe-p07k.lm.lmig.com
lm-hslynfe-p08k.lm.lmig.com
lm-hslynfe-p09k.lm.lmig.com
meet.libertymutual.com
join.libertymutual.com
join.helmsmantpa.com
dialin.libertymutual.com
LyncdiscoverInternal.libertymutual.com
LyncdiscoverInternal.americafirst-ins.com
LyncdiscoverInternal.ColoradoCasualty.com
LyncdiscoverInternal.cascadedisability.com
LyncdiscoverInternal.GoldenEagleCorp.com
LyncdiscoverInternal.Indiana-Ins.com
LyncdiscoverInternal.LibertyInternational.com
LyncdiscoverInternal.Liberty-IT.co.uk
LyncdiscoverInternal.LibertyNorthwest.com
LyncdiscoverInternal.montgomery-ins.com
LyncdiscoverInternal.ohiocasualty-ins.com
LyncdiscoverInternal.peerless-ins.com
LyncdiscoverInternal.safeco.com
LyncdiscoverInternal.libertyiu.com
LyncdiscoverInternal.helmsmantpa.com
lyncdiscoverinternal.libertyglobalgroup.com
Lyncdiscover.libertymutual.com
Lyncdiscover.americafirst-ins.com
Lyncdiscover.cascadedisability.com
Lyncdiscover.ColoradoCasualty.com
Lyncdiscover.GoldenEagleCorp.com
Lyncdiscover.Indiana-Ins.com
Lyncdiscover.LibertyInternational.com
Lyncdiscover.Liberty-IT.co.uk
Lyncdiscover.LibertyNorthwest.com
Lyncdiscover.montgomery-ins.com
Lyncdiscover.ohiocasualty-ins.com
Lyncdiscover.peerless-ins.com
Lyncdiscover.safeco.com
Lyncdiscover.libertyiu.com
Lyncdiscover.helmsmantpa.com
Lyncdiscover.libertyglobalgroup.com
sip.libertymutual.com
sip.americafirst-ins.com
sip.cascadedisability.com
sip.ColoradoCasualty.com
sip.GoldenEagleCorp.com
sip.Indiana-Ins.com
sip.LibertyInternational.com
sip.Liberty-IT.co.uk
sip.LibertyNorthwest.com
sip.montgomery-ins.com
sip.ohiocasualty-ins.com
sip.peerless-ins.com
sip.safeco.com
sip.libertyiu.com
sip.helmsmantpa.com
sip.libertyglobalgroup.com

Other certificates including the domain name lmig.com

(limited to 100 certificates)
prod-eu-west-1-alfresco-repo.aws.lmig.com
ete-claims.safeco.com
*.kdc.paas.lmig.com
uram.lmig.com
atlas-services.lmig.com
cerc-ar.lmig.com
testcommercial.lmig.com
dev-fsda.lmig.com
rdc-registry-nprod.lmig.com
*.eu-west-1.np.paas.lmig.com
relativity.lmig.com
kdc-citbi.lmig.com
vmkip-hjss0001.lm.lmig.com
VMPIP-HSIWAE01.lm.lmig.com
requestit.lmig.com
vmkit-a4swb001.lm.lmig.com
statuspage.io
lm-pmmstgy-d01k.lm.lmig.com
*.app-severless.rancher.sandbox.aws.lmig.com
dev-ap-southeast-2-gs-alfresco-52-saml.aws.lmig.com
www.libertymutual.com
omni-messaging.us-east-1.lmig.com
dial-auditlog-retention.lmig.com
vx-eatknas-p02k.lmig.com.lmig.com
ispoappskdc.lmig.com
ci-envoy-reins-search.lmig.com
ete-claims.safeco.com
85a-sseaesdm1.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
aep-lm-soap-client-invoker.production.us-east-1.aws.lmig.com
amcontactcenter.lmig.com
*.aws.lmig.com
uscm-sasgrid-web.lmig.com
compassdocuments.lmig.com
vxpip-hhspds01.lmig.com
PeopleAtLiberty.com
lmpproducerextranet.lmig.com
lm-ise-psn.lmig.com
test-pmsrc.lmig.com
testAvayaDev.lmig.com
statuspage.io
pfet02k03.lmig.com
cmpsccosrv.lmig.com
lcpet-havsbc01-inside.lmig.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
test-import.lmig.com
eip.lmig.com
lmpin-hcybrk02-r.lmig.com
vm-ceg-prd2-1.azr.lmig.com
0055-blox-ext-grid.lmig.com
ete-www2.libertymutual.com
dr-sslvpn-kc.lmig.com
perf-driverrisk.cf.reuse.lmig.com
denodo-solution-manager-non-production.aws.lmig.com
vckit-haespc02.lmig.com
ecr-nocustids-kdc.lmig.com
lsm-fred.lmig.com
comp3-ui.aws.lmig.com
perfandcompstatement.lmig.com
snd-ciapstableau.aws.lmig.com
puma.lmig.com
logging-old.datahub.aws.lmig.com
test-securefile.libertymutual.com
dev-compworkq-cmis.lmig.com
gateway-client.cf.reuse.lmig.com
vendors.test.wem.gde.aws.lmig.com
vxkip-pwaslp05.lmig.com
api.eco-development.lmig.com
pmit-easysuite.lmig.com
cs-tappool-03p.lm.lmig.com
gw-gde-equifax-service.test.wem.gde.aws.lmig.com
0038-sbc-ext-01.lmig.com
lm-hscyrkp-p01p.lm.lmig.com
lmb-datalake-zeppelin-prod.aws.lmig.com
contracts-portal.lmig.com
clworkbench-ws.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
LM-HS-LTAS-A-T01P.LMIG.COM
2pr-rpama.lmig.com
vxpif-p7fsa002.lmig.com
b2b-boomi-batch-kc.lmig.com
wcsvtrigger.lmig.com
vmpip-m566u5fh.lm.lmig.com
bp1054598.saagie.com
vmkip-hvcvdi22.lm.lmig.com
ci-envoy-ppuw-stage-translation.lmig.com
sit-eu-west-1-gs-alfresco.aws.lmig.com
inspire-interactive.development.aws.lmig.com
dev-iam-console.lmig.com
vckip-hcmad201.lmig.com
leservices-imp.lmig.com
ciim-claims-service-test.np.lmig.com
perf-www.liucanada.com
statuspage.io
smart-workflow-rules.lmig.com
grs-informatica-mdm-aws-production.aws.lmig.com
prod-b-us-east-1-ci-alfresco-ingest-share.aws.lmig.com
vmpip-hcypvw03.lm.lmig.com
brmspolicy-uat.libertyinsurance.in

Certificate

The complete raw certificate details for cs-pool-02k.lm.lmig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE80Mjv3QYyPeE4DsXjB
s9P8tZyAX3pMAP0f+wuy07NzKsSkrXTZFoWpUO2KbPZ3E2gdSdHx9kgyuULsLgzB
Bb+1RoDllmmcBrJS7tOvktX5bBPXNFDdFifS9Pf81jECXaWKkq3i7Wt9cHlQHiDB
yWAZa55F4cDoxuHR9QnX/F2K6wWTd3q0gLRixZIRQ8l3gXBtfqK7JnTDvsoBiXvA
qXrD+F3MU3DU2v1aJcwBPCKdEkhPeNnmMvO+hGSbh0ae5lvJ2MKyKplj5sXM86lj
Shob4OzYyqjDzTaMawEp6kfacsAhuPGmzLWI0FPCdw1qMneilXLkqH6hXuOHTSI7
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 191344326101117018990568581676540639154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-06 05:41:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-06 06:11:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs-pool-02k.lm.lmig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24276811448059054585296404267571409246634123837548007017752599441977794541023532667430769853255342175150407622167862373595074652854256463178149003348435067742405385620410824137764624296369397359803751375355526393873033368356032853519747946114609610999132005547495448788223390436632585237591461176128619128643685875659242728033960063508948980629718630499001033652320941397902017535983824455763328143783034485509985940748398329506516867507990786168749463979302649770023481895480012967951423332712968132417497441357872239972081020569854483857067025052570546715231613474038830645245316818474845367657567217988269605272571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2274 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-pool-02k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.primerofianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csweb-pool-02k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cswebext-pool-02k.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p01k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p02k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p03k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p04k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p05k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p06k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p07k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p08k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hslynfe-p09k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ColoradoCasualty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.cascadedisability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.GoldenEagleCorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.Indiana-Ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.LibertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.Liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.LibertyNorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.cascadedisability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ColoradoCasualty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.GoldenEagleCorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.Indiana-Ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.LibertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.Liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.LibertyNorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscover.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cascadedisability.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ColoradoCasualty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.GoldenEagleCorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Indiana-Ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.LibertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.LibertyNorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d92e3c42c00931aac47fa442c911d9768252105
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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