vantageporttest.libertymutual.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 97:43:51:a3:2f:46:3e:23:00:00:00:00:50:f3:8b:a0 was issued on by Entrust, Inc..

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRM US
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 97:43:51:a3:2f:46:3e:23:00:00:00:00:50:f3:8b:a0
Serial Number (int): 201062967057043229571311999602897685408
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 34:2a:e6:b1:f3:00:0c:80:98:7b:b2:c4:2e:c9:90:6b:62:5e:bd:8c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 75:d9:61:89:e7:85:2b:23:e1:c6:62:e5:ed:c0:90:3d:5c:21:04:54
Fingerprint (sha256): 33:0a:92:e6:57:ff:63:fd:cc:10:05:f2:99:db:dd:2a:4b:c0:ae:e1:fe:c7:60:d4:e4:c1:b3:a7:2f:91:7e:a3

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate vantageporttest.libertymutual.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vantageporttest.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vantageporttest.libertymutual.com
libertyaccess-test.libertymutualgroup.com
staging-libertyaccess.libertymutual.com
mlc-np-lmb.mylibertyconnection.com
ci-policy-leadgenapi-np.libertymutual.com
perf-smallcommercialclaimportal.libertymutual.com
test-cmpubdocumentext.lmig.com
test3-ereport.libertymutual.com
test2-ereport.libertymutual.com
developer.np-lmb.libertymutual.com
test-af3.libertymutual.com
dev-af3.libertymutual.com
test-dmsservices-sbat.lmig.com
tst-benefits.mylibertyconnection.com
www-test.mylibertyconnection.com
tst-www.mybusinessonline.libertymutual.com
tst-www.libertymutualvantageport.com
tst-www.commercialportal.libertymutual.com
tst-secure.mybusinessonline.libertymutual.com
tst-public.libertymutualvantageport.com
tst-login.commercialportal.libertymutual.com
tst-auth.libertymutualvantageport.com
test.libertymutualprovidersupport.com
test-workerscompensationsupport.libertymutual.com
test-workerscompensationsupport.helmsmantpa.com
test-webquote.libertymutual.com
test-wcequote.libertymutual.com
test-suretyonline.myinstantincentives.com
test-stui.safeco.com
test-stui.peerless-ins.com
test-stui.ohiocasualty-ins.com
test-stui.montgomery-ins.com
test-stui.libertynorthwest-ins.com
test-stui.libertymutualgroup.com
test-stui.libertymutual.com
test-stui.indiana-ins.com
test-stui.goldeneagle-ins.com
test-stui.coloradocasualty-ins.com
test-stui.americafirst-ins.com
test-steps.safeco.com
test-steps.peerless-ins.com
test-steps.ohiocasualty-ins.com
test-steps.montgomery-ins.com
test-steps.libertynorthwest-ins.com
test-steps.libertymutualgroup.com
test-steps.libertymutual.com
test-steps.indiana-ins.com
test-steps.goldeneagle-ins.com
test-steps.coloradocasualty-ins.com
test-steps.americafirst-ins.com
test-saml.mylibertyconnection.com
test-safeco.myinstantincentives.com
test-preferences.libertymutual.com
test-policyholders.libertynorthwest.com
test-obsc.peerless-ins.com
test-obsc.ohiocasualty-ins.com
test-obsc.montgomery-ins.com
test-obsc.libertynorthwest-ins.com
test-obsc.libertymutualgroup.com
test-obsc.indiana-ins.com
test-obsc.goldeneagle-ins.com
test-obsc.coloradocasualty-ins.com
test-obsc.americafirst-ins.com
test-libertymutual.myinstantincentives.com
test-libertymmhtables.libertymutual.com
test-ixprs.libertymutual.com
test-feedback.libertymutual.com
test-elibertyquote.libertymutual.com
test-ecsgdisplay.libertymutual.com
test-clpi.libertymutual.com
test-claimseft.peerless-ins.com
test-claimseft.ohiocasualty-ins.com
test-claimseft.montgomery-ins.com
test-claimseft.libertymutualgroup.com
test-claimseft.goldeneagle-ins.com
test-billinginquiry.lmig.com
test-agentsportal.libertymutual.com
test-af.safeco.com
test-af.peerless-ins.com
test-af.ohiocasualty-ins.com
test-af.montgomery-ins.com
test-af.libertynorthwest-ins.com
test-af.libertymutualgroup.com
test-af.libertymutual.com
test-af.indiana-ins.com
test-af.goldeneagle-ins.com
test-af.coloradocasualty-ins.com
test-af.americafirst-ins.com
secure-test2.mylibertyconnection.com
secure-test.mylibertyconnection.com
auth-test.mylibertyconnection.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for vantageporttest.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRqzCCEJOgAwIBAgIRAJdDUaMvRj4jAAAAAFDzi6AwDQYJKoZIhvcNAQELBQAw
gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL
Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg
MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs
BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN
MTkwNjI1MTMzNTQzWhcNMjAwNjI1MTQwNTQyWjCBljELMAkGA1UEBhMCVVMxFjAU
BgNVBAgTDU5ldyBIYW1wc2hpcmUxEzARBgNVBAcTClBvcnRzbW91dGgxHTAbBgNV
BAoTFExpYmVydHkgTXV0dWFsIEdyb3VwMQ8wDQYDVQQLEwZHUk0gVVMxKjAoBgNV
BAMTIXZhbnRhZ2Vwb3J0dGVzdC5saWJlcnR5bXV0dWFsLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAKJQ6jDklMuSzlmrcJO+AU5ELb2a44rQ94y5
Q+ZEzXvUa+XOhvikoAgsoIjTyO6jNhqaOQEU3nRXGloSTcOJ8NIW8Ux7Zy47+pju
QW8H5Am7ex+sw7YcyKMPEtHCj3R/7thKYNxJnMbeCaFmDGKScxcBDe6Usd/A99h0
A0VjfwsIFCIX3gmDUYD2n+dqGv6JrooE2hyU55D9un7ERbSQ8vzWOZO+VJbr8Abw
lAKo6JD9nUZYWgINiGydeCYAqsi3A297wSuX5NRYhphmuIMoExw2e8sjzX620z53
Tj5JsUsKLlyYpYUen3xDw9e0ZIqHmv7SSQDIJxvDNsV3W4A1FksCAwEAAaOCDcww
gg3IMBMGCisGAQQB1nkCBAMBAf8EAgUAMIIMSQYDVR0RBIIMQDCCDDyCIXZhbnRh
Z2Vwb3J0dGVzdC5saWJlcnR5bXV0dWFsLmNvbYIpbGliZXJ0eWFjY2Vzcy10ZXN0
LmxpYmVydHltdXR1YWxncm91cC5jb22CJ3N0YWdpbmctbGliZXJ0eWFjY2Vzcy5s
aWJlcnR5bXV0dWFsLmNvbYIibWxjLW5wLWxtYi5teWxpYmVydHljb25uZWN0aW9u
LmNvbYIpY2ktcG9saWN5LWxlYWRnZW5hcGktbnAubGliZXJ0eW11dHVhbC5jb22C
MXBlcmYtc21hbGxjb21tZXJjaWFsY2xhaW1wb3J0YWwubGliZXJ0eW11dHVhbC5j
b22CHnRlc3QtY21wdWJkb2N1bWVudGV4dC5sbWlnLmNvbYIfdGVzdDMtZXJlcG9y
dC5saWJlcnR5bXV0dWFsLmNvbYIfdGVzdDItZXJlcG9ydC5saWJlcnR5bXV0dWFs
LmNvbYIiZGV2ZWxvcGVyLm5wLWxtYi5saWJlcnR5bXV0dWFsLmNvbYIadGVzdC1h
ZjMubGliZXJ0eW11dHVhbC5jb22CGWRldi1hZjMubGliZXJ0eW11dHVhbC5jb22C
HnRlc3QtZG1zc2VydmljZXMtc2JhdC5sbWlnLmNvbYIkdHN0LWJlbmVmaXRzLm15
bGliZXJ0eWNvbm5lY3Rpb24uY29tgiB3d3ctdGVzdC5teWxpYmVydHljb25uZWN0
aW9uLmNvbYIqdHN0LXd3dy5teWJ1c2luZXNzb25saW5lLmxpYmVydHltdXR1YWwu
Y29tgiR0c3Qtd3d3LmxpYmVydHltdXR1YWx2YW50YWdlcG9ydC5jb22CKnRzdC13
d3cuY29tbWVyY2lhbHBvcnRhbC5saWJlcnR5bXV0dWFsLmNvbYItdHN0LXNlY3Vy
ZS5teWJ1c2luZXNzb25saW5lLmxpYmVydHltdXR1YWwuY29tgid0c3QtcHVibGlj
LmxpYmVydHltdXR1YWx2YW50YWdlcG9ydC5jb22CLHRzdC1sb2dpbi5jb21tZXJj
aWFscG9ydGFsLmxpYmVydHltdXR1YWwuY29tgiV0c3QtYXV0aC5saWJlcnR5bXV0
dWFsdmFudGFnZXBvcnQuY29tgiV0ZXN0LmxpYmVydHltdXR1YWxwcm92aWRlcnN1
cHBvcnQuY29tgjF0ZXN0LXdvcmtlcnNjb21wZW5zYXRpb25zdXBwb3J0LmxpYmVy
dHltdXR1YWwuY29tgi90ZXN0LXdvcmtlcnNjb21wZW5zYXRpb25zdXBwb3J0Lmhl
bG1zbWFudHBhLmNvbYIfdGVzdC13ZWJxdW90ZS5saWJlcnR5bXV0dWFsLmNvbYIf
dGVzdC13Y2VxdW90ZS5saWJlcnR5bXV0dWFsLmNvbYIpdGVzdC1zdXJldHlvbmxp
bmUubXlpbnN0YW50aW5jZW50aXZlcy5jb22CFHRlc3Qtc3R1aS5zYWZlY28uY29t
ghp0ZXN0LXN0dWkucGVlcmxlc3MtaW5zLmNvbYIedGVzdC1zdHVpLm9oaW9jYXN1
YWx0eS1pbnMuY29tghx0ZXN0LXN0dWkubW9udGdvbWVyeS1pbnMuY29tgiJ0ZXN0
LXN0dWkubGliZXJ0eW5vcnRod2VzdC1pbnMuY29tgiB0ZXN0LXN0dWkubGliZXJ0
eW11dHVhbGdyb3VwLmNvbYIbdGVzdC1zdHVpLmxpYmVydHltdXR1YWwuY29tghl0
ZXN0LXN0dWkuaW5kaWFuYS1pbnMuY29tgh10ZXN0LXN0dWkuZ29sZGVuZWFnbGUt
aW5zLmNvbYIidGVzdC1zdHVpLmNvbG9yYWRvY2FzdWFsdHktaW5zLmNvbYIedGVz
dC1zdHVpLmFtZXJpY2FmaXJzdC1pbnMuY29tghV0ZXN0LXN0ZXBzLnNhZmVjby5j
b22CG3Rlc3Qtc3RlcHMucGVlcmxlc3MtaW5zLmNvbYIfdGVzdC1zdGVwcy5vaGlv
Y2FzdWFsdHktaW5zLmNvbYIddGVzdC1zdGVwcy5tb250Z29tZXJ5LWlucy5jb22C
I3Rlc3Qtc3RlcHMubGliZXJ0eW5vcnRod2VzdC1pbnMuY29tgiF0ZXN0LXN0ZXBz
LmxpYmVydHltdXR1YWxncm91cC5jb22CHHRlc3Qtc3RlcHMubGliZXJ0eW11dHVh
bC5jb22CGnRlc3Qtc3RlcHMuaW5kaWFuYS1pbnMuY29tgh50ZXN0LXN0ZXBzLmdv
bGRlbmVhZ2xlLWlucy5jb22CI3Rlc3Qtc3RlcHMuY29sb3JhZG9jYXN1YWx0eS1p
bnMuY29tgh90ZXN0LXN0ZXBzLmFtZXJpY2FmaXJzdC1pbnMuY29tgiF0ZXN0LXNh
bWwubXlsaWJlcnR5Y29ubmVjdGlvbi5jb22CI3Rlc3Qtc2FmZWNvLm15aW5zdGFu
dGluY2VudGl2ZXMuY29tgiJ0ZXN0LXByZWZlcmVuY2VzLmxpYmVydHltdXR1YWwu
Y29tgid0ZXN0LXBvbGljeWhvbGRlcnMubGliZXJ0eW5vcnRod2VzdC5jb22CGnRl
c3Qtb2JzYy5wZWVybGVzcy1pbnMuY29tgh50ZXN0LW9ic2Mub2hpb2Nhc3VhbHR5
LWlucy5jb22CHHRlc3Qtb2JzYy5tb250Z29tZXJ5LWlucy5jb22CInRlc3Qtb2Jz
Yy5saWJlcnR5bm9ydGh3ZXN0LWlucy5jb22CIHRlc3Qtb2JzYy5saWJlcnR5bXV0
dWFsZ3JvdXAuY29tghl0ZXN0LW9ic2MuaW5kaWFuYS1pbnMuY29tgh10ZXN0LW9i
c2MuZ29sZGVuZWFnbGUtaW5zLmNvbYIidGVzdC1vYnNjLmNvbG9yYWRvY2FzdWFs
dHktaW5zLmNvbYIedGVzdC1vYnNjLmFtZXJpY2FmaXJzdC1pbnMuY29tgip0ZXN0
LWxpYmVydHltdXR1YWwubXlpbnN0YW50aW5jZW50aXZlcy5jb22CJ3Rlc3QtbGli
ZXJ0eW1taHRhYmxlcy5saWJlcnR5bXV0dWFsLmNvbYIcdGVzdC1peHBycy5saWJl
cnR5bXV0dWFsLmNvbYIfdGVzdC1mZWVkYmFjay5saWJlcnR5bXV0dWFsLmNvbYIk
dGVzdC1lbGliZXJ0eXF1b3RlLmxpYmVydHltdXR1YWwuY29tgiJ0ZXN0LWVjc2dk
aXNwbGF5LmxpYmVydHltdXR1YWwuY29tght0ZXN0LWNscGkubGliZXJ0eW11dHVh
bC5jb22CH3Rlc3QtY2xhaW1zZWZ0LnBlZXJsZXNzLWlucy5jb22CI3Rlc3QtY2xh
aW1zZWZ0Lm9oaW9jYXN1YWx0eS1pbnMuY29tgiF0ZXN0LWNsYWltc2VmdC5tb250
Z29tZXJ5LWlucy5jb22CJXRlc3QtY2xhaW1zZWZ0LmxpYmVydHltdXR1YWxncm91
cC5jb22CInRlc3QtY2xhaW1zZWZ0LmdvbGRlbmVhZ2xlLWlucy5jb22CHHRlc3Qt
YmlsbGluZ2lucXVpcnkubG1pZy5jb22CI3Rlc3QtYWdlbnRzcG9ydGFsLmxpYmVy
dHltdXR1YWwuY29tghJ0ZXN0LWFmLnNhZmVjby5jb22CGHRlc3QtYWYucGVlcmxl
c3MtaW5zLmNvbYIcdGVzdC1hZi5vaGlvY2FzdWFsdHktaW5zLmNvbYIadGVzdC1h
Zi5tb250Z29tZXJ5LWlucy5jb22CIHRlc3QtYWYubGliZXJ0eW5vcnRod2VzdC1p
bnMuY29tgh50ZXN0LWFmLmxpYmVydHltdXR1YWxncm91cC5jb22CGXRlc3QtYWYu
bGliZXJ0eW11dHVhbC5jb22CF3Rlc3QtYWYuaW5kaWFuYS1pbnMuY29tght0ZXN0
LWFmLmdvbGRlbmVhZ2xlLWlucy5jb22CIHRlc3QtYWYuY29sb3JhZG9jYXN1YWx0
eS1pbnMuY29tghx0ZXN0LWFmLmFtZXJpY2FmaXJzdC1pbnMuY29tgiRzZWN1cmUt
dGVzdDIubXlsaWJlcnR5Y29ubmVjdGlvbi5jb22CI3NlY3VyZS10ZXN0Lm15bGli
ZXJ0eWNvbm5lY3Rpb24uY29tgiFhdXRoLXRlc3QubXlsaWJlcnR5Y29ubmVjdGlv
bi5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xl
dmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUH
AQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggr
BgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2Vy
MB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBQ0Kuax
8wAMgJh7ssQuyZBrYl69jDAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQDV
98D0X1RGIn8VXfPwpyvbF9tVj+Xh5hQOQ5lHsh+aMkDJA40G0kApqDdhwn7N7A/U
0MC8VOwVFlYLOQW0SN6oCgY4r7AjGhBqZGpKidgmV+HCa2VRFjXeV/o1fmDIFRQa
mraJfrii8dJ6PWtLZYJVeO7QUpE0WvnuXDjGuaSj3ms3QWNgGkN8qrB97DokQrOf
lv0fhxpycf2aC4WdIyJd9tBEzxG5wo4A6If4FxhHfLmTvfwMApslys1QpAVz7VBC
M5eFxgtTyYHhmMXYFR7GTMJb0nwUtLH4y2XnJhqIdjz0QMUQCNucC3v10dxf4zr8
QFVVNnUS29nqn4guPql/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolDqMOSUy5LOWatwk74B
TkQtvZrjitD3jLlD5kTNe9Rr5c6G+KSgCCygiNPI7qM2Gpo5ARTedFcaWhJNw4nw
0hbxTHtnLjv6mO5BbwfkCbt7H6zDthzIow8S0cKPdH/u2Epg3Emcxt4JoWYMYpJz
FwEN7pSx38D32HQDRWN/CwgUIhfeCYNRgPaf52oa/omuigTaHJTnkP26fsRFtJDy
/NY5k75UluvwBvCUAqjokP2dRlhaAg2IbJ14JgCqyLcDb3vBK5fk1FiGmGa4gygT
HDZ7yyPNfrbTPndOPkmxSwouXJilhR6ffEPD17Rkioea/tJJAMgnG8M2xXdbgDUW
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 201062967057043229571311999602897685408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 13:35:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-25 14:05:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRM US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vantageporttest.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20490505983710668386674318746919159085249311417920942910253101423930569294157576030170487411875437271272530282943915430150134891504855701645012573024530578529263989138838219372146152983136135118315198627571367577413373687901450061460539968607600575054923529533479570698800848797680967184122201171613345094803440926369045913378492772865339051202903824478573911138995644229729527494722360124377257203391693703522128881666259279096834090657816214760510717128808460337294958078978719298761897924454620489428042984077796570933036456655443509599688741423262829441689077769946104493070184438584684594808586666837851715737163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantageporttest.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyaccess-test.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-libertyaccess.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlc-np-lmb.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-policy-leadgenapi-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-smallcommercialclaimportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cmpubdocumentext.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test3-ereport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test2-ereport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer.np-lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af3.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-af3.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dmsservices-sbat.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-benefits.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-secure.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-login.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-webquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wcequote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-suretyonline.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-saml.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeco.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-preferences.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ixprs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-feedback.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-elibertyquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecsgdisplay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							342ae6b1f3000c80987bb2c42ec9906b625ebd8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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