perf-www.liucanada.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 44:0d:17:f1:08:d5:32:6b:8c:ce:dc:b3:2a:d5:87:9d was issued on by Entrust, Inc..

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 44:0d:17:f1:08:d5:32:6b:8c:ce:dc:b3:2a:d5:87:9d
Serial Number (int): 90455489164676901423175612987996473245
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a3:37:65:7c:58:cc:f6:9d:5d:f8:f2:a0:a4:3d:67:9c:1f:24:fd:52
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): df:d9:70:9d:15:bf:9d:9e:d2:c0:59:79:2b:f4:d0:b1:54:25:45:d1
Fingerprint (sha256): 37:cc:f6:ab:78:e2:0b:08:d2:4c:a5:8a:b2:63:05:db:b0:73:01:ec:20:c2:e9:5d:0f:dd:fe:fa:1f:2e:a6:d0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate perf-www.liucanada.com

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf-www.liucanada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf-wcclaims.iso.lmig.com
sit.libertymutualcargo.com
uat-wcclaims.iso.lmig.com
tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
globalclaimcenter-batch-sit1-cloud.lmig.com
dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
perf-www.liucanada.com
dev.libertycargo.com.au
DEV.libertyquote.com.au
dev.eventsatlibertymutual.com
uat.libertyquote.ca
DEV-libertycargo.liuquote.com
DEV.liuquote.com
dev-marinecargo.liuquote.com
archivus.lmig.com
unqork-ironshore.lmig.com
test.helmsmantpa.com
staging.helmsmantpa.com
test-www.libertyfianzas.com
test-mstr.libertyfianzas.com
dev-www.liuquote.com
uat-agents.libertymutualsurety.com
dev2-lfanalytics.aws.lmig.com
uat.liucargo.com
uat.liu-eil.com
uat-www.liu-latinamerica.com
test.primerofianzas.info
qa-qiservicing.libertymutualsurety.com
qa-qi.libertymutualsurety.com
ps-qi.libertymutualsurety.com
ps-bfl.libertymutualsurety.com
perf-www.lms.ae-libertyiu.com
perf-www.liu-usa.com
perf-www.ae-libertyiu.com
perf-qi.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-agents.libertymutualsurety.com
passport-test.lmig.com

Other certificates including the domain name liucanada.com

(limited to 100 certificates)
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
tst-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
tst-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for perf-www.liucanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMOwcevITCpymPFm9mZ6
Mb53XhgPlIfBb35XdK8HpI8FjuYxU9a7tNiHUKhdKEbARNEn2zMcH1631dbcwhsO
8NKrTRaQqBakgHNlWuqJ8oUXsLa0OKX71MrH9iHsD+hW4SIFVdWKozcwaHWhBQ0+
8YzJh3wnwyVRJ/VqIMwP17q1UacuPVvyZTxrp5grwtyiFJgJGn1UWtNO0MFJR3eV
1bSI5R8NMqA3cuL1jXP72H+K4I0Sm3ibUpTYJflLZkqYfURV7xNNMOp9Eo9394e9
aahsihFDvBiKuWaB5/lWvIWBOBoTAR1kyma+BFjtsE43E/U5pid4AHkV92CYPvF9
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90455489164676901423175612987996473245
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-04 17:20:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-13 17:20:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf-www.liucanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20294626754501796135088776317213537254937156758139963346129701554224172800927629319084080312118808139667569840576621043155255157799349918840199229044290441769862881307026814854081745157039161120323958183946396547598912349079465679663753237378770518657985712623947465148963305356339687910217902757663860311868243618948335408331058537632935431967941714345199381499972568472338189298957483631858639374126277938872337309550151183033899711671821205825319335022493104371529090697479971773673511274967706014068229676402749116694488590563148273017044224350251886710311783493796850340139239190937028099936257368007608437406991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a337657c58ccf69d5df8f2a0a43d679c1f24fd52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-sit1-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eventsatlibertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.libertyquote.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV-libertycargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-marinecargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivus.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unqork-ironshore.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mstr.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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