af.libertymutual.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 23:db:26:d1:a6:24:8d:85:36:0e:97:07:3b:3d:f1:c2 was issued on by Symantec Corporation.

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 23:db:26:d1:a6:24:8d:85:36:0e:97:07:3b:3d:f1:c2
Serial Number (int): 47660880206160788317839764119130862018
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): f7:b4:73:2c:9b:9e:8e:f7:49:e1:df:57:50:4e:c5:c4:56:10:54:51
Fingerprint (sha256): 38:62:cd:43:b0:92:ec:e1:f0:55:5e:e3:c9:22:dd:c7:71:cf:74:8f:7d:91:a7:a1:82:6a:f5:4c:5f:75:1f:8e

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate af.libertymutual.com

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for af.libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dr-risktracresources.libertymutual.com
libertypethealth.com
commercialclaimdocuments.libertymutual.com
benefits.mylibertyconnection.com
www.libertypethealth.com
np.libertypethealth.com
www.oliveforlife.com
cmpubdocumentext.libertymutual.com
largecommercialclaimportal.libertymutual.com
custom-protector.libertymutual.com
dmsservices3-r.lmig.com
benefits.libertymutual.com
esales.lmb.libertymutual.com
wrs.libertymutual.com
dmsservices-sbat.lmig.com
dr-www.libertymutualvantageport.com
dr-public.libertymutualvantageport.com
dr-sppriv.libertymutualvantageport.com
dr-spadmin.libertymutualvantageport.com
dr-auth.libertymutualvantageport.com
wcvideo.libertymutualgroup.com
wcvideo.helmsmantpa.com
video.claimstour.helmsmantpa.com
test-cibilldocuments.libertymutual.com
stui.safeco.com
stui.peerless-ins.com
stui.ohiocasualty-ins.com
stui.montgomery-ins.com
stui.libertynorthwest-ins.com
stui.libertymutualgroup.com
stui.libertymutual.com
stui.indiana-ins.com
stui.goldeneagle-ins.com
stui.coloradocasualty-ins.com
stui.americafirst-ins.com
steps.safeco.com
steps.peerless-ins.com
steps.ohiocasualty-ins.com
steps.montgomery-ins.com
steps.lmig.com
steps.libertynorthwest-ins.com
steps.libertymutualgroup.com
steps.libertymutual.com
steps.indiana-ins.com
steps.goldeneagle-ins.com
steps.coloradocasualty-ins.com
steps.americafirst-ins.com
saml.lmcissobrokerdc2.libertymutual.com
safetynet.libertymutual.com
public.safetynet.libertymutual.com
policyholders.libertynorthwest.com
obsc.peerless-ins.com
obsc.ohiocasualty-ins.com
obsc.montgomery-ins.com
obsc.libertynorthwest-ins.com
obsc.libertymutualgroup.com
obsc.indiana-ins.com
obsc.hawkeyesecurity-ins.com
obsc.goldeneagle-ins.com
obsc.coloradocasualty-ins.com
obsc.americafirst-ins.com
mylibertyconnection.com
libertymmhtables.libertymutual.com
icasemanagersecure.libertymutual.com
helmsmantpa.com
demo-risktrac.libertymutual.com
claimseft.peerless-ins.com
claimseft.ohiocasualty-ins.com
claimseft.montgomery-ins.com
claimseft.libertymutualgroup.com
claimseft.indiana-ins.com
claimseft.hawkeyesecurity-ins.com
claimseft.goldeneagle-ins.com
claimseft.coloradocasualty-ins.com
claimseft.americafirst-ins.com
cibilldocuments.libertymutual.com
business.libertymutualgroup.com
billinginquiry.lmig.com
auth.lmcissobrokerdc2.libertymutual.com
app.lmcissobrokerdc2.libertymutual.com
analytics.libertymutual.com
af.safeco.com
af.peerless-ins.com
af.ohiocasualty-ins.com
af.montgomery-ins.com
af.libertynorthwest-ins.com
af.libertymutualgroup.com
af.libertymutual.com
af.indiana-ins.com
af.goldeneagle-ins.com
af.coloradocasualty-ins.com
af.americafirst-ins.com

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for af.libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRATCCD+mgAwIBAgIQI9sm0aYkjYU2DpcHOz3xwjANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MTEwNzAwMDAwMFoX
DTE5MTAyNjIzNTk1OVowgZcxCzAJBgNVBAYTAlVTMRYwFAYDVQQIDA1OZXcgSGFt
cHNoaXJlMRMwEQYDVQQHDApQb3J0c21vdXRoMR0wGwYDVQQKDBRMaWJlcnR5IE11
dHVhbCBHcm91cDEdMBsGA1UECwwUQ29tbWVyY2lhbCBJbnN1cmFuY2UxHTAbBgNV
BAMMFGFmLmxpYmVydHltdXR1YWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0HhP9MzUyK8cCAVK/9mbUIm2yDytAS8hZY7t56Tc0kOij53dIJOG
tXCFciOfZpTS71C4IyPeY/9rnO2R2O7+B5+Y86Z0/VFHBAP0EKccczT6SDMNJ1Ka
Or92eZZ/52w9Jr1JD3YruTToZpVL+dblcWxu5IyfDhzihG6vqlXfz0pJmfR9CdOf
8M9/0ac3a97Z4qSLGH10bTG1441UTEUEQ5lsXLl+PnwQia1dQT4Fc+859GhACHl/
o9XjIS1NJ6efwtvE5rPuqrB6RSYHgzw44Yw5pos3lK1cGEldU5EEiw/hy9D5v0Tf
yi2loDOcNTLvtNUcGRS8NcU/2/vLnc8p2QIDAQABo4INXzCCDVswggqRBgNVHREE
ggqIMIIKhIImZHItcmlza3RyYWNyZXNvdXJjZXMubGliZXJ0eW11dHVhbC5jb22C
FGxpYmVydHlwZXRoZWFsdGguY29tgipjb21tZXJjaWFsY2xhaW1kb2N1bWVudHMu
bGliZXJ0eW11dHVhbC5jb22CIGJlbmVmaXRzLm15bGliZXJ0eWNvbm5lY3Rpb24u
Y29tghh3d3cubGliZXJ0eXBldGhlYWx0aC5jb22CF25wLmxpYmVydHlwZXRoZWFs
dGguY29tghR3d3cub2xpdmVmb3JsaWZlLmNvbYIiY21wdWJkb2N1bWVudGV4dC5s
aWJlcnR5bXV0dWFsLmNvbYIsbGFyZ2Vjb21tZXJjaWFsY2xhaW1wb3J0YWwubGli
ZXJ0eW11dHVhbC5jb22CImN1c3RvbS1wcm90ZWN0b3IubGliZXJ0eW11dHVhbC5j
b22CF2Rtc3NlcnZpY2VzMy1yLmxtaWcuY29tghpiZW5lZml0cy5saWJlcnR5bXV0
dWFsLmNvbYIcZXNhbGVzLmxtYi5saWJlcnR5bXV0dWFsLmNvbYIVd3JzLmxpYmVy
dHltdXR1YWwuY29tghlkbXNzZXJ2aWNlcy1zYmF0LmxtaWcuY29tgiNkci13d3cu
bGliZXJ0eW11dHVhbHZhbnRhZ2Vwb3J0LmNvbYImZHItcHVibGljLmxpYmVydHlt
dXR1YWx2YW50YWdlcG9ydC5jb22CJmRyLXNwcHJpdi5saWJlcnR5bXV0dWFsdmFu
dGFnZXBvcnQuY29tgidkci1zcGFkbWluLmxpYmVydHltdXR1YWx2YW50YWdlcG9y
dC5jb22CJGRyLWF1dGgubGliZXJ0eW11dHVhbHZhbnRhZ2Vwb3J0LmNvbYIed2N2
aWRlby5saWJlcnR5bXV0dWFsZ3JvdXAuY29tghd3Y3ZpZGVvLmhlbG1zbWFudHBh
LmNvbYIgdmlkZW8uY2xhaW1zdG91ci5oZWxtc21hbnRwYS5jb22CJnRlc3QtY2li
aWxsZG9jdW1lbnRzLmxpYmVydHltdXR1YWwuY29tgg9zdHVpLnNhZmVjby5jb22C
FXN0dWkucGVlcmxlc3MtaW5zLmNvbYIZc3R1aS5vaGlvY2FzdWFsdHktaW5zLmNv
bYIXc3R1aS5tb250Z29tZXJ5LWlucy5jb22CHXN0dWkubGliZXJ0eW5vcnRod2Vz
dC1pbnMuY29tghtzdHVpLmxpYmVydHltdXR1YWxncm91cC5jb22CFnN0dWkubGli
ZXJ0eW11dHVhbC5jb22CFHN0dWkuaW5kaWFuYS1pbnMuY29tghhzdHVpLmdvbGRl
bmVhZ2xlLWlucy5jb22CHXN0dWkuY29sb3JhZG9jYXN1YWx0eS1pbnMuY29tghlz
dHVpLmFtZXJpY2FmaXJzdC1pbnMuY29tghBzdGVwcy5zYWZlY28uY29tghZzdGVw
cy5wZWVybGVzcy1pbnMuY29tghpzdGVwcy5vaGlvY2FzdWFsdHktaW5zLmNvbYIY
c3RlcHMubW9udGdvbWVyeS1pbnMuY29tgg5zdGVwcy5sbWlnLmNvbYIec3RlcHMu
bGliZXJ0eW5vcnRod2VzdC1pbnMuY29tghxzdGVwcy5saWJlcnR5bXV0dWFsZ3Jv
dXAuY29tghdzdGVwcy5saWJlcnR5bXV0dWFsLmNvbYIVc3RlcHMuaW5kaWFuYS1p
bnMuY29tghlzdGVwcy5nb2xkZW5lYWdsZS1pbnMuY29tgh5zdGVwcy5jb2xvcmFk
b2Nhc3VhbHR5LWlucy5jb22CGnN0ZXBzLmFtZXJpY2FmaXJzdC1pbnMuY29tgidz
YW1sLmxtY2lzc29icm9rZXJkYzIubGliZXJ0eW11dHVhbC5jb22CG3NhZmV0eW5l
dC5saWJlcnR5bXV0dWFsLmNvbYIicHVibGljLnNhZmV0eW5ldC5saWJlcnR5bXV0
dWFsLmNvbYIicG9saWN5aG9sZGVycy5saWJlcnR5bm9ydGh3ZXN0LmNvbYIVb2Jz
Yy5wZWVybGVzcy1pbnMuY29tghlvYnNjLm9oaW9jYXN1YWx0eS1pbnMuY29tghdv
YnNjLm1vbnRnb21lcnktaW5zLmNvbYIdb2JzYy5saWJlcnR5bm9ydGh3ZXN0LWlu
cy5jb22CG29ic2MubGliZXJ0eW11dHVhbGdyb3VwLmNvbYIUb2JzYy5pbmRpYW5h
LWlucy5jb22CHG9ic2MuaGF3a2V5ZXNlY3VyaXR5LWlucy5jb22CGG9ic2MuZ29s
ZGVuZWFnbGUtaW5zLmNvbYIdb2JzYy5jb2xvcmFkb2Nhc3VhbHR5LWlucy5jb22C
GW9ic2MuYW1lcmljYWZpcnN0LWlucy5jb22CF215bGliZXJ0eWNvbm5lY3Rpb24u
Y29tgiJsaWJlcnR5bW1odGFibGVzLmxpYmVydHltdXR1YWwuY29tgiRpY2FzZW1h
bmFnZXJzZWN1cmUubGliZXJ0eW11dHVhbC5jb22CD2hlbG1zbWFudHBhLmNvbYIf
ZGVtby1yaXNrdHJhYy5saWJlcnR5bXV0dWFsLmNvbYIaY2xhaW1zZWZ0LnBlZXJs
ZXNzLWlucy5jb22CHmNsYWltc2VmdC5vaGlvY2FzdWFsdHktaW5zLmNvbYIcY2xh
aW1zZWZ0Lm1vbnRnb21lcnktaW5zLmNvbYIgY2xhaW1zZWZ0LmxpYmVydHltdXR1
YWxncm91cC5jb22CGWNsYWltc2VmdC5pbmRpYW5hLWlucy5jb22CIWNsYWltc2Vm
dC5oYXdrZXllc2VjdXJpdHktaW5zLmNvbYIdY2xhaW1zZWZ0LmdvbGRlbmVhZ2xl
LWlucy5jb22CImNsYWltc2VmdC5jb2xvcmFkb2Nhc3VhbHR5LWlucy5jb22CHmNs
YWltc2VmdC5hbWVyaWNhZmlyc3QtaW5zLmNvbYIhY2liaWxsZG9jdW1lbnRzLmxp
YmVydHltdXR1YWwuY29tgh9idXNpbmVzcy5saWJlcnR5bXV0dWFsZ3JvdXAuY29t
ghdiaWxsaW5naW5xdWlyeS5sbWlnLmNvbYInYXV0aC5sbWNpc3NvYnJva2VyZGMy
LmxpYmVydHltdXR1YWwuY29tgiZhcHAubG1jaXNzb2Jyb2tlcmRjMi5saWJlcnR5
bXV0dWFsLmNvbYIbYW5hbHl0aWNzLmxpYmVydHltdXR1YWwuY29tgg1hZi5zYWZl
Y28uY29tghNhZi5wZWVybGVzcy1pbnMuY29tghdhZi5vaGlvY2FzdWFsdHktaW5z
LmNvbYIVYWYubW9udGdvbWVyeS1pbnMuY29tghthZi5saWJlcnR5bm9ydGh3ZXN0
LWlucy5jb22CGWFmLmxpYmVydHltdXR1YWxncm91cC5jb22CFGFmLmxpYmVydHlt
dXR1YWwuY29tghJhZi5pbmRpYW5hLWlucy5jb22CFmFmLmdvbGRlbmVhZ2xlLWlu
cy5jb22CG2FmLmNvbG9yYWRvY2FzdWFsdHktaW5zLmNvbYIXYWYuYW1lcmljYWZp
cnN0LWlucy5jb20wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMGEGA1UdIARaMFgwVgYGZ4EMAQICMEwwIwYI
KwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsGAQUFBwICMBkM
F2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9gz2GQVd+EQxSK
YCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5zeW1jYi5jb20v
c3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL3NzLnN5
bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcnQw
ggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AN3rHSt6DU+mIIuBrYFocH4ujp0B
1VyIjT0RxM227L7MAAABX5hpS70AAAQDAEYwRAIgZb91Ugi29EYZxO7Mis/L5jIi
hXq5dyWapOwBTBYXhNwCIDNR0xgPceP/W997+duI36rmM2QCYb7yELz7rkQpK7rD
AHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFfmGlL7QAABAMA
RzBFAiAryR8zSjTYKLVN13mofjo9iwF6cJa1Ht1W/1TJDCPByQIhAKYr3HLp8L3f
6XF6F2n6u19WYQFX/YCMzVslPKTpNt4+AHcA7ku9t3XOYLrhQmkfq+GeZqMPfl+w
ctiDAMR7iXqo/csAAAFfmGlOcAAABAMASDBGAiEAu6TjZJUSiQOfGbLPUhjICPFq
dNUHltbdL0M8a3/gRDcCIQDekDoimx40GOW805e3lkJuIKY4APTe0J9iKbqjkDdM
sDANBgkqhkiG9w0BAQsFAAOCAQEAE9xzsMmmJuxZdH+evAKIQsZQ5Tm5YCyLQFj0
vbVziJmC8N39g5AG1ALp4sEWDBfJPXkLsnUheUI6w7BfI5JQpXYoUpfF/h/GUTTh
qKcF8FtcJHWQplcoc8dcKNojvg56bBm+hlzKtlW2vS9nBbM2TZXHhjUcSPO1EfbL
H8NW6C9Rk0CTUX2RRZRWPXGpYXgeMaWuxjxfOdx6L7Uwz0MAjdHIGewuLEPlmnbr
7AyL3UT7L3lWIhhxyD+FWe0MxH+pX6GXBsx5kORYIyjHdHG2oEdjNB+Ok0dzQtfY
Yy2VBdToP9arm8BJkUHj5lSMKnTRdYGermU3hgfcuwGRwN7+1A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HhP9MzUyK8cCAVK/9mb
UIm2yDytAS8hZY7t56Tc0kOij53dIJOGtXCFciOfZpTS71C4IyPeY/9rnO2R2O7+
B5+Y86Z0/VFHBAP0EKccczT6SDMNJ1KaOr92eZZ/52w9Jr1JD3YruTToZpVL+dbl
cWxu5IyfDhzihG6vqlXfz0pJmfR9CdOf8M9/0ac3a97Z4qSLGH10bTG1441UTEUE
Q5lsXLl+PnwQia1dQT4Fc+859GhACHl/o9XjIS1NJ6efwtvE5rPuqrB6RSYHgzw4
4Yw5pos3lK1cGEldU5EEiw/hy9D5v0Tfyi2loDOcNTLvtNUcGRS8NcU/2/vLnc8p
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47660880206160788317839764119130862018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'af.libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26316895653614156405432491242675483187483050758277061119649991922161611618658540683246517310782110703969136998309981547894802828478968345445031147406468557060456867648145497210528615083850176116469388047040171564647868703162032045968085709923782508383649111510221218742193300307900255385114134337865295668211710667061315191912489979162776423062647153700709120847895562431460287731404590903210644789867594959150219324563893258023537097910423634811765209571496396306244219501962038800630675388482239203065116282472797816190783741658176611541511756913612392605189336093282150069992128984102296278410523283152417028254169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2696 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-risktracresources.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertypethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commercialclaimdocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertypethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np.libertypethealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oliveforlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmpubdocumentext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'largecommercialclaimportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custom-protector.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsservices3-r.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'benefits.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esales.lmb.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wrs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmsservices-sbat.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-sppriv.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-spadmin.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcvideo.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video.claimstour.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saml.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.safetynet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cibilldocuments.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.lmcissobrokerdc2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analytics.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f98694bbd0000040300463044022065bf755208b6f44619c4eecc8acfcbe63222857ab977259aa4ec014c161784dc02203351d3180f71e3ff5bdf7bf9db88dfaae633640261bef210bcfbae44292bbac3007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f98694bed000004030047304502202bc91f334a34d828b54dd779a87e3a3d8b017a7096b51edd56ff54c90c23c1c9022100a62bdc72e9f0bddfe9717a1769fabb5f56610157fd808ccd5b253ca4e936de3e007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015f98694e700000040300483046022100bba4e364951289039f19b2cf5218c808f16a74d50796d6dd2f433c6b7fe04437022100de903a229b1e3418e5bcd397b796426e20a63800f4ded09f6229baa390374cb0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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