libertymutual.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 7a:a8:72:54:d6:20:3a:fd:65:59:27:09:ff:87:15:6f was issued on by Symantec Corporation.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Liberty International
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7a:a8:72:54:d6:20:3a:fd:65:59:27:09:ff:87:15:6f
Serial Number (int): 163040440274122811324070953705135347055
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): e2:32:08:48:b2:22:f8:83:d7:da:c5:86:b3:32:b7:90:12:46:aa:bc
Fingerprint (sha256): 3b:95:f9:27:8e:5b:c7:f2:53:38:fa:c2:9d:62:82:0f:70:3d:6e:1b:41:60:29:19:8f:00:90:74:85:b2:f2:b5

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate libertymutual.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meuespaco.aliroseguro.com.br
www.liberty-insurance.ie
www2.libertyseguros.com.br
www2.indiana.com.br
www.quinn-insurance.com
www.quinn-direct.co.uk
www.portaldesegurosliberty.com.br
www.mediedge.com
www.lmgpacific.com
www.liil.com.hk
www.libertyweb.com.br
www.libertyseguros.com.br
www.libertymutual.com.hk
www.libertyinternational.com.hk
www.libertyinsuranceni.co.uk
www.libertyinsurance.com.vn
www.libertyinsurance.com.sg
www.libertyinsurance.com.hk
www.liberty.ec
www.liberty.cl
www.indiananet.com.br
www.indiana.com.br
www.genesis.es
windscreencover.quinn-direct.com
windscreencover.libertyinsurance.ie
webmail1.libertyseguros.com.br
webcalcauto.indiana.com.br
wct.libertyseguros.com.br
vp.libertyseguros.com.br
transporte.libertyseguros.com.br
tools.libertyseguros.com.br
social.libertyseguros.com.br
sip.indiana.com.br
siniestros.pentagenerales.cl
seguroonline.libertyseguros.com.br
securequotes.libertyinsurance.ie
quotes.libertyinsurance.ie
printprod.lmginsurance.co.th
portalmarketing.libertyseguros.com.br
portalintegracao.libertyseguros.com.br
pivote.liberty.ec
personallines.libertyseguros.com.br
paymentclient.payments.sg.lmig.com
paymentcallbackcybs.payments.sg.lmig.com
online.libertyinsurance.com.sg
onelink.libertyinsurance.com.sg
novomeuespaco.libertyseguros.com.br
novoinstitucional.libertyseguros.com.br
newsel.libertyseguros.com.br
meuespacocorretor.libertyseguros.com.br
meuespaco.libertyseguros.com.br
m2.libertyseguros.com.br
lms.libertyseguros.com.br
livechat.libertyinsurance.com.vn
libertymutual.com.hk
libertymutual.com
libertylinks.ie
libertyinternational.com.hk
libertyinsurance.com.sg
liberty.ec
lbis-poi.lmginsurance.co.th
imobiliario.libertyseguros.com.br
extranet.libertyseguros.com.br
emissao.libertyseguros.com.br
ebiz5.lmginsurance.co.th
ebiz4.lmginsurance.co.th
ebiz3.lmginsurance.co.th
ebiz2.lmginsurance.co.th
dw.indiana.com.br
cotador.libertyseguros.com.br
corporativo.libertyseguros.com.br
connectapp.libertyseguros.pt
connect.libertyseguros.pt
commerciallines.libertyseguros.com.br
clientes.libertyseguros.pt
chat.libertyseguros.com.br
chat.indiana.com.br
callmeback.libertyinsurance.ie
av.indiana.com.br
autos.liberty.ec
autodiscover.lmginsurance.co.th
affinitydr.libertyseguros.com.br
adselfservice.libertyseguros.pt

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBe/Ej4fyr5YBJ8KCXYN
A4QI4GVADMgnEMn7v/WWCtT3W9F4TYjqgYXlu4mm6dU8rMsmmMQoaTOdT1BHM2TF
9xgZ+D4jbHYDwlPQBBxnLjBwYtChXWVUaEoRx/Nyar2X8+MBTXfs75iPBJTR/Dcc
JUf6jUk7ya8l9DpDF4PUzsDDAP4HljTPkX2pHr6fgVW1gxxYMW8pdV01UbrbR4aq
pLODI4g/P8HRxUSlQHgbtF92ZY8ACqkaPukH789nladuuUz/cJyaO65lZKEvo7Lf
2rCa1N9t5V/cvXhC0HnH79DAzr6gPoL+b2+8uH8sKMgMf0OEzBjBZPFIcnPJx8t4
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 163040440274122811324070953705135347055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25259370765728902962998754265100318897394144446106156768302097676188036851584829123163054289167607404393365970866501385276149422202162261294714470202009508988478574095425355158901948653809920744683503287823010723939504864694118247990256196251768725662645294517688678161485755271806866689751538083908279084029072678045614534474610141473059998535867321008755382552747717095928454072995987942050836354298039559270428822561719830160838892722526215031197395575579814580408926657156328049655699905902014315315736261203142790114999485394712988012185337000531304698092342894573592779511099849464705626784193470105139406403817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2349 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespaco.aliroseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty-insurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quinn-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quinn-direct.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldesegurosliberty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmgpacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liil.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsuranceni.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiananet.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windscreencover.quinn-direct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windscreencover.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail1.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcalcauto.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wct.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vp.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transporte.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siniestros.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroonline.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securequotes.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printprod.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalmarketing.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalintegracao.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pivote.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personallines.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymentclient.payments.sg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paymentcallbackcybs.payments.sg.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelink.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novomeuespaco.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novoinstitucional.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsel.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespacocorretor.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespaco.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livechat.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylinks.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis-poi.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobiliario.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emissao.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz5.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz4.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz3.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz2.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dw.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotador.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporativo.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectapp.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerciallines.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callmeback.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autos.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitydr.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adselfservice.libertyseguros.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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