test-www.libertyiu.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 34:9a:90:9a:57:d3:2c:9d:be:67:23:ce:41:07:46:15 was issued on by Symantec Corporation.

With 62 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Global Specialties
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 34:9a:90:9a:57:d3:2c:9d:be:67:23:ce:41:07:46:15
Serial Number (int): 69922402392330431779420449109508048405
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 34:f1:9f:10:c5:0f:96:45:1d:f3:1d:06:da:27:e7:79:9b:5b:aa:73
Fingerprint (sha256): 3c:a6:be:25:4c:22:71:f9:61:c6:84:1f:f2:9a:5c:7e:62:fb:2c:fd:9f:46:34:61:b1:95:0d:e3:80:2e:f8:53

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate test-www.libertyiu.com

62

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-www.libertyiu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.yourliberty.fr
www-uat.liucanada.lmig.com
www-uat.liu-usa.lmig.com
www-uat.libertyinternational.com
uat.liupal.com
uat.liucargo.com
uat.liu-eil.com
uat-www.liu-latinamerica.com
uat-agents.libertymutualsurety.com
tst-www.lms.ae-libertyiu.com
tst-www.liurisk.com
tst-www.liu-usa.com
tst-www.liu-latinamerica.com
tst-www.libertysegurosperu.com
tst-www.ae-libertyiu.com
tst-agents.libertymutualsurety.com
trn-qiservicing.libertymutualsurety.com
trn-qi.libertymutualsurety.com
testing.liuquote.com.au
test.primerofianzas.info
test.liuquote.ie
test-www.libertyiu.com
test-serf.libertyfianzas.com
test-qiservicing.libertymutualsurety.com
test-qi.libertymutualsurety.com
test-ofacpayment.libertymutual.com
test-lmsuretyext.libertymutual.com
test-execute.lmig.com
test-bfl.libertymutualsurety.com
test-accidenthealth.libertyiu.com.au
staging-bonds.libertymutualsurety.com
stage-qiservicing.libertymutualsurety.com
stage-qi.libertymutualsurety.com
stage-ofacpayment.libertymutual.com
stage-bfl.libertymutualsurety.com
sme2uat.liuquote.com
sme1uat.liuquote.com
qa-qiservicing.libertymutualsurety.com
qa-qi.libertymutualsurety.com
ps-qi.libertymutualsurety.com
ps-bfl.libertymutualsurety.com
perf-www.lms.ae-libertyiu.com
perf-www.liurisk.com
perf-www.liucanada.com
perf-www.liu-usa.com
perf-www.liu-latinamerica.com
perf-www.libertysegurosperu.com
perf-www.ae-libertyiu.com
perf-qiservicing.libertymutualsurety.com
perf-qi.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-agents.libertymutualsurety.com
passport-test.lmig.com
mkt-qiservicing.libertymutualsurety.com
mkt-qi.libertymutualsurety.com
int-www.liurisk.com
drp.primerofianzas.info
dev-ofacpayment.libertymutual.com
dev-execute.lmig.com
dev-bfl.libertymutualsurety.com
cloudmonitor-test-www.libertyiu.com
bfl.qa.libertymutualsurety.com

Other certificates including the domain name libertyiu.com

(limited to 100 certificates)
storagetanks.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-03p.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
cs-pool-03k.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmsip-hlyncf01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
sip-kdc-03.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
secure.libertyiu.com
sip-pdc-03.libertymutual.com
secure.libertyiu.com
cswebext-pool-02p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
connect.libertyiu.com
cswebext-pool-03p.libertymutual.com
access-kdc-02.libertymutual.com
int-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
cms.libertyiu.com
test-www.libertyiu.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
isoresponse.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
us-extranet.libertyiu.com
test-www.libertyiu.com
pdc-vpn-01.libertyiu.com
test-www.libertyiu.com
cswebext-pool-03p.libertymutual.com
mail-na.lm.lmig.com
uk-secure.libertyiu.com
Cs-pool-03p.lm.lmig.com
test-www.libertyiu.com
cs-pool-02p.lm.lmig.com
cs-pool-02p.lm.lmig.com
cas-pdc.lm.lmig.com
cas-pdc.lm.lmig.com
uk-secure.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
secure.libertyiu.com
Cs-pool-03k.lm.lmig.com
www.libertyiu.com
connect.libertyiu.com
secure.libertyiu.com
webmail-ap.libertyiu.com
eu-access-01.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
storagetanks.libertyiu.com
vmsip-hsfbfe01.lm.lmig.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
vmqip-hlyncf01.lm.lmig.com
www.libertyiu.com
www.libertyiu.com
cswebext-pool-02p.libertymutual.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
eu-pool-02.lm.lmig.com
test-www.libertyiu.com
sip-kdc-03.libertymutual.com
test-www.libertyiu.com
storagetanks.libertyiu.com
mail-na.lm.lmig.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
cs-pool-02k.lm.lmig.com
cswebext-pool-03k.libertymutual.com
us-mdm.libertyiu.com
int-www.libertyiu.com
www.libertyiu.com
cs-pool-02k.lm.lmig.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for test-www.libertyiu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMVzCCCz+gAwIBAgIQNJqQmlfTLJ2+ZyPOQQdGFTANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE3MDkxMzAwMDAwMFoX
DTE5MDQzMDIzNTk1OVowgZcxCzAJBgNVBAYTAlVTMRYwFAYDVQQIDA1OZXcgSGFt
cHNoaXJlMRMwEQYDVQQHDApQb3J0c21vdXRoMR0wGwYDVQQKDBRMaWJlcnR5IE11
dHVhbCBHcm91cDEbMBkGA1UECwwSR2xvYmFsIFNwZWNpYWx0aWVzMR8wHQYDVQQD
DBZ0ZXN0LXd3dy5saWJlcnR5aXUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxYg+gwPvYXcrGH3+3h7v42kfa+QqlPUMPafmqo5+xwF14rSQBmi9
s9ELbgkonygBD3LfapL/tWptTo87ZscAli6pbPhHWxbUDyKTJ7bAwZINfoQXaaea
VNRFbFKIFEQGVRcmY2wTz/Gu5EgQxEQ6Gi/IO+davOxtBqllxbJx1dThx6p99K++
gsq6E4kcN6wPQ8ICEVucpROtVIiejFFKULZ4QuePQDz5fZMTOrn4ZTcYVL5XxI5Q
6J7owweT9Nwf8cRJlI9JcGG3ZyXJenFajaTAtaSd2Z6YECpPXAXjbB+73dP8qqmL
j8wIJ/kSADgjpIqrleKwpBvA0ulzUPPASQIDAQABo4IItTCCCLEwggdUBgNVHREE
ggdLMIIHR4ISd3d3LnlvdXJsaWJlcnR5LmZyghp3d3ctdWF0LmxpdWNhbmFkYS5s
bWlnLmNvbYIYd3d3LXVhdC5saXUtdXNhLmxtaWcuY29tgiB3d3ctdWF0LmxpYmVy
dHlpbnRlcm5hdGlvbmFsLmNvbYIOdWF0LmxpdXBhbC5jb22CEHVhdC5saXVjYXJn
by5jb22CD3VhdC5saXUtZWlsLmNvbYIcdWF0LXd3dy5saXUtbGF0aW5hbWVyaWNh
LmNvbYIidWF0LWFnZW50cy5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIcdHN0LXd3
dy5sbXMuYWUtbGliZXJ0eWl1LmNvbYITdHN0LXd3dy5saXVyaXNrLmNvbYITdHN0
LXd3dy5saXUtdXNhLmNvbYIcdHN0LXd3dy5saXUtbGF0aW5hbWVyaWNhLmNvbYIe
dHN0LXd3dy5saWJlcnR5c2VndXJvc3BlcnUuY29tghh0c3Qtd3d3LmFlLWxpYmVy
dHlpdS5jb22CInRzdC1hZ2VudHMubGliZXJ0eW11dHVhbHN1cmV0eS5jb22CJ3Ry
bi1xaXNlcnZpY2luZy5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIedHJuLXFpLmxp
YmVydHltdXR1YWxzdXJldHkuY29tghd0ZXN0aW5nLmxpdXF1b3RlLmNvbS5hdYIY
dGVzdC5wcmltZXJvZmlhbnphcy5pbmZvghB0ZXN0LmxpdXF1b3RlLmllghZ0ZXN0
LXd3dy5saWJlcnR5aXUuY29tghx0ZXN0LXNlcmYubGliZXJ0eWZpYW56YXMuY29t
gih0ZXN0LXFpc2VydmljaW5nLmxpYmVydHltdXR1YWxzdXJldHkuY29tgh90ZXN0
LXFpLmxpYmVydHltdXR1YWxzdXJldHkuY29tgiJ0ZXN0LW9mYWNwYXltZW50Lmxp
YmVydHltdXR1YWwuY29tgiJ0ZXN0LWxtc3VyZXR5ZXh0LmxpYmVydHltdXR1YWwu
Y29tghV0ZXN0LWV4ZWN1dGUubG1pZy5jb22CIHRlc3QtYmZsLmxpYmVydHltdXR1
YWxzdXJldHkuY29tgiR0ZXN0LWFjY2lkZW50aGVhbHRoLmxpYmVydHlpdS5jb20u
YXWCJXN0YWdpbmctYm9uZHMubGliZXJ0eW11dHVhbHN1cmV0eS5jb22CKXN0YWdl
LXFpc2VydmljaW5nLmxpYmVydHltdXR1YWxzdXJldHkuY29tgiBzdGFnZS1xaS5s
aWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIjc3RhZ2Utb2ZhY3BheW1lbnQubGliZXJ0
eW11dHVhbC5jb22CIXN0YWdlLWJmbC5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIU
c21lMnVhdC5saXVxdW90ZS5jb22CFHNtZTF1YXQubGl1cXVvdGUuY29tgiZxYS1x
aXNlcnZpY2luZy5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIdcWEtcWkubGliZXJ0
eW11dHVhbHN1cmV0eS5jb22CHXBzLXFpLmxpYmVydHltdXR1YWxzdXJldHkuY29t
gh5wcy1iZmwubGliZXJ0eW11dHVhbHN1cmV0eS5jb22CHXBlcmYtd3d3Lmxtcy5h
ZS1saWJlcnR5aXUuY29tghRwZXJmLXd3dy5saXVyaXNrLmNvbYIWcGVyZi13d3cu
bGl1Y2FuYWRhLmNvbYIUcGVyZi13d3cubGl1LXVzYS5jb22CHXBlcmYtd3d3Lmxp
dS1sYXRpbmFtZXJpY2EuY29tgh9wZXJmLXd3dy5saWJlcnR5c2VndXJvc3BlcnUu
Y29tghlwZXJmLXd3dy5hZS1saWJlcnR5aXUuY29tgihwZXJmLXFpc2VydmljaW5n
LmxpYmVydHltdXR1YWxzdXJldHkuY29tgh9wZXJmLXFpLmxpYmVydHltdXR1YWxz
dXJldHkuY29tgiBwZXJmLWJmbC5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIjcGVy
Zi1hZ2VudHMubGliZXJ0eW11dHVhbHN1cmV0eS5jb22CFnBhc3Nwb3J0LXRlc3Qu
bG1pZy5jb22CJ21rdC1xaXNlcnZpY2luZy5saWJlcnR5bXV0dWFsc3VyZXR5LmNv
bYIebWt0LXFpLmxpYmVydHltdXR1YWxzdXJldHkuY29tghNpbnQtd3d3LmxpdXJp
c2suY29tghdkcnAucHJpbWVyb2ZpYW56YXMuaW5mb4IhZGV2LW9mYWNwYXltZW50
LmxpYmVydHltdXR1YWwuY29tghRkZXYtZXhlY3V0ZS5sbWlnLmNvbYIfZGV2LWJm
bC5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbYIjY2xvdWRtb25pdG9yLXRlc3Qtd3d3
LmxpYmVydHlpdS5jb22CHmJmbC5xYS5saWJlcnR5bXV0dWFsc3VyZXR5LmNvbTAJ
BgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwYQYDVR0gBFowWDBWBgZngQwBAgIwTDAjBggrBgEFBQcCARYXaHR0
cHM6Ly9kLnN5bWNiLmNvbS9jcHMwJQYIKwYBBQUHAgIwGQwXaHR0cHM6Ly9kLnN5
bWNiLmNvbS9ycGEwHwYDVR0jBBgwFoAUX2DPYZBV34RDFIpgKrL1evRDGO8wKwYD
VR0fBCQwIjAgoB6gHIYaaHR0cDovL3NzLnN5bWNiLmNvbS9zcy5jcmwwVwYIKwYB
BQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRwOi8vc3Muc3ltY2QuY29tMCYGCCsG
AQUFBzAChhpodHRwOi8vc3Muc3ltY2IuY29tL3NzLmNydDATBgorBgEEAdZ5AgQD
AQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0+swu53cqPG6WO629KwZVPh/1gL
kRo4+fCHEeka+zmZREuhQqRdkfhdhKPc0edDMmAnfHVO5zBu6exai/ryTAqMOlfe
6mK/Jtq/E31436I/+HqB1xaIY0yfVbbIwB9MUIzlIf4O6dJC0AppfxyLevpZPN4H
3gOOfT+9vzr18zRJf65WD4IOkrHmuz2O4hvNzojuYETvN7wA0gWekYUHFZ3tGFvI
514ACs5x4ASHycvEF1alHKio/R8znWCvmURrHa/vE0RSB5/ykBBf2RqxLweqte4u
JJhEwh1kNh3KNTKqOPMnvfoIdQ8zbWSInQMMtPzU53kuL5p57xymltp4RQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYg+gwPvYXcrGH3+3h7v
42kfa+QqlPUMPafmqo5+xwF14rSQBmi9s9ELbgkonygBD3LfapL/tWptTo87ZscA
li6pbPhHWxbUDyKTJ7bAwZINfoQXaaeaVNRFbFKIFEQGVRcmY2wTz/Gu5EgQxEQ6
Gi/IO+davOxtBqllxbJx1dThx6p99K++gsq6E4kcN6wPQ8ICEVucpROtVIiejFFK
ULZ4QuePQDz5fZMTOrn4ZTcYVL5XxI5Q6J7owweT9Nwf8cRJlI9JcGG3ZyXJenFa
jaTAtaSd2Z6YECpPXAXjbB+73dP8qqmLj8wIJ/kSADgjpIqrleKwpBvA0ulzUPPA
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 69922402392330431779420449109508048405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Global Specialties'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-www.libertyiu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24936130590744788466453369670538500225339809872620746389213889367979076275012384019432716977689766573034055701592397020990846694140429227362234663541209987710252611550632042722305640245611813234646798424757217443218842836834931169103004395422875483877097979428755234872437815698748731256800560872694392635455595571451310952357877787857467024429616058588684574295218246508226331224982111375487593259788885543786491703374441390799299736978221857249505998689240294092059479117381968102191051294315010465347523133128607621822466091321665825688366006671568147479669825708079717797925680070273817947892305223433956673962057
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1867 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yourliberty.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.liucanada.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.liu-usa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.libertyinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertysegurosperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.liuquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.liuquote.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-lmsuretyext.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-execute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-accidenthealth.libertyiu.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-bonds.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme2uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sme1uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.libertysegurosperu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mkt-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-www.liurisk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drp.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-ofacpayment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-execute.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-www.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bfl.qa.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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