libertycerts.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 59:ce:36:65:d5:a9:26:ff:f4:4c:99:be:ae:a9:c0:36 was issued on by Entrust, Inc..

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:ce:36:65:d5:a9:26:ff:f4:4c:99:be:ae:a9:c0:36
Serial Number (int): 119372008096003498037728174607373549622
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d3:d2:2e:fd:aa:6e:6e:2f:c4:35:94:4f:5f:a9:9f:a8:af:13:60:58
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 15:21:b1:49:e8:ad:46:00:d4:75:9c:17:e8:b4:f0:ef:68:cf:09:9a
Fingerprint (sha256): 3f:ed:d6:13:a0:ce:e8:35:8d:6f:86:8e:31:a2:ef:ee:05:50:86:2d:c2:f5:c0:33:e0:87:fe:35:1e:b0:2d:06

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate libertycerts.com.sg

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertycerts.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libertycerts.com.sg
claimportal-api.libertymutualsurety.com
grs-billing-parallel.lmig.com
claimportal.libertymutualsurety.com
www.contratafianza.libertyfianzas.com
www.libertyseguros.com.pr
www.libertyseguros.com.mx
libertyseguros.com.pr
libertyseguros.com.mx
libertyfianzas.com
borgonline.be
borgonline.nl
nationaleborgre.com
assets.liuasiapacific.com
assets.libertyspecialtymarketsap.com
www.liumalaysia.com.my
liumalaysia.com.my
www.liuhongkong.com.hk
liuhongkong.com.hk
www.liusingapore.com.sg
liusingapore.com.sg
www.liuaustralia.com.au
liuaustralia.com.au
liuasiapacific.com
www.liuasiapacific.com
www.policydocumentation.liuaustralia.com.au
policydocumentation.liuaustralia.com.au
www.libertyspecialtymarkets.com.my
libertyspecialtymarkets.com.my
www.libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.sg
www.libertyspecialtymarkets.com.sg
policydocumentation.libertyspecialtymarkets.com.au
www.policydocumentation.libertyspecialtymarkets.com.au
libertyspecialtymarkets.com.au
www.libertyspecialtymarkets.com.au
media.libertyspecialtymarketsap.com
www.libertyspecialtymarketsap.com
libertyspecialtymarketsap.com
nationaleborg.net
www.nationaleborgre.com
nationaleborg.uk
nationaleborg.org
nationaleborg.lu
nationaleborg.fr
nationaleborg.eu
nationaleborg.de
nationaleborg.co.uk
nationaleborg.com
www.nationaleborg.be
www.nationaleborg.nl
nationaleborg.be
nationaleborg.nl
www.nationaleborg.com
www.borgonline.be
www.borgonline.nl
serf.aws.libertyfianzas.com
liu-latinamerica.com
naymu.libertymutual.com
www.libertyspecialtymarketslatam.com
libertyspecialtymarketslatam.com
authorization-policy-api-production.lmig.com
globalclaimcenter-batch.lmig.com
www.libertyassemble.ca
libertyassemble.ca
www.business.libertymutual.com
business.libertymutual.com
agents.libertymutualsurety.lmig.com
DR.libertyquote.com.au
DR.libertycargo.com.au
libertymutualsurety.nl
libertymutualsurety.be
www.libertymutualsurety.nl
www.libertymutualsurety.be
www.lsmcert.com
www.libertycerts.com.sg
lsmcert.com

Other certificates including the domain name libertycerts.com.sg

(limited to 100 certificates)
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg

Certificate

The complete raw certificate details for libertycerts.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhOos0nsj0DDvlgxk5oA
bB97/8s/YEnbLuglPg1+kbyAdcn2W3dCqmkjkn/rKPkfFYvnanyo2/Ja34mU+e3t
ktMVybHn6jIUE966mr6SeeTsDojnDtXq/PRAUB0OXDVKEarczM/vwctPcUNNcVcZ
0OR8OO72jSjCf4sTWTuZFK7R0pNfhCoKkthfGob0CyYiHIIITAKWRzHOh++35FbN
ewdeo5Ku7w4R3ADg8BsICULodQeAX/qiv6ujKxPNckY2AkGnA92PNZBEBTHO8Rgx
BD7NNULiG0GZIxSrF6kZs8nVcDEro1RHMsLFK636xu3NRzM/A3g8t7ZvoypEaPOq
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 119372008096003498037728174607373549622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 12:36:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-28 12:36:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertycerts.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26014785030179321938697862707482548596512322429998135537215982650187528097102049297055373193142363699013054604990514935693139800785564707108379131299005407629212779672375051282296789210239603881555176191535646001332900161835880619899614173531769064379472550044098709835186797235692706121182934008705382597845030598048626922678258851551500583100981998652279391338955490942573238361023762432154169695783346104352129565699647638694731888160595063251467706207168510076752502940016010062862828008552863758299375067499091770908812337550204666889560575276511096072802439667092080720356209257946570354570696674599122641332829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3d22efdaa6e6e2fc435944f5fa99fa8af136058
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal-api.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-billing-parallel.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmcert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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