perf-www.liucanada.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 18:16:75:8a:7f:2c:51:47:4c:d2:26:e4:67:07:55:0e was issued on by Entrust, Inc..

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 18:16:75:8a:7f:2c:51:47:4c:d2:26:e4:67:07:55:0e
Serial Number (int): 32018086444493974181750568844226155790
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 7f:f3:5e:01:51:e4:df:d0:6f:ad:7c:24:9d:48:53:48:01:93:d6:0b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e6:f9:2a:0d:10:a3:2d:bc:f6:37:e9:bf:2d:ee:c5:12:d5:24:f6:54
Fingerprint (sha256): 41:26:18:ae:af:0f:6d:93:7a:e4:81:b7:a1:75:04:c4:e9:97:da:d4:e4:66:bb:89:e4:64:e0:6f:2d:4c:96:c8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate perf-www.liucanada.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf-www.liucanada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf-www.liucanada.com
icomp-np.eberlevivian.com
manuscript-dev.lmig.com
auth0-ecr-poc.lmauth.com
clientes.test-sofia.libertyfianzas.com
passport-test.lmig.com
perf-agents.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-qi.libertymutualsurety.com
perf-www.ae-libertyiu.com
perf-www.liu-usa.com
perf-www.lms.ae-libertyiu.com
ps-bfl.libertymutualsurety.com
ps-qi.libertymutualsurety.com
qa-qi.libertymutualsurety.com
qa-qiservicing.libertymutualsurety.com
test.primerofianzas.info
uat-www.liu-latinamerica.com
uat.liu-eil.com
uat.liucargo.com
dev2-lfanalytics.aws.lmig.com
uat-agents.libertymutualsurety.com
dev-www.liuquote.com
test-mstr.libertyfianzas.com
test-www.libertyfianzas.com
staging.helmsmantpa.com
test.helmsmantpa.com
unqork-ironshore.lmig.com
archivus.lmig.com
dev-marinecargo.liuquote.com
DEV.liuquote.com
DEV-libertycargo.liuquote.com
uat.libertyquote.ca
dev.eventsatlibertymutual.com
DEV.libertyquote.com.au
dev.libertycargo.com.au
csobooking-develop.lmig.com
csobooking-staging.lmig.com
dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
globalclaimcenter-batch-sit1-cloud.lmig.com
tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
dev-sofia.libertyfianzas.com
uat-wcclaims.iso.lmig.com
sit.libertymutualcargo.com
perf-wcclaims.iso.lmig.com
globalclaimcenter-batch-uat-cloud.lmig.com
dev.libertymutualprovidersupport.com
test-surety-ip-bie-intake.lmig.com
dev-serf.aws.libertyfianzas.com
test-icasemanager-ext-ping.lmig.com
hold-test-icasemanagersecure.libertymutual.com
UAT-Cloud.libertymutualcargo.com
devnaymu.libertymutual.com
authorization-policy-api-development.lmig.com
testnaymu.libertymutual.com
authorization-policy-api-test.lmig.com
test-serf.aws.libertyfianzas.com
test-www.borgonline.nl
grs-lsm-auth0-external-web-site.lmig.com
testing.libertyspecialtymarkets.com.au
test-validador.libertyfianzas.com
www.test-contratafianza.libertyfianzas.com
sit-www.libertylink.co.uk
staging-seguro-garantia.libertyseguros.com.br
test-cotizador.libertyfianzas.com
staging-agents.libertymutualsurety.com
grs-portal-redirect-staging.libertymutual.com
staging-enroll.libertymutualsurety.com
uat-agents-surety.libertymutual.com
testing.libertyspecialtymarketsap.com
tst-enroll.libertymutualsurety.com
authorization-policy-api-training.lmig.com
csobooking-development.lmig.com
auth0.libertymutual.com
test.review.id3e.lmig.com
offices-surety-performance.lmig.com
algds-staging-gem.lmig.com
dev.review.id3e.lmig.com
np-venti-console.lmig.com
test.libertyfianzas.com
test-serf-login.libertyfianzas.com
ibnr-development.lmig.com
ibnr-test.lmig.com
b2b-usmarine-sit.liuquote.com
fcr-dat-dev.lmig.com
b2b-usmarine-uat.liuquote.com
imap-dev.lmig.com
cauat.liupal.com
orcauat.liuquote.com
usuat.liucargo.com
test-sofia.libertyfianzas.com
fluid-pre-production.lmig.com
hold-perf-demo-risktrac.libertymutual.com

Other certificates including the domain name liucanada.com

(limited to 100 certificates)
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
tst-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
tst-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for perf-www.liucanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXh+PkzFlgI5vGpqH2QC
KExky9oFK03CPDI6tr2bgPdRWCdmjmpgv58oczpYWLHHiWOLPDT3/DoLlks0Hozv
KvGKp7UOU4fTdIVLK9q4eAtsN5xjfHWdL4C0x/QiiULhXdYpJDclE2DKijPrKVeO
0kak0X69KJ0OkKw2Rd8kU+pEkvWVgijIiKDe8j09MinGrTBvHRc2ao/YegjJdiCe
tekzKCI1ioeALLMvByeg3+SxFevGs6eitOw0FDiWD/ljO2+eQqUHMD+BmC6thqxA
UlD5X7eOo1wVHVfewgxFw3NgN7Jr+RW7TfzV7f/exF6Nd/IPzUse+JYO2pWH+OGs
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32018086444493974181750568844226155790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 12:57:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-14 12:57:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf-www.liucanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23413503799644364417487016847862241679341105126203473032769194880127683125161375449942507567876280672982056233615013161770138717065681178051437390962959532385621473151338541047475764950458090370967726170739759817360004233179464837559447043935877998573878736167099730066950788566305783557061386933285833790606478408338180441484365374576884940768869765015243654922241055511628259637036077931354561152132523179462711272425065028380893728756657495247228277997228665325170277804121184171109684082341098165674876570520341393472910261227793332825633853792221050216299971892992878464580630159595071454791306020644492146748421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ff35e0151e4dfd06fad7c249d4853480193d60b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2947 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icomp-np.eberlevivian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuscript-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth0-ecr-poc.lmauth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.test-sofia.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mstr.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unqork-ironshore.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivus.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-marinecargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV-libertycargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.libertyquote.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eventsatlibertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csobooking-develop.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csobooking-staging.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-sit1-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-sofia.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-uat-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-icasemanager-ext-ping.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UAT-Cloud.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-lsm-auth0-external-web-site.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-validador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit-www.libertylink.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-portal-redirect-staging.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents-surety.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-training.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csobooking-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth0.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offices-surety-performance.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algds-staging-gem.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'np-venti-console.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf-login.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnr-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibnr-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-usmarine-sit.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcr-dat-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-usmarine-uat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap-dev.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cauat.liupal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orcauat.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usuat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-sofia.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fluid-pre-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-perf-demo-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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