perf-www.liucanada.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4e:f1:25:11:4e:70:a8:cf:76:05:15:e7:b1:bb:2d:4a was issued on by Entrust, Inc..

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: GRS
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:f1:25:11:4e:70:a8:cf:76:05:15:e7:b1:bb:2d:4a
Serial Number (int): 104931879034440457041683352198349270346
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0a:e2:cc:aa:b8:ac:64:ec:74:8f:9c:af:a1:45:d4:06:6b:77:db:9e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e9:d3:20:0a:65:25:ef:8e:e0:b6:64:60:b0:9d:0e:6e:32:44:52:8a
Fingerprint (sha256): 45:ae:49:87:4b:dc:26:10:cd:68:3e:f2:4f:ad:a5:95:7c:d6:f9:4e:c8:f2:70:bd:fb:a3:5f:f8:9b:38:1f:60

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate perf-www.liucanada.com

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf-www.liucanada.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-validador.libertyfianzas.com
grs-lsm-auth0-external-web-site.lmig.com
test-www.borgonline.nl
test-serf.aws.libertyfianzas.com
authorization-policy-api-test.lmig.com
testnaymu.libertymutual.com
authorization-policy-api-development.lmig.com
devnaymu.libertymutual.com
UAT-Cloud.libertymutualcargo.com
hold-test-icasemanagersecure.libertymutual.com
test-icasemanager-ext-ping.lmig.com
dev-serf.aws.libertyfianzas.com
test-surety-ip-bie-intake.lmig.com
dev.libertymutualprovidersupport.com
globalclaimcenter-batch-uat-cloud.lmig.com
perf-wcclaims.iso.lmig.com
sit.libertymutualcargo.com
uat-wcclaims.iso.lmig.com
tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
globalclaimcenter-batch-sit1-cloud.lmig.com
dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com
perf-www.liucanada.com
dev.libertycargo.com.au
DEV.libertyquote.com.au
dev.eventsatlibertymutual.com
uat.libertyquote.ca
DEV-libertycargo.liuquote.com
DEV.liuquote.com
dev-marinecargo.liuquote.com
archivus.lmig.com
unqork-ironshore.lmig.com
test.helmsmantpa.com
staging.helmsmantpa.com
test-www.libertyfianzas.com
test-mstr.libertyfianzas.com
dev-www.liuquote.com
uat-agents.libertymutualsurety.com
dev2-lfanalytics.aws.lmig.com
uat.liucargo.com
uat.liu-eil.com
uat-www.liu-latinamerica.com
test.primerofianzas.info
qa-qiservicing.libertymutualsurety.com
qa-qi.libertymutualsurety.com
ps-qi.libertymutualsurety.com
ps-bfl.libertymutualsurety.com
perf-www.lms.ae-libertyiu.com
perf-www.liu-usa.com
perf-www.ae-libertyiu.com
perf-qi.libertymutualsurety.com
perf-bfl.libertymutualsurety.com
perf-agents.libertymutualsurety.com
passport-test.lmig.com

Other certificates including the domain name liucanada.com

(limited to 100 certificates)
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.liucanada.com
perf-www.liucanada.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
test-www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
www.liucanada.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
www.libertyiu.com
perf-www.liucanada.com
www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
www.libertyiu.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
perf-www.liucanada.com
test-www.libertyiu.com
www.libertyiu.com
test-risk-lifecycle-id.libertymutual.com
test-www.libertyiu.com
perf-www.liucanada.com
test-www.libertyiu.com
perf-www.liucanada.com
www.libertyiu.com
tst-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com
tst-www.liucanada.com
www.libertyiu.com
www.libertyiu.com
risk-lifecycle-id.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
test-risk-lifecycle-id.libertymutual.com

Certificate

The complete raw certificate details for perf-www.liucanada.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a/l2lK8sHiHX2oSx3pz
yqwNxZImHVO/ZEQHSXLDPpE+RAs+A2TwqyX/I//SNP1ogv8IjMDvywWbQWcHIeY9
KmXNuR7WUZs9Mi+y4L/Hggg/A8Jm0EoxdUxxU8DtWEbiVBAvoBy3MI9k8SQG4EMH
FO/4Fl1Axuw6qQyTSR6NRwTtD866vi8uecJvsxD8CFMg4Miz7z7J1ui4OQWuTzye
JSGgss4nDdlspdelHeSz6HiW38w2SKu6sJeSoef/mzY/nUO4ZBPF5JlIOJfGlX9T
Y4tTP8KXkiZDlgqSoWgJY01md41XyR/WTEHApR5CPG6sIKNK8TxRJb0xAdU+aOiq
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104931879034440457041683352198349270346
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 19:52:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-31 19:52:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GRS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf-www.liucanada.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28490357086197036737556372128285230205160431078354043169307927495932608233744086709051632712287316775603949401407499810458334117441494591809800833763251525877468336133798268773207883326988044016760832393335485745535188004630575600209777798742508566909960475083780002601945324446432141847605812158610942962280125010602230738652802477337282691704178635185592109010396818164770617540590681063016067569984558733584837840748659614917470835100897725590403789341306580812087838909422760490263802627966403571467155026395581462621038577083147916243745786063205981339069942689294032645711671541136785802782873227528472676051667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ae2ccaab8ac64ec748f9cafa145d4066b77db9e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1686 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-validador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-lsm-auth0-external-web-site.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-test.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devnaymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'UAT-Cloud.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-icasemanagersecure.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-icasemanager-ext-ping.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-surety-ip-bie-intake.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-uat-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.libertymutualcargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch-sit1-cloud.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-surety-us-east-1.surety-auth0-policy-service.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liucanada.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.eventsatlibertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.libertyquote.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV-libertycargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DEV.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-marinecargo.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archivus.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unqork-ironshore.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-www.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-mstr.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-www.liuquote.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2-lfanalytics.aws.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liucargo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liu-eil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-www.liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.primerofianzas.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qiservicing.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.lms.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.liu-usa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-www.ae-libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-qi.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-bfl.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'passport-test.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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