test-libertymutual.myinstantincentives.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 27:e8:f9:cc:36:70:22:ac:8c:2f:35:8a:3c:86:47:c0 was issued on by Symantec Corporation.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:e8:f9:cc:36:70:22:ac:8c:2f:35:8a:3c:86:47:c0
Serial Number (int): 53049571206176015194479204229586503616
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): d4:70:4a:07:5a:7a:6c:40:7d:0e:d6:35:f2:d0:01:48:d8:8c:36:d1
Fingerprint (sha256): 49:cd:04:76:c9:6f:40:e2:87:53:12:25:8c:a3:a7:42:90:ee:6a:97:8a:c8:d0:54:26:56:74:3c:41:ca:21:ad

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate test-libertymutual.myinstantincentives.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-libertymutual.myinstantincentives.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-clpi.libertymutual.com
test-claimseft.libertymutualgroup.com
test-preferences.libertymutual.com
test-af.ohiocasualty-ins.com
test-ecsgdisplay.libertymutual.com
test-claimseft.montgomery-ins.com
test-saml.mylibertyconnection.com
test-helmsmantpa.lmig.com
tst-auth.libertymutualvantageport.com
test-ixprs.libertymutual.com
test-stui.safeco.com
test-dmsservices-sbat.lmig.com
test-claimseft.goldeneagle-ins.com
test-obsc.hawkeyesecurity-ins.com
test-claimseft.hawkeyesecurity-ins.com
test-steps.coloradocasualty-ins.com
test-steps.libertymutualgroup.com
test-claimseft.americafirst-ins.com
test-obsc.indiana-ins.com
tst-login.commercialportal.libertymutual.com
test-stui.americafirst-ins.com
test-stui.libertymutualgroup.com
test-steps.lmig.com
tst-secure.mybusinessonline.libertymutual.com
test-stui.montgomery-ins.com
tst-benefits.mylibertyconnection.com
test-libertymmhtables.libertymutual.com
test-obsc.montgomery-ins.com
test-elibertyquote.libertymutual.com
test-webquote.libertymutual.com
auth-test.mylibertyconnection.com
tst-public.libertymutualvantageport.com
test-obsc.peerless-ins.com
test-steps.peerless-ins.com
test-obsc.libertymutualgroup.com
test-steps.americafirst-ins.com
secure-test.mylibertyconnection.com
test-feedback.libertymutual.com
test-stui.peerless-ins.com
test-af.peerless-ins.com
tst-www.libertymutualvantageport.com
test-agentsportal.libertymutual.com
test-steps.indiana-ins.com
www-test2.mylibertyconnection.com
test-af.montgomery-ins.com
tst-www.commercialportal.libertymutual.com
tst-www.mybusinessonline.libertymutual.com
test-af.goldeneagle-ins.com
test-obsc.libertynorthwest-ins.com
test-af.libertymutual.com
test-safeco.myinstantincentives.com
test-af.americafirst-ins.com
test-obsc.coloradocasualty-ins.com
test-workerscompensationsupport.libertymutual.com
test-obsc.goldeneagle-ins.com
test-af.coloradocasualty-ins.com
test-stui.libertynorthwest-ins.com
test-cliq.lmig.com
test-claimstour.libertymutualgroup.com
test-af.libertynorthwest-ins.com
test-steps.ohiocasualty-ins.com
test-steps.libertynorthwest-ins.com
test-auth.lmcissobrokerdc1.libertymutual.com
www-test.mylibertyconnection.com
test-stui.goldeneagle-ins.com
test-af.libertymutualgroup.com
test-calm.libertymutual.com
test-stui.libertymutual.com
test-wcequote.libertymutual.com
test-steps.safeco.com
test-af.safeco.com
test-steps.goldeneagle-ins.com
test-obsc.americafirst-ins.com
cloudmonitor-test-libertymutual.myinstantincentives.com
test-policyholders.libertynorthwest.com
test-stui.indiana-ins.com
test-claimseft.peerless-ins.com
test-claimseft.indiana-ins.com
test-steps.libertymutual.com
test.libertymutualprovidersupport.com
test-stui.coloradocasualty-ins.com
test-suretyonline.myinstantincentives.com
test-af.indiana-ins.com
test-claimseft.coloradocasualty-ins.com
test-steps.montgomery-ins.com
test-claimseft.ohiocasualty-ins.com
test-obsc.ohiocasualty-ins.com
test-stui.ohiocasualty-ins.com
test-workerscompensationsupport.helmsmantpa.com
test-billinginquiry.lmig.com
test-libertymutual.myinstantincentives.com
test-safeaudit.libertymutual.com
secure-test2.mylibertyconnection.com

Other certificates including the domain name myinstantincentives.com

(limited to 100 certificates)
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com

Certificate

The complete raw certificate details for test-libertymutual.myinstantincentives.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lb/ItOPTAXwP+Zkiprs
+QTg784xMRzyYZW/3/q9Iicd/SnOtl3fvc1lOJObH23yYIWf5Ak1QQH+c2IqX0Mx
Xck+oE5Qfv0agdLXEpSEhHHwVvjhT2RGas3NbhqO5ze2mb45PrOaED4RralOhsV+
G2R2aCR8QhwpDPadHeByHsFOx+jbyAb+Q2DEOVjEF8k1NjATa8H9jxg5d2qTPwGa
SWBut/39URsFmVWBWzqYUmkmwvrdtG7/0ZW4p4AA5o6ZDP52RCKh9+47E4GOwz8Q
szSE5tgB82fgQMy5dI0wbc0kUMAb3Xh8T6GkNyBC8LK2pwtxtJf/r8eeobEShRr3
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53049571206176015194479204229586503616
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27357712871788008456353193754303339026280208310567189319314695270209758363194590779528188875471349917931323409870288715042219530361964338787114030631312808449779222751338231996977987300371759286777182607055476037262476550039722656604060974499799491953418943953092878885185674287251470912319087537516713370231729939021309970464520149465234394894984777325672243718546577449349318492839450071181612327259959295717804808602457032873852936622740610795096688238378408034195167851785496837513144138522827962181020584557714384394967321443393946696881539068611676576443055502674754739143945357402982882695895893054249726834439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-preferences.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecsgdisplay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-saml.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-helmsmantpa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ixprs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dmsservices-sbat.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-login.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-secure.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-benefits.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-elibertyquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-webquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-feedback.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeco.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cliq.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimstour.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auth.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-calm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wcequote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-suretyonline.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeaudit.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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