libertymutual.com

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0e:95:bf:03:29:eb:9c:b8:75:82:42:00:22:fa:fd:6a was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Liberty International
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:95:bf:03:29:eb:9c:b8:75:82:42:00:22:fa:fd:6a
Serial Number (int): 19386718363803019611272555221353168234
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 73:4a:81:f2:ff:dc:db:9d:41:02:69:ca:e0:7e:82:34:0c:b4:dc:fd
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 56:17:22:10:ea:8e:2a:f6:25:98:0f:80:9d:ae:c5:be:b9:9a:b9:37
Fingerprint (sha256): 5a:38:d9:50:d4:5f:8e:10:d3:8d:a6:9e:db:2c:53:03:c2:05:99:c0:ae:0e:42:e6:83:cd:0b:43:9d:8b:72:7e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate libertymutual.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertymutual.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meuespaco.indiana.com.br
sinistros.libertyseguros.com.br
aceite-sinistros.libertyseguros.com.br
spservices1.libertyseguros.com.br
www.aliroseguro.com.br
guiadigital.libertyseguros.com.br
www.temvalor.libertyseguros.com.br
download.libertyseguros.com.br
individual.libertymedicalinsurance.com
api.libertymedicalinsurance.com
online.libertyinsurance.com.hk
siniestros.liberty.cl
middleware.libertyseguros.es
uat.liberty.ec
mobile.libertyseguros.com.br
rhonline.libertyseguros.com.br
trydwellbeing.com
www.trydwellbeing.com
www.libertyinsurance.com.vn
livechat.libertyinsurance.com.vn
soap2017.pentagenerales.cl
seguros.pentagenerales.cl
netstorage.libertyseguros.pt
meuespaco.aliroseguro.com.br
www.liberty-insurance.ie
www2.libertyseguros.com.br
www2.indiana.com.br
www.quinn-insurance.com
www.quinn-direct.co.uk
www.portaldesegurosliberty.com.br
www.mediedge.com
www.lmgpacific.com
www.liil.com.hk
www.libertyweb.com.br
www.libertyseguros.com.br
www.libertymutual.com.hk
www.libertyinternational.com.hk
www.libertyinsuranceni.co.uk
www.libertyinsurance.com.sg
www.libertyinsurance.com.hk
www.liberty.ec
www.liberty.cl
www.indiana.com.br
www.genesis.es
windscreencover.quinn-direct.com
windscreencover.libertyinsurance.ie
webmail1.libertyseguros.com.br
webcalcauto.indiana.com.br
wct.libertyseguros.com.br
vp.libertyseguros.com.br
transporte.libertyseguros.com.br
tools.libertyseguros.com.br
social.libertyseguros.com.br
sip.indiana.com.br
siniestros.pentagenerales.cl
seguroonline.libertyseguros.com.br
securequotes.libertyinsurance.ie
quotes.libertyinsurance.ie
printprod.lmginsurance.co.th
portalmarketing.libertyseguros.com.br
portalintegracao.libertyseguros.com.br
pivote.liberty.ec
personallines.libertyseguros.com.br
online.libertyinsurance.com.sg
onelink.libertyinsurance.com.sg
novomeuespaco.libertyseguros.com.br
novoinstitucional.libertyseguros.com.br
newsel.libertyseguros.com.br
meuespacocorretor.libertyseguros.com.br
meuespaco.libertyseguros.com.br
m2.libertyseguros.com.br
lms.libertyseguros.com.br
libertymutual.com.hk
libertymutual.com
libertyinternational.com.hk
libertyinsurance.com.sg
liberty.ec
lbis-poi.lmginsurance.co.th
imobiliario.libertyseguros.com.br
extranet.libertyseguros.com.br
emissao.libertyseguros.com.br
ebiz5.lmginsurance.co.th
ebiz4.lmginsurance.co.th
ebiz3.lmginsurance.co.th
ebiz2.lmginsurance.co.th
dw.indiana.com.br
cotador.libertyseguros.com.br
corporativo.libertyseguros.com.br
connectapp.libertyseguros.pt
connect.libertyseguros.pt
commerciallines.libertyseguros.com.br
clientes.libertyseguros.pt
chat.libertyseguros.com.br
chat.indiana.com.br
callmeback.libertyinsurance.ie
av.indiana.com.br
autos.liberty.ec
autodiscover.lmginsurance.co.th
affinitydr.libertyseguros.com.br
adselfservice.libertyseguros.pt

Other certificates including the domain name libertymutual.com

(limited to 100 certificates)
ete-claims.safeco.com
eclps.libertymutual.com
quote.libertymutual.com
test-b-pmcfp.libertymutual.com
www.test-commercialclaimportal.libertymutual.com
uat.mediedge.com
www.libertymutual.com
perfrdcespoapps.libertymutual.com
test-cliq.libertymutual.com
ete-claims.safeco.com
mdmaspilot.libertymutual.com
PeopleAtLiberty.com
mybusinessonline.libertymutual.com
online.libertymutual.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
trn-eservice.libertymutual.com
*.lnpa.uscm.libertymutual.com
cfplp.libertymutual.com
test-securefile.libertymutual.com
cs-tappool-03p.lm.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
s-connect.libertymutual.com
tesla-cpa-np.libertymutual.com
preferences-rdc.libertymutual.com
dmz-cpa-datapower-prod.libertymutual.com
trn-a-pmcfa.libertymutual.com
perf-www.liucanada.com
maintenance.libertymutual.com
workerscompensationsupport.libertymutual.com
brmspolicy-uat.libertyinsurance.in
dev-d-mobile.online.libertymutual.com
libertymutual.com
libertymutual.myinstantincentives.com
test-ereport.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-www2.libertymutual.com
www.yottaa.net
*.devops.npa.uscm.libertymutual.com
ha-rdcespoapps.libertymutual.com
www.libertyiu.com
perf-www.liucanada.com
cswebext-pool-03p.libertymutual.com
trn-cfa.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
test-mytoken.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
portal-cms-staging.lmig.com
test-risk-lifecycle-id.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
smst.libertymutual.com
account.dev-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
apitest.libertymutual.com
dev-i-tts-gateway.libertymutual.com
load-insurance.libertymutual.com
edge-routers.pdc.api.libertymutual.com
mypersonalbest.libertymutual.com
payment-apac.libertymutual.com
www.yottaa.net
npp-cpa.libertymutual.com
2pr-csw.libertymutual.com
perf-www.liucanada.com
test-equote.libertymutual.com
cliq.libertymutual.com
search.libertymutual.com
vantageporttest.libertymutual.com
risk-lifecycle-id.libertymutual.com
internetwebchat05.libertymutual.com
voltage-pp-0000.libertymutual.com
account.np-eservice.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
test-ci-policyquoteapi.libertymutual.com
dev-d-public.libertymutual.com
regional-ssl.libertymutual.com
test-tuition.libertymutual.com
soatenlinea-nonprod.libertyseguros.co
cswebext-tappool-03p.libertymutual.com
givewithliberty.libertymutual.com
dev-a-dpec.safeco.com
internetwebchat01.libertymutual.com
test-securefile.libertymutual.com
safetynet.libertymutual.com
test-securefile.libertymutual.com
ete-www2.libertymutual.com
cswebext-pool-03b.libertymutual.com
dev-notifications.np-lmb.libertymutual.com
test-securefile.libertymutual.com
benefitscoach-nonprod.libertymutual.com
*.test.omni-sms.aws.libertymutual.com
quote.libertymutual.com
ete-www2.libertymutual.com
mdm.libertymutual.com
test-icasemanagersecure.libertymutual.com
ciit-basui-staging.libertymutual.com
external-test.pdc.np.api.libertymutual.com
clientlist.qa.safeco.com
amsso.libertymutual.com

Certificate

The complete raw certificate details for libertymutual.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRf+wPHmGh17mQEBYKOb
KX6c5vkAO6EkbQBse9vvWq1vt05CNc5EXbHCjhIViy/7X74Hcu3qC6Xxk/4x1bmn
OfgirMDiiMrRcsKC6Lx9+rOUImf3AwhiOzxpglE5ESQL+pJyl6zE4g6dYBibYuf8
8IfSIcyGYqFUjfZVWSaLE3xdgE3wDF1F+Qrp0+wChyKicz7n5P712k/TUt6Fk9ex
rybOBCuRvqopc2Z1Rnq5wNTlaTf+t28dv1mnw16ZKVBejLO1zN9khJaPry8jKHkr
FnRjg1TLQ2tsVtgnIYqXe7C32ZfpeveaZTAqw5aGVURcelEjxWLmVHzyyzCDC5Bw
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19386718363803019611272555221353168234
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertymutual.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23365918859116755115610368909775831344028366277518840651450476067733384386713769310529091712362112366550762979512117505637039168065918372891770089217366254584656166316727358719578665461088156628178677957424695299671263876438545287329138002840978146595765305335987426695154279564076384643209031470636674786170203047088886897640312299149053646281770954282558526474479159969712827088032661527005945374834108752142181599048698712663370855395339259433556496708463209739664078461029753792801821033170962761315383158223681135008340850097719194006752395871360586184622205099716880263394779204434593705720118178894851712512073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							734a81f2ffdcdb9d410269cae07e82340cb4dcfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2855 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespaco.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinistros.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aceite-sinistros.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spservices1.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aliroseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guiadigital.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temvalor.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'individual.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siniestros.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'middleware.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhonline.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trydwellbeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trydwellbeing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livechat.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soap2017.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguros.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netstorage.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespaco.aliroseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty-insurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quinn-insurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quinn-direct.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldesegurosliberty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediedge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmgpacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liil.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsuranceni.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windscreencover.quinn-direct.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windscreencover.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail1.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcalcauto.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wct.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vp.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transporte.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'social.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siniestros.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroonline.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securequotes.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotes.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printprod.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalmarketing.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalintegracao.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pivote.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personallines.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onelink.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novomeuespaco.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'novoinstitucional.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsel.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespacocorretor.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meuespaco.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm2.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinternational.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis-poi.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imobiliario.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emissao.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz5.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz4.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz3.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz2.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dw.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotador.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporativo.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectapp.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connect.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commerciallines.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chat.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'callmeback.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'av.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autos.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitydr.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adselfservice.libertyseguros.pt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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