test-libertymutual.myinstantincentives.com

- Liberty Mutual Group -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 25:d4:77:c3:1d:fb:ed:45:9b:2d:05:6c:6c:fa:12:e7 was issued on by Symantec Corporation.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Commercial Insurance
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:d4:77:c3:1d:fb:ed:45:9b:2d:05:6c:6c:fa:12:e7
Serial Number (int): 50284631843565421735421266436959113959
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 67:4d:3d:30:97:f9:9b:88:90:02:43:de:59:30:61:bc:58:76:0a:ff
Fingerprint (sha256): 5d:27:db:53:8e:a6:a3:49:a0:62:a8:af:d4:17:5c:a3:a9:57:1a:a5:ce:e2:f6:1a:36:8f:b0:e8:f8:0e:2c:15

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate test-libertymutual.myinstantincentives.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-libertymutual.myinstantincentives.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-auth.lmcissobrokerdc1.libertymutual.com
www-test.mylibertyconnection.com
www-test2.mylibertyconnection.com
tst-www.mybusinessonline.libertymutual.com
tst-www.libertymutualvantageport.com
tst-www.commercialportal.libertymutual.com
tst-secure.mybusinessonline.libertymutual.com
tst-public.libertymutualvantageport.com
tst-login.commercialportal.libertymutual.com
tst-auth.libertymutualvantageport.com
test-workerscompensationsupport.libertymutual.com
test-workerscompensationsupport.helmsmantpa.com
test-webquote.libertymutual.com
test-wcequote.libertymutual.com
test-suretyonline.myinstantincentives.com
test-stui.safeco.com
test-stui.peerless-ins.com
test-stui.ohiocasualty-ins.com
test-stui.montgomery-ins.com
test-stui.libertynorthwest-ins.com
test-stui.libertymutualgroup.com
test-stui.libertymutual.com
test-stui.indiana-ins.com
test-stui.goldeneagle-ins.com
test-stui.coloradocasualty-ins.com
test-stui.americafirst-ins.com
test-steps.safeco.com
test-steps.peerless-ins.com
test-steps.ohiocasualty-ins.com
test-steps.montgomery-ins.com
test-steps.lmig.com
test-steps.libertynorthwest-ins.com
test-steps.libertymutualgroup.com
test-steps.libertymutual.com
test-steps.indiana-ins.com
test-steps.goldeneagle-ins.com
test-steps.coloradocasualty-ins.com
test-steps.americafirst-ins.com
test-saml.mylibertyconnection.com
test-safeco.myinstantincentives.com
test-safeaudit.libertymutual.com
test-risktracrmis.lmig.com
test-risktracdocuments.lmig.com
test-preferences.libertymutual.com
test-policyholders.libertynorthwest.com
test-obsc.peerless-ins.com
test-obsc.ohiocasualty-ins.com
test-obsc.montgomery-ins.com
test-obsc.libertynorthwest-ins.com
test-obsc.libertymutualgroup.com
test-obsc.indiana-ins.com
test-obsc.hawkeyesecurity-ins.com
test-obsc.goldeneagle-ins.com
test-obsc.coloradocasualty-ins.com
test-obsc.americafirst-ins.com
test.libertymutualprovidersupport.com
test-libertymutual.myinstantincentives.com
test-libertymmhtables.libertymutual.com
test-ixprs.libertymutual.com
test-helmsmantpa.lmig.com
test-feedback.libertymutual.com
test-elibertyquote.libertymutual.com
test-ecsgdisplay.libertymutual.com
test-clpi.lmig.com
test-clpi.libertymutual.com
test-cliq.lmig.com
test-cliq.libertymutual.com
test-claimseft.peerless-ins.com
test-claimseft.ohiocasualty-ins.com
test-claimseft.montgomery-ins.com
test-claimseft.libertymutualgroup.com
test-claimseft.indiana-ins.com
test-claimseft.hawkeyesecurity-ins.com
test-claimseft.goldeneagle-ins.com
test-claimseft.coloradocasualty-ins.com
test-claimseft.americafirst-ins.com
test-calm.libertymutual.com
test-billinginquiry.lmig.com
test-agentsportal.libertymutual.com
test-af.safeco.com
test-af.peerless-ins.com
test-af.ohiocasualty-ins.com
test-af.montgomery-ins.com
test-af.libertynorthwest-ins.com
test-af.libertymutualgroup.com
test-af.libertymutual.com
test-af.indiana-ins.com
test-af.goldeneagle-ins.com
test-af.coloradocasualty-ins.com
test-af.americafirst-ins.com
secure-test.mylibertyconnection.com
secure-test2.mylibertyconnection.com
safesite.qa.safeco.com
ecdev-sam-tin.apps.safeco.com
ecdev-sam-dev.apps.safeco.com
cloudmonitor-test-libertymutual.myinstantincentives.com
auth-test.mylibertyconnection.com

Other certificates including the domain name myinstantincentives.com

(limited to 100 certificates)
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
libertymutual.myinstantincentives.com
test-suretyonline.myinstantincentives.com
test-libertymutual.myinstantincentives.com
test-safeco.myinstantincentives.com
test-libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com
vantageporttest.libertymutual.com
test-suretyonline.myinstantincentives.com
libertymutual.myinstantincentives.com
libertymutual.myinstantincentives.com

Certificate

The complete raw certificate details for test-libertymutual.myinstantincentives.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6y8SocMYk3ESdGlPzdtf
e5n/f2x8IKmVcFfZHQJG7cGrgNNsPMMpsdSy8P305sowaO6OwmMRVXxhs7b3a1MO
x4qpnnpWYtrggcNb3q1ZG89kfaS1XJ3xJI99B2T089o9qKqPxU0JQ3hcN3jRok1E
VChnRrfDhVRKEmuDph16vrHRsbKEu0Ip0NCNukFrBHCM+kS9Ww/jYl+YhnZfKBVN
1W4oiBHJgQVONgfvjD0vUovL00AL9CFqirSMr60zZm5FpTkMQON5QGoYkv6Q9uuw
HBU0uGnqhAGKFeron937pGRw77aBl1mBD3O5HbVRAED7zkTJ594T8KXHdbyyeQ/O
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 50284631843565421735421266436959113959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Commercial Insurance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29689214120373117404518521585811325848257985040351881768605809886812487690906452303260524894050352512654654242596089296856499130034684310733057829356387865408772223403307801301410588478480176268830830403251504824551132241710068244917515499983467702126096250255575198551357823215449824442010506035898027092313651235607612263894548763509113611172565600930226003752601272981709055805924198084917368851801795951106696638139368213540659509365970653918468699109802998506841176238732514075345597762979106254044245578538494006037335001914293906755739029679619980241109590008428118851523421952590837290210600847722499141521079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3278 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auth.lmcissobrokerdc1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-www.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-secure.mybusinessonline.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-public.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-login.commercialportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst-auth.libertymutualvantageport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-workerscompensationsupport.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-webquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-wcequote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-suretyonline.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-stui.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-steps.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-saml.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeco.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-safeaudit.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risktracrmis.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-risktracdocuments.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-preferences.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-policyholders.libertynorthwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.libertymutualprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-libertymmhtables.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ixprs.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-helmsmantpa.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-feedback.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-elibertyquote.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-ecsgdisplay.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-clpi.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cliq.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-cliq.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.hawkeyesecurity-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-claimseft.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-calm.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-billinginquiry.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertynorthwest-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.goldeneagle-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.coloradocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-af.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-test2.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safesite.qa.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecdev-sam-tin.apps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecdev-sam-dev.apps.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cloudmonitor-test-libertymutual.myinstantincentives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth-test.mylibertyconnection.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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