libertycerts.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 50:2f:ae:36:02:6b:26:84:f0:b9:c8:35:cd:b0:36:a5 was issued on by Entrust, Inc..

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 50:2f:ae:36:02:6b:26:84:f0:b9:c8:35:cd:b0:36:a5
Serial Number (int): 106585811033484724876357632831523927717
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a0:7d:5c:f1:55:e8:dc:db:bc:fe:b4:ef:2a:1f:be:0c:39:1b:91:0f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e2:1d:16:34:6f:d2:ff:17:79:29:cd:27:76:87:f6:31:7d:dc:7b:41
Fingerprint (sha256): 5d:d9:f4:f0:20:56:0b:50:4c:e8:d4:2b:53:ca:3c:f2:66:1a:95:ad:d5:53:5c:ec:35:ee:04:fe:ee:7d:f0:c7

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate libertycerts.com.sg

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertycerts.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libertycerts.com.sg
www.libertylinkap.com
liuquote.co.uk
www.libertyspecialtymarkets.au
libertyspecialtymarkets.au
www.helmsmanmanagementprovidersupport.com
helmsmanmanagementprovidersupport.com
libertymbtc.com
libertytradecredit.com
enroll.libertymutualsurety.com
sgf.libertyfianzas.com
hold-agents.libertymutualsurety.com
seguro-garantia.libertyseguros.com.br
wcclaims.iso.lmig.com
ironshore.com
cotizador.libertyfianzas.com
blmg-forms.libertymutual.com
wc-isobatch.libertymutual.com
wc-isobatch-np.libertymutual.com
claimportal-api.libertymutualsurety.com
grs-billing-parallel.lmig.com
claimportal.libertymutualsurety.com
www.contratafianza.libertyfianzas.com
www.libertyseguros.com.pr
www.libertyseguros.com.mx
libertyseguros.com.pr
libertyseguros.com.mx
libertyfianzas.com
borgonline.be
borgonline.nl
nationaleborgre.com
assets.liuasiapacific.com
assets.libertyspecialtymarketsap.com
www.liumalaysia.com.my
liumalaysia.com.my
www.liuhongkong.com.hk
liuhongkong.com.hk
www.liusingapore.com.sg
liusingapore.com.sg
www.liuaustralia.com.au
liuaustralia.com.au
liuasiapacific.com
www.liuasiapacific.com
www.policydocumentation.liuaustralia.com.au
policydocumentation.liuaustralia.com.au
www.libertyspecialtymarkets.com.my
libertyspecialtymarkets.com.my
www.libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.sg
www.libertyspecialtymarkets.com.sg
policydocumentation.libertyspecialtymarkets.com.au
www.policydocumentation.libertyspecialtymarkets.com.au
libertyspecialtymarkets.com.au
www.libertyspecialtymarkets.com.au
media.libertyspecialtymarketsap.com
www.libertyspecialtymarketsap.com
libertyspecialtymarketsap.com
nationaleborg.net
www.nationaleborgre.com
nationaleborg.uk
nationaleborg.org
nationaleborg.lu
nationaleborg.fr
nationaleborg.eu
nationaleborg.de
nationaleborg.co.uk
nationaleborg.com
www.nationaleborg.be
www.nationaleborg.nl
nationaleborg.be
nationaleborg.nl
www.nationaleborg.com
www.borgonline.be
www.borgonline.nl
serf.aws.libertyfianzas.com
liu-latinamerica.com
naymu.libertymutual.com
www.libertyspecialtymarketslatam.com
libertyspecialtymarketslatam.com
authorization-policy-api-production.lmig.com
globalclaimcenter-batch.lmig.com
www.libertyassemble.ca
libertyassemble.ca
www.business.libertymutual.com
business.libertymutual.com
agents.libertymutualsurety.lmig.com
DR.libertyquote.com.au
DR.libertycargo.com.au
libertymutualsurety.nl
libertymutualsurety.be
www.libertymutualsurety.nl
www.libertymutualsurety.be
www.lsmcert.com
www.libertycerts.com.sg
lsmcert.com

Other certificates including the domain name libertycerts.com.sg

(limited to 100 certificates)
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg

Certificate

The complete raw certificate details for libertycerts.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqNGLfX1D7Zpbcdx4iQY
uWr86edAHRNvlfvrcYbdxjd681pcV4KGWbHof19yRiYtuv02emf+M3KR4NL6ha07
05Qr5/yqT5cYX4fmqg0CSQuGFu1cYC/w6cGtf/wRdu2v9WG17PKkvLVrln5Ng27u
gxUP+nFFeJ0o5thGhaDfyLd2flhcLurCoIZCUgN2xOvvzzmLCF85MBeYrBeS0JTv
HcPuNxWkX63KTjidtXEUcGcbQoH1uH0wMt6hxxe8DFfN8O05RjebuqUDA/IxOCH4
QN+6JMnWzgUJS/lKgB5VfR4aEOuUFLKK8XHn+8HSYgQD0754yJFNwKMY5xwuC9Aj
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 106585811033484724876357632831523927717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-27 12:05:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-28 12:05:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertycerts.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19521212443396562966577913994038508978091215692740600198845595280545610371320814181762229072312789557347801716837381615373752259581501697653882802202181429404476776340452207883680717669768229507437239912250418677975705106232122882673057256695864236195920510831790533197517535558499505372255060540252835956532515712023512945724357356993102386728604774752542845072715950413806118627174889560999375509684551368485993767691622699825280677175493435068923417437568122187511939427190735337739722698037395316091806926904353442304704988437010640739456207767928630620851377272073088242554676412971141852327201930659764066329541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a07d5cf155e8dcdbbcfeb4ef2a1fbe0c391b910f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2629 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymbtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytradecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blmg-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal-api.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-billing-parallel.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmcert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000184195522eb00000403004730450220318d065fc7f845976e3eab8476ea96d253b7d64873ccfc49a18611244a869a83022100f342a45ca6706eda8fbfd822d4bd05416291cbce86a10a85909ad178da7c7af0007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000184195522f60000040300473045022100b128dd27abb781683d81360ea0ade01c12d95ea5ff3b821da1d905746f63dc9d02203ebf1173b8b65449cd18a72e14e30bfd29e9d7c498e86678803121e2587339a5007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184195522d6000004030047304502205785f7bfb8f50ec4a7f4bebc304d15e18b87c076439cbf712d09d54e2ef3acb2022100d924f162ba27ac27513fe80a4ebd3bec5d7c122a6ac2480e27bb91311cead586
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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