cs-pool-03k.lm.lmig.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 76:b5:02:14:40:68:fc:7b:00:00:00:00:50:f7:df:6e was issued on by Entrust, Inc..

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Hosting
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:b5:02:14:40:68:fc:7b:00:00:00:00:50:f7:df:6e
Serial Number (int): 157788751403331295611150062764833628014
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5c:31:26:58:7b:07:c3:52:cb:51:3e:98:fb:c9:9a:5d:21:2b:de:a0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 00:86:2b:c9:c5:47:ec:ff:97:c3:db:e7:a1:16:d7:84:0d:b9:83:19
Fingerprint (sha256): 6f:41:36:8c:ff:15:25:a6:45:cd:15:75:6c:82:6c:02:5d:26:63:6e:1d:98:91:6c:ab:94:72:72:21:f1:d0:fb

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cs-pool-03k.lm.lmig.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs-pool-03k.lm.lmig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs-pool-03k.lm.lmig.com
sip.libertymutual.com
sip.libertygts.com
sip.pembrokeunderwriting.com
sip.ironshore.com
sip.libertyglobalgroup.com
sip.helmsmantpa.com
sip.libertyiu.com
sip.safeco.com
sip.montgomery-ins.com
sip.liberty-IT.co.uk
sip.libertyInternational.com
sip.americafirst-ins.com
sip.lmi.com
sip.libertyfianzas.com
sip.libertyinsurance.com.sg
sip.libertyinsurance.com.vn
sip.lmginsurance.co.th
sip.libertymutual.com.hk
sip.libertyseguros.com.br
sip.liberty.cl
sip.liberty.ec
sip.libertyinsurance.ie
sip.libertyeurope.ie
sip.libertyseguros.pt
sip.libertyseguros.es
sip.Libertycolombia.com
lyncdiscover.libertymutual.com
lyncdiscover.libertygts.com
lyncdiscover.pembrokeunderwriting.com
lyncdiscover.ironshore.com
lyncdiscover.libertyglobalgroup.com
lyncdiscover.helmsmantpa.com
lyncdiscover.libertyiu.com
lyncdiscover.safeco.com
lyncdiscover.montgomery-ins.com
lyncdiscover.liberty-IT.co.uk
lyncdiscover.libertyInternational.com
lyncdiscover.americafirst-ins.com
lyncdiscover.lmi.com
lyncdiscover.libertyfianzas.com
lyncdiscover.libertyinsurance.com.sg
lyncdiscover.libertyinsurance.com.vn
lyncdiscover.lmginsurance.co.th
lyncdiscover.libertymutual.com.hk
lyncdiscover.libertyseguros.com.br
lyncdiscover.liberty.cl
lyncdiscover.liberty.ec
lyncdiscover.libertyinsurance.ie
lyncdiscover.libertyeurope.ie
lyncdiscover.libertyseguros.pt
lyncdiscover.libertyseguros.es
lyncdiscover.libertycolombia.com
LyncdiscoverInternal.libertymutual.com
LyncdiscoverInternal.libertygts.com
LyncdiscoverInternal.pembrokeunderwriting.com
Lyncdiscoverinternal.ironshore.com
Lyncdiscoverinternal.libertyglobalgroup.com
LyncdiscoverInternal.helmsmantpa.com
LyncdiscoverInternal.libertyiu.com
LyncdiscoverInternal.safeco.com
LyncdiscoverInternal.montgomery-ins.com
LyncdiscoverInternal.liberty-IT.co.uk
LyncdiscoverInternal.libertyInternational.com
LyncdiscoverInternal.americafirst-ins.com
Lyncdiscoverinternal.lmi.com
Lyncdiscoverinternal.libertyfianzas.com
Lyncdiscoverinternal.libertyinsurance.com.sg
Lyncdiscoverinternal.libertyinsurance.com.vn
Lyncdiscoverinternal.lmginsurance.co.th
Lyncdiscoverinternal.libertymutual.com.hk
Lyncdiscoverinternal.libertyseguros.com.br
Lyncdiscoverinternal.liberty.cl
Lyncdiscoverinternal.liberty.ec
Lyncdiscoverinternal.libertyinsurance.ie
Lyncdiscoverinternal.libertyeurope.ie
Lyncdiscoverinternal.libertyseguros.pt
Lyncdiscoverinternal.libertyseguros.es
Lyncdiscoverinternal.libertycolombia.com
dialin.libertymutual.com
join.helmsmantpa.com
join.libertymutual.com
meet.libertymutual.com
cswebext-pool-03k.libertymutual.com
csweb-pool-03k.lm.lmig.com
lm-hssfbfe-p12k.lm.lmig.com
lm-hssfbfe-p11k.lm.lmig.com
lm-hssfbfe-p10k.lm.lmig.com
lm-hssfbfe-p09k.lm.lmig.com
lm-hssfbfe-p08k.lm.lmig.com
lm-hssfbfe-p07k.lm.lmig.com
lm-hssfbfe-p06k.lm.lmig.com
lm-hssfbfe-p05k.lm.lmig.com
lm-hssfbfe-p04k.lm.lmig.com
lm-hssfbfe-p03k.lm.lmig.com
lm-hssfbfe-p02k.lm.lmig.com
lm-hssfbfe-p01k.lm.lmig.com

Other certificates including the domain name lmig.com

(limited to 100 certificates)
prod-eu-west-1-alfresco-repo.aws.lmig.com
ete-claims.safeco.com
*.kdc.paas.lmig.com
uram.lmig.com
atlas-services.lmig.com
cerc-ar.lmig.com
testcommercial.lmig.com
dev-fsda.lmig.com
rdc-registry-nprod.lmig.com
*.eu-west-1.np.paas.lmig.com
relativity.lmig.com
kdc-citbi.lmig.com
vmkip-hjss0001.lm.lmig.com
VMPIP-HSIWAE01.lm.lmig.com
requestit.lmig.com
vmkit-a4swb001.lm.lmig.com
statuspage.io
lm-pmmstgy-d01k.lm.lmig.com
*.app-severless.rancher.sandbox.aws.lmig.com
dev-ap-southeast-2-gs-alfresco-52-saml.aws.lmig.com
www.libertymutual.com
omni-messaging.us-east-1.lmig.com
dial-auditlog-retention.lmig.com
vx-eatknas-p02k.lmig.com.lmig.com
ispoappskdc.lmig.com
ci-envoy-reins-search.lmig.com
ete-claims.safeco.com
85a-sseaesdm1.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
aep-lm-soap-client-invoker.production.us-east-1.aws.lmig.com
amcontactcenter.lmig.com
*.aws.lmig.com
uscm-sasgrid-web.lmig.com
compassdocuments.lmig.com
vxpip-hhspds01.lmig.com
PeopleAtLiberty.com
lmpproducerextranet.lmig.com
lm-ise-psn.lmig.com
test-pmsrc.lmig.com
testAvayaDev.lmig.com
statuspage.io
pfet02k03.lmig.com
cmpsccosrv.lmig.com
lcpet-havsbc01-inside.lmig.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
test-import.lmig.com
eip.lmig.com
lmpin-hcybrk02-r.lmig.com
vm-ceg-prd2-1.azr.lmig.com
0055-blox-ext-grid.lmig.com
ete-www2.libertymutual.com
dr-sslvpn-kc.lmig.com
perf-driverrisk.cf.reuse.lmig.com
denodo-solution-manager-non-production.aws.lmig.com
vckit-haespc02.lmig.com
ecr-nocustids-kdc.lmig.com
lsm-fred.lmig.com
comp3-ui.aws.lmig.com
perfandcompstatement.lmig.com
snd-ciapstableau.aws.lmig.com
puma.lmig.com
logging-old.datahub.aws.lmig.com
test-securefile.libertymutual.com
dev-compworkq-cmis.lmig.com
gateway-client.cf.reuse.lmig.com
vendors.test.wem.gde.aws.lmig.com
vxkip-pwaslp05.lmig.com
api.eco-development.lmig.com
pmit-easysuite.lmig.com
cs-tappool-03p.lm.lmig.com
gw-gde-equifax-service.test.wem.gde.aws.lmig.com
0038-sbc-ext-01.lmig.com
lm-hscyrkp-p01p.lm.lmig.com
lmb-datalake-zeppelin-prod.aws.lmig.com
contracts-portal.lmig.com
clworkbench-ws.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
LM-HS-LTAS-A-T01P.LMIG.COM
2pr-rpama.lmig.com
vxpif-p7fsa002.lmig.com
b2b-boomi-batch-kc.lmig.com
wcsvtrigger.lmig.com
vmpip-m566u5fh.lm.lmig.com
bp1054598.saagie.com
vmkip-hvcvdi22.lm.lmig.com
ci-envoy-ppuw-stage-translation.lmig.com
sit-eu-west-1-gs-alfresco.aws.lmig.com
inspire-interactive.development.aws.lmig.com
dev-iam-console.lmig.com
vckip-hcmad201.lmig.com
leservices-imp.lmig.com
ciim-claims-service-test.np.lmig.com
perf-www.liucanada.com
statuspage.io
smart-workflow-rules.lmig.com
grs-informatica-mdm-aws-production.aws.lmig.com
prod-b-us-east-1-ci-alfresco-ingest-share.aws.lmig.com
vmpip-hcypvw03.lm.lmig.com
brmspolicy-uat.libertyinsurance.in

Certificate

The complete raw certificate details for cs-pool-03k.lm.lmig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntUCS8EJft+76KBaKXwB
gSX09PxiigmCvk45msN4vHKPGo51SmxKN81TOABzUSVEO55gb7Cd11BM9kIwwFMv
MLCCcFQoV6GvR5f7V7YX+gDB91znvbsiEmvlSvNfGBjSMMLhGGmPvD5t5BLqVlR4
ZJkH43NYHqnG/sgj069wihW36PkpSH1fJT+nmYFYkmc0pWkpDF71honWe6bKWCCU
7bHpcalq2qW3OLrVSKSOr4ZzA1voNPJL8JWuMe3c1+9Dpw0TsG6RJORmyapaGH4a
w5JlD7GXziGHs8/fHypML4cXU9ccUEmap6yhRsQ4JCnOKfWnR1CQdd9bAcT23xqR
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 157788751403331295611150062764833628014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 19:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-27 19:49:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs-pool-03k.lm.lmig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20050690821806361150296244204197504810516501888433004523191605013495709120854738575762782213818692740374541524764173614458062080049222870062756992928026202296163057048709687441126617945468885427387344945368327433781697753905657417689836309007587685526295379549046579691811253439574935244090531851914546870511203994338924980369160801952296266619005637315010497693086654381033681211581219509137918697214711007190844647649596568708720000468732318517208857159452049370602730605230624098136598597936836518711602635367641645640170662622361622379511344500869789908802370695355738929988289247748605520854322005603254491844951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3014 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-pool-03k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Libertycolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertycolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertycolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cswebext-pool-03k.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csweb-pool-03k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p12k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p11k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p10k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p09k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p08k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p07k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p06k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p05k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p04k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p03k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p02k.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p01k.lm.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c3126587b07c352cb513e98fbc99a5d212bdea0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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