libertycerts.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4b:6b:ed:33:9a:b3:62:5a:2a:5c:93:8a:82:97:ac:87 was issued on by Entrust, Inc..

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4b:6b:ed:33:9a:b3:62:5a:2a:5c:93:8a:82:97:ac:87
Serial Number (int): 100252486467321824386782909333084023943
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: f6:98:0f:ec:24:53:aa:c0:95:46:bf:ca:8e:dc:63:58:77:55:61:a4
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): bc:a7:75:b5:6a:b9:e9:e9:a6:25:2a:dd:4d:64:c5:a1:a2:a5:ff:4b
Fingerprint (sha256): 9a:22:0f:48:87:42:5d:22:6a:db:0c:67:b1:f6:45:36:2a:ef:07:f5:4d:cf:66:4d:2f:05:0b:7b:f6:35:f7:78

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate libertycerts.com.sg

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertycerts.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libertycerts.com.sg
houseofguarantees.no
lsmcert.com
www.libertycerts.com.sg
www.lsmcert.com
www.libertymutualsurety.be
www.libertymutualsurety.nl
libertymutualsurety.be
libertymutualsurety.nl
DR.libertycargo.com.au
DR.libertyquote.com.au
agents.libertymutualsurety.lmig.com
business.libertymutual.com
www.business.libertymutual.com
libertyassemble.ca
www.libertyassemble.ca
houseofguarantees.se
globalclaimcenter-batch.lmig.com
authorization-policy-api-production.lmig.com
libertyspecialtymarketslatam.com
www.libertyspecialtymarketslatam.com
naymu.libertymutual.com
liu-latinamerica.com
serf.aws.libertyfianzas.com
www.borgonline.nl
www.borgonline.be
www.nationaleborg.com
nationaleborg.nl
nationaleborg.be
www.nationaleborg.nl
www.nationaleborg.be
nationaleborg.com
nationaleborg.de
nationaleborg.eu
nationaleborg.fr
nationaleborg.lu
nationaleborg.org
nationaleborg.uk
www.nationaleborgre.com
libertyspecialtymarketsap.com
www.libertyspecialtymarketsap.com
media.libertyspecialtymarketsap.com
www.libertyspecialtymarkets.com.au
libertyspecialtymarkets.com.au
www.policydocumentation.libertyspecialtymarkets.com.au
policydocumentation.libertyspecialtymarkets.com.au
www.libertyspecialtymarkets.com.sg
libertyspecialtymarkets.com.sg
libertyspecialtymarkets.com.hk
www.libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.my
www.libertyspecialtymarkets.com.my
policydocumentation.liuaustralia.com.au
www.policydocumentation.liuaustralia.com.au
www.liuasiapacific.com
liuasiapacific.com
liuaustralia.com.au
www.liuaustralia.com.au
liusingapore.com.sg
www.liusingapore.com.sg
liuhongkong.com.hk
www.liuhongkong.com.hk
liumalaysia.com.my
www.liumalaysia.com.my
assets.libertyspecialtymarketsap.com
assets.liuasiapacific.com
nationaleborgre.com
borgonline.nl
borgonline.be
libertyfianzas.com
libertyseguros.com.mx
www.libertyseguros.com.mx
www.libertyseguros.com.pr
www.contratafianza.libertyfianzas.com
claimportal.libertymutualsurety.com
grs-billing-parallel.lmig.com
claimportal-api.libertymutualsurety.com
wc-isobatch-np.libertymutual.com
wc-isobatch.libertymutual.com
blmg-forms.libertymutual.com
cotizador.libertyfianzas.com
ironshore.com
wcclaims.iso.lmig.com
seguro-garantia.libertyseguros.com.br
hold-agents.libertymutualsurety.com
sgf.libertyfianzas.com
enroll.libertymutualsurety.com
libertytradecredit.com
libertymbtc.com
helmsmanmanagementprovidersupport.com
www.helmsmanmanagementprovidersupport.com
libertyspecialtymarkets.au
www.libertyspecialtymarkets.au
liuquote.co.uk
www.libertylinkap.com
libertylinkap.com
review.id3e.lmig.com
wlsquotation.libertyseguros.co
sdi.libertymutual.com

Other certificates including the domain name libertycerts.com.sg

(limited to 100 certificates)
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg

Certificate

The complete raw certificate details for libertycerts.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRFjCCD/6gAwIBAgIQS2vtM5qzYloqXJOKgpeshzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAxMjQyMDE5MThaFw0yNDEyMjgyMDE5MTVaMHcxCzAJBgNVBAYTAlVTMRYwFAYD
VQQIEw1OZXcgSGFtcHNoaXJlMRMwEQYDVQQHEwpQb3J0c21vdXRoMR0wGwYDVQQK
ExRMaWJlcnR5IE11dHVhbCBHcm91cDEcMBoGA1UEAxMTbGliZXJ0eWNlcnRzLmNv
bS5zZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPG9BPqqH88Kqxst
A9GTtpMxwvrhFtMy4szLqG1wAtFFQaFS+puQ4Gx/YEJzS/6fHwqB358F5ojNihkC
STlQbZFlvT11xtX8c9NJca2sMrxsbFH7ohmXbGJ/HvYrvSmZKw3TFojvRzNYspt8
2X3DNbIRSAH/2qYDf1v6816Xl3wUFxhl9nuqxtfTvyMMk8bzFrFma8M09hCOXJIK
ellXseJRbo/yccRVtiQLvkGBwUuUqKDiyoqfcurv3d3ilZe6HjlcIwUEpfX5xA2Z
uDT4zJylMWHoUTVbPvlLAsak6x4eYpwZo6vory9KsIAUrDGQ7ggmviy0kFDqhlKW
piDNkRMCAwEAAaOCDVgwgg1UMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPaYD+wk
U6rAlUa/yo7cY1h3VWGkMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/
MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVz
dC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNo
YWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3Qu
bmV0L2xldmVsMWsuY3JsMIIKmwYDVR0RBIIKkjCCCo6CE2xpYmVydHljZXJ0cy5j
b20uc2eCFGhvdXNlb2ZndWFyYW50ZWVzLm5vggtsc21jZXJ0LmNvbYIXd3d3Lmxp
YmVydHljZXJ0cy5jb20uc2eCD3d3dy5sc21jZXJ0LmNvbYIad3d3LmxpYmVydHlt
dXR1YWxzdXJldHkuYmWCGnd3dy5saWJlcnR5bXV0dWFsc3VyZXR5Lm5sghZsaWJl
cnR5bXV0dWFsc3VyZXR5LmJlghZsaWJlcnR5bXV0dWFsc3VyZXR5Lm5sghZEUi5s
aWJlcnR5Y2FyZ28uY29tLmF1ghZEUi5saWJlcnR5cXVvdGUuY29tLmF1giNhZ2Vu
dHMubGliZXJ0eW11dHVhbHN1cmV0eS5sbWlnLmNvbYIaYnVzaW5lc3MubGliZXJ0
eW11dHVhbC5jb22CHnd3dy5idXNpbmVzcy5saWJlcnR5bXV0dWFsLmNvbYISbGli
ZXJ0eWFzc2VtYmxlLmNhghZ3d3cubGliZXJ0eWFzc2VtYmxlLmNhghRob3VzZW9m
Z3VhcmFudGVlcy5zZYIgZ2xvYmFsY2xhaW1jZW50ZXItYmF0Y2gubG1pZy5jb22C
LGF1dGhvcml6YXRpb24tcG9saWN5LWFwaS1wcm9kdWN0aW9uLmxtaWcuY29tgiBs
aWJlcnR5c3BlY2lhbHR5bWFya2V0c2xhdGFtLmNvbYIkd3d3LmxpYmVydHlzcGVj
aWFsdHltYXJrZXRzbGF0YW0uY29tghduYXltdS5saWJlcnR5bXV0dWFsLmNvbYIU
bGl1LWxhdGluYW1lcmljYS5jb22CG3NlcmYuYXdzLmxpYmVydHlmaWFuemFzLmNv
bYIRd3d3LmJvcmdvbmxpbmUubmyCEXd3dy5ib3Jnb25saW5lLmJlghV3d3cubmF0
aW9uYWxlYm9yZy5jb22CEG5hdGlvbmFsZWJvcmcubmyCEG5hdGlvbmFsZWJvcmcu
YmWCFHd3dy5uYXRpb25hbGVib3JnLm5sghR3d3cubmF0aW9uYWxlYm9yZy5iZYIR
bmF0aW9uYWxlYm9yZy5jb22CEG5hdGlvbmFsZWJvcmcuZGWCEG5hdGlvbmFsZWJv
cmcuZXWCEG5hdGlvbmFsZWJvcmcuZnKCEG5hdGlvbmFsZWJvcmcubHWCEW5hdGlv
bmFsZWJvcmcub3JnghBuYXRpb25hbGVib3JnLnVrghd3d3cubmF0aW9uYWxlYm9y
Z3JlLmNvbYIdbGliZXJ0eXNwZWNpYWx0eW1hcmtldHNhcC5jb22CIXd3dy5saWJl
cnR5c3BlY2lhbHR5bWFya2V0c2FwLmNvbYIjbWVkaWEubGliZXJ0eXNwZWNpYWx0
eW1hcmtldHNhcC5jb22CInd3dy5saWJlcnR5c3BlY2lhbHR5bWFya2V0cy5jb20u
YXWCHmxpYmVydHlzcGVjaWFsdHltYXJrZXRzLmNvbS5hdYI2d3d3LnBvbGljeWRv
Y3VtZW50YXRpb24ubGliZXJ0eXNwZWNpYWx0eW1hcmtldHMuY29tLmF1gjJwb2xp
Y3lkb2N1bWVudGF0aW9uLmxpYmVydHlzcGVjaWFsdHltYXJrZXRzLmNvbS5hdYIi
d3d3LmxpYmVydHlzcGVjaWFsdHltYXJrZXRzLmNvbS5zZ4IebGliZXJ0eXNwZWNp
YWx0eW1hcmtldHMuY29tLnNngh5saWJlcnR5c3BlY2lhbHR5bWFya2V0cy5jb20u
aGuCInd3dy5saWJlcnR5c3BlY2lhbHR5bWFya2V0cy5jb20uaGuCHmxpYmVydHlz
cGVjaWFsdHltYXJrZXRzLmNvbS5teYIid3d3LmxpYmVydHlzcGVjaWFsdHltYXJr
ZXRzLmNvbS5teYIncG9saWN5ZG9jdW1lbnRhdGlvbi5saXVhdXN0cmFsaWEuY29t
LmF1git3d3cucG9saWN5ZG9jdW1lbnRhdGlvbi5saXVhdXN0cmFsaWEuY29tLmF1
ghZ3d3cubGl1YXNpYXBhY2lmaWMuY29tghJsaXVhc2lhcGFjaWZpYy5jb22CE2xp
dWF1c3RyYWxpYS5jb20uYXWCF3d3dy5saXVhdXN0cmFsaWEuY29tLmF1ghNsaXVz
aW5nYXBvcmUuY29tLnNnghd3d3cubGl1c2luZ2Fwb3JlLmNvbS5zZ4ISbGl1aG9u
Z2tvbmcuY29tLmhrghZ3d3cubGl1aG9uZ2tvbmcuY29tLmhrghJsaXVtYWxheXNp
YS5jb20ubXmCFnd3dy5saXVtYWxheXNpYS5jb20ubXmCJGFzc2V0cy5saWJlcnR5
c3BlY2lhbHR5bWFya2V0c2FwLmNvbYIZYXNzZXRzLmxpdWFzaWFwYWNpZmljLmNv
bYITbmF0aW9uYWxlYm9yZ3JlLmNvbYINYm9yZ29ubGluZS5ubIINYm9yZ29ubGlu
ZS5iZYISbGliZXJ0eWZpYW56YXMuY29tghVsaWJlcnR5c2VndXJvcy5jb20ubXiC
GXd3dy5saWJlcnR5c2VndXJvcy5jb20ubXiCGXd3dy5saWJlcnR5c2VndXJvcy5j
b20ucHKCJXd3dy5jb250cmF0YWZpYW56YS5saWJlcnR5Zmlhbnphcy5jb22CI2Ns
YWltcG9ydGFsLmxpYmVydHltdXR1YWxzdXJldHkuY29tgh1ncnMtYmlsbGluZy1w
YXJhbGxlbC5sbWlnLmNvbYInY2xhaW1wb3J0YWwtYXBpLmxpYmVydHltdXR1YWxz
dXJldHkuY29tgiB3Yy1pc29iYXRjaC1ucC5saWJlcnR5bXV0dWFsLmNvbYIdd2Mt
aXNvYmF0Y2gubGliZXJ0eW11dHVhbC5jb22CHGJsbWctZm9ybXMubGliZXJ0eW11
dHVhbC5jb22CHGNvdGl6YWRvci5saWJlcnR5Zmlhbnphcy5jb22CDWlyb25zaG9y
ZS5jb22CFXdjY2xhaW1zLmlzby5sbWlnLmNvbYIlc2VndXJvLWdhcmFudGlhLmxp
YmVydHlzZWd1cm9zLmNvbS5icoIjaG9sZC1hZ2VudHMubGliZXJ0eW11dHVhbHN1
cmV0eS5jb22CFnNnZi5saWJlcnR5Zmlhbnphcy5jb22CHmVucm9sbC5saWJlcnR5
bXV0dWFsc3VyZXR5LmNvbYIWbGliZXJ0eXRyYWRlY3JlZGl0LmNvbYIPbGliZXJ0
eW1idGMuY29tgiVoZWxtc21hbm1hbmFnZW1lbnRwcm92aWRlcnN1cHBvcnQuY29t
gil3d3cuaGVsbXNtYW5tYW5hZ2VtZW50cHJvdmlkZXJzdXBwb3J0LmNvbYIabGli
ZXJ0eXNwZWNpYWx0eW1hcmtldHMuYXWCHnd3dy5saWJlcnR5c3BlY2lhbHR5bWFy
a2V0cy5hdYIObGl1cXVvdGUuY28udWuCFXd3dy5saWJlcnR5bGlua2FwLmNvbYIR
bGliZXJ0eWxpbmthcC5jb22CFHJldmlldy5pZDNlLmxtaWcuY29tgh53bHNxdW90
YXRpb24ubGliZXJ0eXNlZ3Vyb3MuY2+CFXNkaS5saWJlcnR5bXV0dWFsLmNvbTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBMG
A1UdIAQMMAowCAYGZ4EMAQICMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwA/
F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY09IIbUAAAEAwBIMEYC
IQDnezSau9Ox4S5DcWNhL4hlntL9nPOmt8KaLSugeIqOzQIhAMx1jONfZLnkccgw
3wIhqNQxgB0lloYQmYRC7fFaYr62AHYAouMK5EXvva2bfjjtR2d3U9eCW4SU1yte
GyzEuVCkR+cAAAGNPSCG0wAABAMARzBFAiBueW2prgrzoQe7ggeMN5cJsWaz7eFS
KlUSB61d6Jr1WQIhAPAMZRE911a/B5EZIzVYSrGQLmA9RB8b4H4qSprpYbbqAHcA
dv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGNPSCGtAAABAMASDBG
AiEA2P0jaaZUYzr7mEgmvtKDnGaZaOZTMIkw1NmZVMwrOV0CIQDpKrVCuDEVazmV
pgtfUh+TJe0JdrqMWbPRY1AbW8nEezANBgkqhkiG9w0BAQsFAAOCAQEAlc1wedDL
dOGC5cxEebVCmS4MNvSLMHPaBTNp1s69kaalU/h8oLEJFH51AO4fhtmv5Rc2Lvwl
q1Qr0ImyIiLCCnVA2CVDOT5XBSxEaRTXrMqs4PJOYnp/HiFedKiHc4k+NNNY72dh
IojeUZe6xSwFhQAIsBMyf4xjG87wLuQbxMgBaAH1G4IsHv09YcpqxXklE9eTCmh3
SIyCl1T//rpItqcfkFwiw/d0RS2MZ3OYzpvCUyBOV15iTB73qYASsBb0uCCIYCfu
dz7U+UykYg4GZAg4RGMkbqgthFbIDN+al6CrwlCZvKNCdcIR9AYvok/veO/0bwrE
uKLHh1WlUHK/5Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8b0E+qofzwqrGy0D0ZO2
kzHC+uEW0zLizMuobXAC0UVBoVL6m5DgbH9gQnNL/p8fCoHfnwXmiM2KGQJJOVBt
kWW9PXXG1fxz00lxrawyvGxsUfuiGZdsYn8e9iu9KZkrDdMWiO9HM1iym3zZfcM1
shFIAf/apgN/W/rzXpeXfBQXGGX2e6rG19O/IwyTxvMWsWZrwzT2EI5ckgp6WVex
4lFuj/JxxFW2JAu+QYHBS5SooOLKip9y6u/d3eKVl7oeOVwjBQSl9fnEDZm4NPjM
nKUxYehRNVs++UsCxqTrHh5inBmjq+ivL0qwgBSsMZDuCCa+LLSQUOqGUpamIM2R
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100252486467321824386782909333084023943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 20:19:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-28 20:19:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertycerts.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30516640461480667256597163496761181500866697609723171099683940379479321826628836398605320448806626996156562167262533896067499438006164222643104032344436213338905605373339240352218851804627336041789006755531010275615572578566351652908983915938466029981297256641987423384000964230790333771373001943565526023522305813666132119784126540484267970295956486039698130371344081071219105645003563973787586594273069096361672066980906361811624169972734391838812270079088231913142286951974764866170002087045317022792569411673277761568716635529716441773440618287091997145580141598735869740674174667268327627048254658850824907493651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6980fec2453aac09546bfca8edc6358775561a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2706 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseofguarantees.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseofguarantees.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-billing-parallel.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal-api.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blmg-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytradecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymbtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlsquotation.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdi.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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