cs-pool-03p.lm.lmig.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 5b:fb:07:71:1b:00:07:b5:00:00:00:00:50:f7:df:a5 was issued on by Entrust, Inc..

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Hosting
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:fb:07:71:1b:00:07:b5:00:00:00:00:50:f7:df:a5
Serial Number (int): 122263165065925307503173087051243839397
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 17:02:e2:a8:eb:5e:ca:fd:3f:b6:5f:55:b5:6f:eb:d3:85:6d:bd:76
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 0b:fe:47:24:98:fb:d2:c7:fe:3e:93:84:db:4b:47:d0:ea:fa:04:b4
Fingerprint (sha256): a9:ef:fc:37:92:0d:29:88:4b:1d:be:a1:7c:28:0b:13:bf:19:69:a6:10:b2:a7:7b:7d:52:2d:8d:39:4d:4c:e1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate cs-pool-03p.lm.lmig.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs-pool-03p.lm.lmig.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs-pool-03p.lm.lmig.com
sip.libertymutual.com
sip.libertygts.com
sip.pembrokeunderwriting.com
sip.ironshore.com
sip.libertyglobalgroup.com
sip.helmsmantpa.com
sip.libertyiu.com
sip.safeco.com
sip.montgomery-ins.com
sip.liberty-IT.co.uk
sip.libertyInternational.com
sip.americafirst-ins.com
sip.lmi.com
sip.libertyfianzas.com
sip.libertyinsurance.com.sg
sip.libertyinsurance.com.vn
sip.lmginsurance.co.th
sip.libertymutual.com.hk
sip.libertyseguros.com.br
sip.liberty.cl
sip.liberty.ec
sip.libertyinsurance.ie
sip.libertyeurope.ie
sip.libertyseguros.pt
sip.libertyseguros.es
sip.Libertycolombia.com
lyncdiscover.libertymutual.com
lyncdiscover.libertygts.com
lyncdiscover.pembrokeunderwriting.com
lyncdiscover.ironshore.com
lyncdiscover.libertyglobalgroup.com
lyncdiscover.helmsmantpa.com
lyncdiscover.libertyiu.com
lyncdiscover.safeco.com
lyncdiscover.montgomery-ins.com
lyncdiscover.liberty-IT.co.uk
lyncdiscover.libertyInternational.com
lyncdiscover.americafirst-ins.com
lyncdiscover.lmi.com
lyncdiscover.libertyfianzas.com
lyncdiscover.libertyinsurance.com.sg
lyncdiscover.libertyinsurance.com.vn
lyncdiscover.lmginsurance.co.th
lyncdiscover.libertymutual.com.hk
lyncdiscover.libertyseguros.com.br
lyncdiscover.liberty.cl
lyncdiscover.liberty.ec
lyncdiscover.libertyinsurance.ie
lyncdiscover.libertyeurope.ie
lyncdiscover.libertyseguros.pt
lyncdiscover.libertyseguros.es
lyncdiscover.libertycolombia.com
LyncdiscoverInternal.libertymutual.com
LyncdiscoverInternal.libertygts.com
LyncdiscoverInternal.pembrokeunderwriting.com
Lyncdiscoverinternal.ironshore.com
Lyncdiscoverinternal.libertyglobalgroup.com
LyncdiscoverInternal.helmsmantpa.com
LyncdiscoverInternal.libertyiu.com
LyncdiscoverInternal.safeco.com
LyncdiscoverInternal.montgomery-ins.com
LyncdiscoverInternal.liberty-IT.co.uk
LyncdiscoverInternal.libertyInternational.com
LyncdiscoverInternal.americafirst-ins.com
Lyncdiscoverinternal.lmi.com
Lyncdiscoverinternal.libertyfianzas.com
Lyncdiscoverinternal.libertyinsurance.com.sg
Lyncdiscoverinternal.libertyinsurance.com.vn
Lyncdiscoverinternal.lmginsurance.co.th
Lyncdiscoverinternal.libertymutual.com.hk
Lyncdiscoverinternal.libertyseguros.com.br
Lyncdiscoverinternal.liberty.cl
Lyncdiscoverinternal.liberty.ec
Lyncdiscoverinternal.libertyinsurance.ie
Lyncdiscoverinternal.libertyeurope.ie
Lyncdiscoverinternal.libertyseguros.pt
Lyncdiscoverinternal.libertyseguros.es
Lyncdiscoverinternal.libertycolombia.com
dialin.libertymutual.com
join.helmsmantpa.com
join.libertymutual.com
meet.libertymutual.com
cswebext-pool-03p.libertymutual.com
csweb-pool-03p.lm.lmig.com
lm-hssfbfe-p12p.lm.lmig.com
lm-hssfbfe-p11p.lm.lmig.com
lm-hssfbfe-p10p.lm.lmig.com
lm-hssfbfe-p09p.lm.lmig.com
lm-hssfbfe-p08p.lm.lmig.com
lm-hssfbfe-p07p.lm.lmig.com
lm-hssfbfe-p06p.lm.lmig.com
lm-hssfbfe-p05p.lm.lmig.com
lm-hssfbfe-p04p.lm.lmig.com
lm-hssfbfe-p03p.lm.lmig.com
lm-hssfbfe-p02p.lm.lmig.com
lm-hssfbfe-p01p.lm.lmig.com

Other certificates including the domain name lmig.com

(limited to 100 certificates)
prod-eu-west-1-alfresco-repo.aws.lmig.com
ete-claims.safeco.com
*.kdc.paas.lmig.com
uram.lmig.com
atlas-services.lmig.com
cerc-ar.lmig.com
testcommercial.lmig.com
dev-fsda.lmig.com
rdc-registry-nprod.lmig.com
*.eu-west-1.np.paas.lmig.com
relativity.lmig.com
kdc-citbi.lmig.com
vmkip-hjss0001.lm.lmig.com
VMPIP-HSIWAE01.lm.lmig.com
requestit.lmig.com
vmkit-a4swb001.lm.lmig.com
statuspage.io
lm-pmmstgy-d01k.lm.lmig.com
*.app-severless.rancher.sandbox.aws.lmig.com
dev-ap-southeast-2-gs-alfresco-52-saml.aws.lmig.com
www.libertymutual.com
omni-messaging.us-east-1.lmig.com
dial-auditlog-retention.lmig.com
vx-eatknas-p02k.lmig.com.lmig.com
ispoappskdc.lmig.com
ci-envoy-reins-search.lmig.com
ete-claims.safeco.com
85a-sseaesdm1.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
aep-lm-soap-client-invoker.production.us-east-1.aws.lmig.com
amcontactcenter.lmig.com
*.aws.lmig.com
uscm-sasgrid-web.lmig.com
compassdocuments.lmig.com
vxpip-hhspds01.lmig.com
PeopleAtLiberty.com
lmpproducerextranet.lmig.com
lm-ise-psn.lmig.com
test-pmsrc.lmig.com
testAvayaDev.lmig.com
statuspage.io
pfet02k03.lmig.com
cmpsccosrv.lmig.com
lcpet-havsbc01-inside.lmig.com
www.libertyiu.com
1-internal.us-east-1.production.paas.lmig.com
test-import.lmig.com
eip.lmig.com
lmpin-hcybrk02-r.lmig.com
vm-ceg-prd2-1.azr.lmig.com
0055-blox-ext-grid.lmig.com
ete-www2.libertymutual.com
dr-sslvpn-kc.lmig.com
perf-driverrisk.cf.reuse.lmig.com
denodo-solution-manager-non-production.aws.lmig.com
vckit-haespc02.lmig.com
ecr-nocustids-kdc.lmig.com
lsm-fred.lmig.com
comp3-ui.aws.lmig.com
perfandcompstatement.lmig.com
snd-ciapstableau.aws.lmig.com
puma.lmig.com
logging-old.datahub.aws.lmig.com
test-securefile.libertymutual.com
dev-compworkq-cmis.lmig.com
gateway-client.cf.reuse.lmig.com
vendors.test.wem.gde.aws.lmig.com
vxkip-pwaslp05.lmig.com
api.eco-development.lmig.com
pmit-easysuite.lmig.com
cs-tappool-03p.lm.lmig.com
gw-gde-equifax-service.test.wem.gde.aws.lmig.com
0038-sbc-ext-01.lmig.com
lm-hscyrkp-p01p.lm.lmig.com
lmb-datalake-zeppelin-prod.aws.lmig.com
contracts-portal.lmig.com
clworkbench-ws.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
LM-HS-LTAS-A-T01P.LMIG.COM
2pr-rpama.lmig.com
vxpif-p7fsa002.lmig.com
b2b-boomi-batch-kc.lmig.com
wcsvtrigger.lmig.com
vmpip-m566u5fh.lm.lmig.com
bp1054598.saagie.com
vmkip-hvcvdi22.lm.lmig.com
ci-envoy-ppuw-stage-translation.lmig.com
sit-eu-west-1-gs-alfresco.aws.lmig.com
inspire-interactive.development.aws.lmig.com
dev-iam-console.lmig.com
vckip-hcmad201.lmig.com
leservices-imp.lmig.com
ciim-claims-service-test.np.lmig.com
perf-www.liucanada.com
statuspage.io
smart-workflow-rules.lmig.com
grs-informatica-mdm-aws-production.aws.lmig.com
prod-b-us-east-1-ci-alfresco-ingest-share.aws.lmig.com
vmpip-hcypvw03.lm.lmig.com
brmspolicy-uat.libertyinsurance.in

Certificate

The complete raw certificate details for cs-pool-03p.lm.lmig.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LE290GPM09d5KqSoP8b
NiqQezuU1itAddtTD9qAuzgJugFPfhrBLuSI3kKdMMXJthBcWncnn8uSTux2xOWk
iza6wmJ95hdOJ8U5VFELRexkikhLmYcVTp8UnmMsjBczeghi8BChud5M0sxT//a3
zRnV7la5Lha7Bg34j2aV2T76GSxOwEBIW+K+edcg+ZjFEvFlfAfyOhTiXcC9M/Dv
QYExFLXh936kq72KiKYynFH7GKIdNn5Ej3afOF84KuEfyZULfr5IpAwxzVumeJCp
WSGyFhBhtZ9v7Uh4HvFobcyilBfr4O19WzaY9jt7q1ZUtthfaZEnRe7OuIN8991R
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122263165065925307503173087051243839397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 19:34:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-27 20:04:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs-pool-03p.lm.lmig.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29374674582777655827380384973159591615149474344804594482634477061646459524872898778264548981741334056978143314788033360671568678588184267738335646640626575207394040900833345247543787927626938118783504897747979183110346585826237563833391175809192762718729664224933524544452646982496055166839866363509703283358636996264572829763208855399678320850496353679407207949461618115260805093992759283459262813857506882039503674041301161118074541424175120691062991782823234819121819625451256197065782566375179414642916082070775670386257561627619010088987765078837407376733603462516283156576665296335585188700688826855027344495031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (3014 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs-pool-03p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.Libertycolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.libertycolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertygts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.pembrokeunderwriting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyglobalgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertyiu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.montgomery-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.liberty-IT.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.libertyInternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LyncdiscoverInternal.americafirst-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.lmi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyinsurance.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Lyncdiscoverinternal.libertycolombia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.helmsmantpa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cswebext-pool-03p.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csweb-pool-03p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p12p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p11p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p10p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p09p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p08p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p07p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p06p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p05p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p04p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p03p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p02p.lm.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lm-hssfbfe-p01p.lm.lmig.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1702e2a8eb5ecafd3fb65f55b56febd3856dbd76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0030963318e1dc0052188dbaf41582de656f3d56e3572552ab333b23c23390396d202c9d04935530693f02481e350e420100dbf49fa070896d4e70da1b0cf5589236fd5d592c0f4458a3522c68287716b6f5e186ea65a6df7f6ae9ca74b1c468b6b4f15f821bd86bd6d77c726179e347acaa8d76c07cee3707e8e17c6144e0086236ef89af43f4ea54ce6dca1389bdd1daf2229b7a0705cbc04023449e0820e5196f03c7f25b2a6706b9852e4ca7c025bf870a9df4a18a1dcc54bb467039df49df9d6972948eb8ae6f2ca44b9c0f44caa2992d23221b66854f75f9bea361ec1f762d218f68e87a3b3c3f85a18180607865392e087da29f9732343dc074d1168426