libertycerts.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1c:8f:a7:bf:7a:f0:51:7a:5b:12:87:7a:47:77:e8:26 was issued on by Entrust, Inc..

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:8f:a7:bf:7a:f0:51:7a:5b:12:87:7a:47:77:e8:26
Serial Number (int): 37964284665778673009297693607254812710
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: d6:0f:a7:a4:f9:e4:e6:9a:2e:41:45:d3:96:14:95:2c:13:65:55:d1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 50:a3:d3:c7:be:8d:77:ab:f1:2e:1d:ce:b9:ee:7d:bc:3a:3f:91:0e
Fingerprint (sha256): b1:77:18:e0:84:8a:ef:cd:3c:81:4f:88:80:f3:77:e7:48:96:19:43:23:ce:75:0a:c2:b8:22:bc:21:a3:3b:7f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate libertycerts.com.sg

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertycerts.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libertycerts.com.sg
www.libertylinkap.com
liuquote.co.uk
www.libertyspecialtymarkets.au
libertyspecialtymarkets.au
www.helmsmanmanagementprovidersupport.com
helmsmanmanagementprovidersupport.com
libertymbtc.com
libertytradecredit.com
enroll.libertymutualsurety.com
sgf.libertyfianzas.com
hold-agents.libertymutualsurety.com
seguro-garantia.libertyseguros.com.br
wcclaims.iso.lmig.com
ironshore.com
cotizador.libertyfianzas.com
blmg-forms.libertymutual.com
wc-isobatch.libertymutual.com
wc-isobatch-np.libertymutual.com
claimportal-api.libertymutualsurety.com
grs-billing-parallel.lmig.com
claimportal.libertymutualsurety.com
www.contratafianza.libertyfianzas.com
www.libertyseguros.com.pr
www.libertyseguros.com.mx
libertyseguros.com.pr
libertyseguros.com.mx
libertyfianzas.com
borgonline.be
borgonline.nl
nationaleborgre.com
assets.liuasiapacific.com
assets.libertyspecialtymarketsap.com
www.liumalaysia.com.my
liumalaysia.com.my
www.liuhongkong.com.hk
liuhongkong.com.hk
www.liusingapore.com.sg
liusingapore.com.sg
www.liuaustralia.com.au
liuaustralia.com.au
liuasiapacific.com
www.liuasiapacific.com
www.policydocumentation.liuaustralia.com.au
policydocumentation.liuaustralia.com.au
www.libertyspecialtymarkets.com.my
libertyspecialtymarkets.com.my
www.libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.sg
www.libertyspecialtymarkets.com.sg
policydocumentation.libertyspecialtymarkets.com.au
www.policydocumentation.libertyspecialtymarkets.com.au
libertyspecialtymarkets.com.au
www.libertyspecialtymarkets.com.au
media.libertyspecialtymarketsap.com
www.libertyspecialtymarketsap.com
libertyspecialtymarketsap.com
nationaleborg.net
www.nationaleborgre.com
nationaleborg.uk
nationaleborg.org
nationaleborg.lu
nationaleborg.fr
nationaleborg.eu
nationaleborg.de
nationaleborg.co.uk
nationaleborg.com
www.nationaleborg.be
www.nationaleborg.nl
nationaleborg.be
nationaleborg.nl
www.nationaleborg.com
www.borgonline.be
www.borgonline.nl
serf.aws.libertyfianzas.com
liu-latinamerica.com
naymu.libertymutual.com
www.libertyspecialtymarketslatam.com
libertyspecialtymarketslatam.com
authorization-policy-api-production.lmig.com
globalclaimcenter-batch.lmig.com
www.libertyassemble.ca
libertyassemble.ca
www.business.libertymutual.com
business.libertymutual.com
agents.libertymutualsurety.lmig.com
DR.libertyquote.com.au
DR.libertycargo.com.au
libertymutualsurety.nl
libertymutualsurety.be
www.libertymutualsurety.nl
www.libertymutualsurety.be
www.lsmcert.com
www.libertycerts.com.sg
lsmcert.com

Other certificates including the domain name libertycerts.com.sg

(limited to 100 certificates)
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg

Certificate

The complete raw certificate details for libertycerts.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQ/zCCD+egAwIBAgIQHI+nv3rwUXpbEod6R3foJjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MzAxMDUxNjExNDVaFw0yNDAxMjgxNjExNDNaMHcxCzAJBgNVBAYTAlVTMRYwFAYD
VQQIEw1OZXcgSGFtcHNoaXJlMRMwEQYDVQQHEwpQb3J0c21vdXRoMR0wGwYDVQQK
ExRMaWJlcnR5IE11dHVhbCBHcm91cDEcMBoGA1UEAxMTbGliZXJ0eWNlcnRzLmNv
bS5zZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMIqmyBPuNxyw3V3
XLdWhD3E7CYawpk7KghlsJmGOnB6BccChO6oCwQezbaooPqR/dhA9JTh4ATzMoAN
1KM6NKs4A8UdvGocQ9wKcJe27124ECyBw1ydtueBkleD+zVF6T8cQQy2dGgx3ewg
JFoconQGvH/o54XCWyjokZZZBcfX96rB/VnNWd1qGJO+ukzEOtv/lrTfrQ+/Oz4P
yPvtdcbQMuQmNC591Xve68+b4XEX3BqJmdoiFXkIlz2/a2rzKHNNahQOn/qAlnPM
5dT+mWn56uJX97FjxGqESiRpmNko3V6MUda9ruGcTB37akRGpRgzLFDe/mNs0yBh
AsmUsg0CAwEAAaOCDUEwgg09MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNYPp6T5
5OaaLkFF05YUlSwTZVXRMB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/
MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVz
dC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNo
YWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3Qu
bmV0L2xldmVsMWsuY3JsMIIKTgYDVR0RBIIKRTCCCkGCE2xpYmVydHljZXJ0cy5j
b20uc2eCFXd3dy5saWJlcnR5bGlua2FwLmNvbYIObGl1cXVvdGUuY28udWuCHnd3
dy5saWJlcnR5c3BlY2lhbHR5bWFya2V0cy5hdYIabGliZXJ0eXNwZWNpYWx0eW1h
cmtldHMuYXWCKXd3dy5oZWxtc21hbm1hbmFnZW1lbnRwcm92aWRlcnN1cHBvcnQu
Y29tgiVoZWxtc21hbm1hbmFnZW1lbnRwcm92aWRlcnN1cHBvcnQuY29tgg9saWJl
cnR5bWJ0Yy5jb22CFmxpYmVydHl0cmFkZWNyZWRpdC5jb22CHmVucm9sbC5saWJl
cnR5bXV0dWFsc3VyZXR5LmNvbYIWc2dmLmxpYmVydHlmaWFuemFzLmNvbYIjaG9s
ZC1hZ2VudHMubGliZXJ0eW11dHVhbHN1cmV0eS5jb22CJXNlZ3Vyby1nYXJhbnRp
YS5saWJlcnR5c2VndXJvcy5jb20uYnKCFXdjY2xhaW1zLmlzby5sbWlnLmNvbYIN
aXJvbnNob3JlLmNvbYIcY290aXphZG9yLmxpYmVydHlmaWFuemFzLmNvbYIcYmxt
Zy1mb3Jtcy5saWJlcnR5bXV0dWFsLmNvbYIdd2MtaXNvYmF0Y2gubGliZXJ0eW11
dHVhbC5jb22CIHdjLWlzb2JhdGNoLW5wLmxpYmVydHltdXR1YWwuY29tgidjbGFp
bXBvcnRhbC1hcGkubGliZXJ0eW11dHVhbHN1cmV0eS5jb22CHWdycy1iaWxsaW5n
LXBhcmFsbGVsLmxtaWcuY29tgiNjbGFpbXBvcnRhbC5saWJlcnR5bXV0dWFsc3Vy
ZXR5LmNvbYIld3d3LmNvbnRyYXRhZmlhbnphLmxpYmVydHlmaWFuemFzLmNvbYIZ
d3d3LmxpYmVydHlzZWd1cm9zLmNvbS5wcoIZd3d3LmxpYmVydHlzZWd1cm9zLmNv
bS5teIIVbGliZXJ0eXNlZ3Vyb3MuY29tLnByghVsaWJlcnR5c2VndXJvcy5jb20u
bXiCEmxpYmVydHlmaWFuemFzLmNvbYINYm9yZ29ubGluZS5iZYINYm9yZ29ubGlu
ZS5ubIITbmF0aW9uYWxlYm9yZ3JlLmNvbYIZYXNzZXRzLmxpdWFzaWFwYWNpZmlj
LmNvbYIkYXNzZXRzLmxpYmVydHlzcGVjaWFsdHltYXJrZXRzYXAuY29tghZ3d3cu
bGl1bWFsYXlzaWEuY29tLm15ghJsaXVtYWxheXNpYS5jb20ubXmCFnd3dy5saXVo
b25na29uZy5jb20uaGuCEmxpdWhvbmdrb25nLmNvbS5oa4IXd3d3LmxpdXNpbmdh
cG9yZS5jb20uc2eCE2xpdXNpbmdhcG9yZS5jb20uc2eCF3d3dy5saXVhdXN0cmFs
aWEuY29tLmF1ghNsaXVhdXN0cmFsaWEuY29tLmF1ghJsaXVhc2lhcGFjaWZpYy5j
b22CFnd3dy5saXVhc2lhcGFjaWZpYy5jb22CK3d3dy5wb2xpY3lkb2N1bWVudGF0
aW9uLmxpdWF1c3RyYWxpYS5jb20uYXWCJ3BvbGljeWRvY3VtZW50YXRpb24ubGl1
YXVzdHJhbGlhLmNvbS5hdYIid3d3LmxpYmVydHlzcGVjaWFsdHltYXJrZXRzLmNv
bS5teYIebGliZXJ0eXNwZWNpYWx0eW1hcmtldHMuY29tLm15giJ3d3cubGliZXJ0
eXNwZWNpYWx0eW1hcmtldHMuY29tLmhrgh5saWJlcnR5c3BlY2lhbHR5bWFya2V0
cy5jb20uaGuCHmxpYmVydHlzcGVjaWFsdHltYXJrZXRzLmNvbS5zZ4Iid3d3Lmxp
YmVydHlzcGVjaWFsdHltYXJrZXRzLmNvbS5zZ4IycG9saWN5ZG9jdW1lbnRhdGlv
bi5saWJlcnR5c3BlY2lhbHR5bWFya2V0cy5jb20uYXWCNnd3dy5wb2xpY3lkb2N1
bWVudGF0aW9uLmxpYmVydHlzcGVjaWFsdHltYXJrZXRzLmNvbS5hdYIebGliZXJ0
eXNwZWNpYWx0eW1hcmtldHMuY29tLmF1giJ3d3cubGliZXJ0eXNwZWNpYWx0eW1h
cmtldHMuY29tLmF1giNtZWRpYS5saWJlcnR5c3BlY2lhbHR5bWFya2V0c2FwLmNv
bYIhd3d3LmxpYmVydHlzcGVjaWFsdHltYXJrZXRzYXAuY29tgh1saWJlcnR5c3Bl
Y2lhbHR5bWFya2V0c2FwLmNvbYIRbmF0aW9uYWxlYm9yZy5uZXSCF3d3dy5uYXRp
b25hbGVib3JncmUuY29tghBuYXRpb25hbGVib3JnLnVrghFuYXRpb25hbGVib3Jn
Lm9yZ4IQbmF0aW9uYWxlYm9yZy5sdYIQbmF0aW9uYWxlYm9yZy5mcoIQbmF0aW9u
YWxlYm9yZy5ldYIQbmF0aW9uYWxlYm9yZy5kZYITbmF0aW9uYWxlYm9yZy5jby51
a4IRbmF0aW9uYWxlYm9yZy5jb22CFHd3dy5uYXRpb25hbGVib3JnLmJlghR3d3cu
bmF0aW9uYWxlYm9yZy5ubIIQbmF0aW9uYWxlYm9yZy5iZYIQbmF0aW9uYWxlYm9y
Zy5ubIIVd3d3Lm5hdGlvbmFsZWJvcmcuY29tghF3d3cuYm9yZ29ubGluZS5iZYIR
d3d3LmJvcmdvbmxpbmUubmyCG3NlcmYuYXdzLmxpYmVydHlmaWFuemFzLmNvbYIU
bGl1LWxhdGluYW1lcmljYS5jb22CF25heW11LmxpYmVydHltdXR1YWwuY29tgiR3
d3cubGliZXJ0eXNwZWNpYWx0eW1hcmtldHNsYXRhbS5jb22CIGxpYmVydHlzcGVj
aWFsdHltYXJrZXRzbGF0YW0uY29tgixhdXRob3JpemF0aW9uLXBvbGljeS1hcGkt
cHJvZHVjdGlvbi5sbWlnLmNvbYIgZ2xvYmFsY2xhaW1jZW50ZXItYmF0Y2gubG1p
Zy5jb22CFnd3dy5saWJlcnR5YXNzZW1ibGUuY2GCEmxpYmVydHlhc3NlbWJsZS5j
YYIed3d3LmJ1c2luZXNzLmxpYmVydHltdXR1YWwuY29tghpidXNpbmVzcy5saWJl
cnR5bXV0dWFsLmNvbYIjYWdlbnRzLmxpYmVydHltdXR1YWxzdXJldHkubG1pZy5j
b22CFkRSLmxpYmVydHlxdW90ZS5jb20uYXWCFkRSLmxpYmVydHljYXJnby5jb20u
YXWCFmxpYmVydHltdXR1YWxzdXJldHkubmyCFmxpYmVydHltdXR1YWxzdXJldHku
YmWCGnd3dy5saWJlcnR5bXV0dWFsc3VyZXR5Lm5sghp3d3cubGliZXJ0eW11dHVh
bHN1cmV0eS5iZYIPd3d3LmxzbWNlcnQuY29tghd3d3cubGliZXJ0eWNlcnRzLmNv
bS5zZ4ILbHNtY2VydC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjBMBgNVHSAERTBDMDcGCmCGSAGG+mwKAQUwKTAnBggr
BgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjCC
AX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYAVYHUwhaQNgFK6gubVzxT8MDkOHhw
JQgXL6OqHQcT0wwAAAGFgrPjVgAABAMARzBFAiBs37eSfi6S/Lpj/Cdk1iENoH+p
5Dg3P3BiYA5+YcQDgwIhAMxU7hvBqcLe7q75N7FkCjUCoFp+jC9136lDI5Ngv8XO
AHUAc9meiRtMlnigIH1HneayxhzQUV5xGSqMa4AQesF3crUAAAGFgrPjdgAABAMA
RjBEAiA++J+upCQK6euDs30XX+SFo2BIijVGZwWcbtnKQolWygIgLNqqpb+1f5Z2
Zj7CLtavhXv36vYrYRbj0YY/YH3YMs4AdgB2/4g/Crb7lVHCYcz1h7o0tKTNuync
aEIKn+ZnTFo6dAAAAYWCs+QxAAAEAwBHMEUCIEVMxnG2Bc5O0D0o7N/xZVmQEQSs
gIlLUtxueY9fNUyiAiEAmZmPKy0t2Z0A8kWkQBDOnbkEPoTI9vL7iVQP8tVCyyow
DQYJKoZIhvcNAQELBQADggEBAKNzBpN85+0a0gAR8Z1dNVSZlTlJDaWzOopAWkFS
W/gWUqJv4iR7BqYrSq3BbgOHVV3msegLTw8xKb3yimoQx4efzSSaXryQLUXJXHZQ
SyKV+kbd1z6+HWsBdDM+1bJUPVe2TxoBLxwmSJNBl+V8ppOIdk8vtdqog4URaZlt
eoyB35u9dEF1H4p8MGC1qUmFjTTR8wwE+x/rR5BVKZhOqC8+LlBn1FBwi43P6OQm
da6oZCZXDQyo3yX2EvTbuQHonNhK+irAgu7ytWb73eIycBvcsMxq8fP3dsA8tju/
csZfLKEh+rNMCwl7GNb3Qaz0rcw+kyAlrati25MdOKKOa3Q=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiqbIE+43HLDdXdct1aE
PcTsJhrCmTsqCGWwmYY6cHoFxwKE7qgLBB7Ntqig+pH92ED0lOHgBPMygA3Uozo0
qzgDxR28ahxD3Apwl7bvXbgQLIHDXJ2254GSV4P7NUXpPxxBDLZ0aDHd7CAkWhyi
dAa8f+jnhcJbKOiRllkFx9f3qsH9Wc1Z3WoYk766TMQ62/+WtN+tD787Pg/I++11
xtAy5CY0Ln3Ve97rz5vhcRfcGomZ2iIVeQiXPb9ravMoc01qFA6f+oCWc8zl1P6Z
afnq4lf3sWPEaoRKJGmY2SjdXoxR1r2u4ZxMHftqREalGDMsUN7+Y2zTIGECyZSy
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37964284665778673009297693607254812710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-05 16:11:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 16:11:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertycerts.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24511240946215927208205307666377492750969665194277437940642440377100161279246333980352400092333630257893384061847327195086646751344423918787272600454786150691714426854140992320774540042550432515707176986546737565964993475516207496332541008660149253886741695130839328108542532319540602279717873268939985908923109093535920806568080981497262060213921832678845710134254083532231212505430718124386573541595691875656662319515492235595898178020275526229612635981370301521665094299871352808703410804626663765732181499134390269517284280272807735067813458002315553329941860761769467923362145955395138354360163543846083607441933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d60fa7a4f9e4e69a2e4145d39614952c136555d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2629 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymbtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytradecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blmg-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal-api.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-billing-parallel.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmcert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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