libertycerts.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4a:a0:4a:98:70:37:8b:de:7c:19:3f:c4:e9:f5:2b:b8 was issued on by Entrust, Inc..

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:a0:4a:98:70:37:8b:de:7c:19:3f:c4:e9:f5:2b:b8
Serial Number (int): 99195152161170191940367292384777939896
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 86:ef:19:be:ba:ff:65:cf:c8:16:57:23:fd:1d:80:5f:06:08:3f:50
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 34:0a:9d:33:45:b9:f9:fe:d7:3a:f5:15:07:97:89:be:35:ee:ef:cb
Fingerprint (sha256): c0:e2:25:b2:2a:58:ac:ce:02:1e:ab:4b:33:64:8a:46:73:7d:04:bc:75:ed:ef:dc:5f:85:53:de:09:38:63:d6

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate libertycerts.com.sg

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertycerts.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libertycerts.com.sg
lsmcert.com
www.libertycerts.com.sg
www.lsmcert.com
www.libertymutualsurety.be
www.libertymutualsurety.nl
libertymutualsurety.be
libertymutualsurety.nl
DR.libertycargo.com.au
DR.libertyquote.com.au
agents.libertymutualsurety.lmig.com
business.libertymutual.com
www.business.libertymutual.com
libertyassemble.ca
www.libertyassemble.ca
globalclaimcenter-batch.lmig.com
authorization-policy-api-production.lmig.com
libertyspecialtymarketslatam.com
www.libertyspecialtymarketslatam.com
naymu.libertymutual.com
liu-latinamerica.com
serf.aws.libertyfianzas.com
www.borgonline.nl
www.borgonline.be
www.nationaleborg.com
nationaleborg.nl
nationaleborg.be
www.nationaleborg.nl
www.nationaleborg.be
nationaleborg.com
nationaleborg.co.uk
nationaleborg.de
nationaleborg.eu
nationaleborg.fr
nationaleborg.lu
nationaleborg.org
nationaleborg.uk
www.nationaleborgre.com
libertyspecialtymarketsap.com
www.libertyspecialtymarketsap.com
media.libertyspecialtymarketsap.com
www.libertyspecialtymarkets.com.au
libertyspecialtymarkets.com.au
www.policydocumentation.libertyspecialtymarkets.com.au
policydocumentation.libertyspecialtymarkets.com.au
www.libertyspecialtymarkets.com.sg
libertyspecialtymarkets.com.sg
libertyspecialtymarkets.com.hk
www.libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.my
www.libertyspecialtymarkets.com.my
policydocumentation.liuaustralia.com.au
www.policydocumentation.liuaustralia.com.au
www.liuasiapacific.com
liuasiapacific.com
liuaustralia.com.au
www.liuaustralia.com.au
liusingapore.com.sg
www.liusingapore.com.sg
liuhongkong.com.hk
www.liuhongkong.com.hk
liumalaysia.com.my
www.liumalaysia.com.my
assets.libertyspecialtymarketsap.com
assets.liuasiapacific.com
nationaleborgre.com
borgonline.nl
borgonline.be
libertyfianzas.com
libertyseguros.com.mx
libertyseguros.com.pr
www.libertyseguros.com.mx
www.libertyseguros.com.pr
www.contratafianza.libertyfianzas.com
claimportal.libertymutualsurety.com
grs-billing-parallel.lmig.com
claimportal-api.libertymutualsurety.com
wc-isobatch-np.libertymutual.com
wc-isobatch.libertymutual.com
blmg-forms.libertymutual.com
cotizador.libertyfianzas.com
ironshore.com
wcclaims.iso.lmig.com
seguro-garantia.libertyseguros.com.br
hold-agents.libertymutualsurety.com
sgf.libertyfianzas.com
enroll.libertymutualsurety.com
libertytradecredit.com
libertymbtc.com
helmsmanmanagementprovidersupport.com
www.helmsmanmanagementprovidersupport.com
libertyspecialtymarkets.au
www.libertyspecialtymarkets.au
liuquote.co.uk
www.libertylinkap.com
libertylinkap.com
review.id3e.lmig.com
wlsquotation.libertyseguros.co
sdi.libertymutual.com

Other certificates including the domain name libertycerts.com.sg

(limited to 100 certificates)
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg

Certificate

The complete raw certificate details for libertycerts.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMnic8CuMtAT25+9tKTN
WWpz2bEeheaM3R+5iwvczxIrhSNLCniUBUoX0na8WVBWYMbs9xmv/3fvV1PnNOxy
VYMPFmPnR4WKbMUNFBrN1Porfcf1nXs+tTtkkAtBLQNtVYEc45utwe9XK5T1Vis/
i7RtE2dY+TKFrHU9Hb8PALETC24rLSdVzMAiRu0BQKjFIVySsW4JGHIBBwzGtDbZ
gKwU1S5SNJcNOIWZB955t0z4l1IpOLZUOdFXL27y2vUF8FgQ0lkq37HbT45Tamdf
NbQataBgcsvHqFKm7Ok6zWIzekxDLbYxFGqGRK8vSNuZBAHDJdQJma6r0ML0nHqj
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 99195152161170191940367292384777939896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-17 15:13:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 15:13:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertycerts.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19287775351011243257036991430428107989817110945145758464489774950961815498153416481942790421487994519714238466524207314873776140948378899191652853284926558366477373416595719077709520940676127209292469287389331940981707626281193064326246651496897538579080607472825093654807722365751811657890694120719747434359655167211878630329806301084786640584282725563361052518840246625838456649861586947686333504902663051373372277665469404726936191724695375370415736828089000776341913446090486274914725926306641656389020761024646272278061588031083575116841835027927712225694965742223383754964016097379796852252192693164685867524891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86ef19bebaff65cfc8165723fd1d805f06083f50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2706 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-billing-parallel.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal-api.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blmg-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytradecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymbtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'review.id3e.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlsquotation.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdi.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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