clientlist.qa.safeco.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 19:d2:c2:b3:62:7b:03:cd:6c:f5:04:91:c3:09:4f:41 was issued on by Entrust, Inc..

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 19:d2:c2:b3:62:7b:03:cd:6c:f5:04:91:c3:09:4f:41
Serial Number (int): 34325031234697655896802842139651821377
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 30:6f:19:9d:f2:01:e4:50:78:11:a0:7b:af:1c:75:e0:04:f5:08:94
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e4:f2:ed:83:3f:44:35:df:3b:96:89:e6:bb:77:c1:5c:01:b6:8a:7e
Fingerprint (sha256): cb:98:03:ee:1e:1c:6f:bb:1d:07:fe:2e:1e:39:b6:41:f0:ef:25:17:78:a6:e7:cd:66:54:39:f3:92:c0:7b:7b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate clientlist.qa.safeco.com

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clientlist.qa.safeco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clientlist.qa.safeco.com
perf-risktrac-leg1.libertymutual.com
perf-risktrac-leg2.libertymutual.com
test.oneinc-gateway.hydra-crux.libertymutual.com
hold-test-obsc.peerless-ins.com
hold-stage-obsc.libertymutualgroup.com
hold-stage-obsc.peerless-ins.com
test-obsc.ohiocasualty-ins.com
hold-test-obsc.indiana-ins.com
hold-stage-obsc.ohiocasualty-ins.com
test-a-eclaims.safeco.com
staging-eft-enrollment.libertymutual.com
www.dev.lmsafe.co
agency-financials-portal.libertymutual.com
agency-financials-portal-stage.libertymutual.com
test-auto-quote-widget.libertymutual.com
test-partnerservices.libertymutual.com
stage-billinginquiry.libertymutual.com
login-dev.libertymutual.com
test-choice-portal.libertymutual.com
grmus-twilio-media-stream-service-test.libertymutual.com
stage-adp-report.libertymutual.com
login-dev.safeco.com
book-assessment-tool-development.lmig.com
referralprogram-test.libertymutual.com
login-np.safeco.com
stage-bl-identity.libertymutual.com
dev-bl-identity.libertymutual.com
test-fetch.libertymutual.com
test.api.spire.libertymutual.com
test.gpe-hydra-notifications.apac.hydra-crux.libertymutual.com
stage-bl-super-admin-reports.libertymutual.com
test.gpe-generic-payments-page.apac.hydra-crux.libertymutual.com
hold-perf-risktrac.libertymutual.com
hold-stage-agentsportal.libertymutual.com
hold-test-obsc.libertymutualgroup.com
stage-agent-portal-forms.libertymutual.com

Other certificates including the domain name safeco.com

(limited to 100 certificates)
ete-claims.safeco.com
www.libertymutual.com
rewind-webservice.safeco.com
ete-claims.safeco.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
libertymutual.myinstantincentives.com
ete-www2.libertymutual.com
billing.safesite.safeco.com
cswebext-pool-03p.libertymutual.com
cla-haps-http-prd.apps.safeco.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
salescompreporting.safeco.com
test-equote.libertymutual.com
search.libertymutual.com
uat-eservice.safeco.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
dev-a-dpec.safeco.com
ete-www2.libertymutual.com
cm-now.agent.safeco.com
ete-www2.libertymutual.com
dev-i-dpec.safeco.com
MVSA.SAFECO.COM
quotes.safeco.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
ltm-dev-a-dpec.safeco.com
ete-pmds.libertymutual.com
www.libertymutual.com
whalebot.libertymutual.com
search.libertymutual.com
libertymutual.myinstantincentives.com
4-internal.us-east-1.non-production.paas.lmig.com
test.aspire.safeco.com
cs-pool-03k.lm.lmig.com
www.libertymutual.com
2pr-realtimedocs.safeco.com
qni-cpa-np.safeco.com
cswebext-pool-02p.libertymutual.com
uat-agencyservicingpreferences.safeco.com
ete-claims.safeco.com
whalebot.libertymutual.com
customer-pf-pdc.safeco.com
www.libertymutual.com
ete-www2.libertymutual.com
perf-www.libertymutualvantageport.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
qa-rpama.safeco.com
msb-prefill.libertyec.com
perf-dpec.safeco.com
1-internal.us-east-1.production.paas.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
ete-www2.libertymutual.com
sip-kdc-03.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-claims.safeco.com
insurance-agent.safeco.com
pcf-WhrmGXwiYi.us-east-1.non-production.lmig.com
dev-c-docupload.safeco.com
vantageporttest.libertymutual.com
agent.safeco.com
cswebext-pool-03p.libertymutual.com
www.libertymutual.com
www.libertymutual.com
dr-spagent.safeco.com
sip-pdc-03.libertymutual.com
legacysafecodocumentloader.safeco.com
libertymutual.myinstantincentives.com
cswebext-pool-02p.libertymutual.com
af.safeco.com
steps.safeco.com
pmds.libertymutual.com
hsp-dev.aws.lmig.com
dev-af2.safeco.com
stage-steps.safeco.com
www.righttrack.safeco.com
uat-dpec.safeco.com
ete-claims.safeco.com
uat-pi-marketservices.libertyec.com
intranet.safeco.com
safesite.qa.safeco.com
dev-i-dpec.safeco.com
cswebext-pool-03p.libertymutual.com
ete-claims.libertymutual.com
search.libertymutual.com
ete-claims.safeco.com
www.libertymutual.com
www.libertymutual.com
test-steps.safeco.com
bps-prd-be.apps.safeco.com
whalebot.libertymutual.com
ltm-test-a-dpec.safeco.com
www.libertymutual.com
billing.safesite.safeco.com
quote.esurance.qa.safeco.com

Certificate

The complete raw certificate details for clientlist.qa.safeco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKtDCCCZygAwIBAgIQGdLCs2J7A81s9QSRwwlPQTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAxMjYxMTMxMThaFw0yNTAyMDgxMTMxMTZaMHwxCzAJBgNVBAYTAlVTMRYwFAYD
VQQIEw1OZXcgSGFtcHNoaXJlMRMwEQYDVQQHEwpQb3J0c21vdXRoMR0wGwYDVQQK
ExRMaWJlcnR5IE11dHVhbCBHcm91cDEhMB8GA1UEAxMYY2xpZW50bGlzdC5xYS5z
YWZlY28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j8zi39M
ktIIvDNZkcMiRAB5cUJAQTTU2rOBJ2ysCZqDnJ2h45sxoZ2rD3J6n08hPuTJEMVV
uMkWaCA1ps8dmPNEvA4uxkNrgjsTdWEwdJ5vFGo7mApB7F4Y7OFYYepoTjgJnjqs
JZD7V/F66lynkv9WV4FJQAfO92XT6dudjgOp2y5O+gjeIhDbKCeWh9vSqnIyONrH
X27ba+iLmISw/SylCJYx3owoZcpKtZPGuQ1k6xeDYi0MtWkJ8Z/Cqrhez0L2GuL3
8Jz3deg3fn3O+7KsVFjlW00ADVZr/aT+Tl5gwoPCGWDnt6o7MEZah0+AZGjrr9o5
s7Plj/t+H0MscwIDAQABo4IG8TCCBu0wDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
MG8ZnfIB5FB4EaB7rxx14AT1CJQwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+n
YMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5l
bnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9s
MWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50
cnVzdC5uZXQvbGV2ZWwxay5jcmwwggWjBgNVHREEggWaMIIFloIYY2xpZW50bGlz
dC5xYS5zYWZlY28uY29tgiRwZXJmLXJpc2t0cmFjLWxlZzEubGliZXJ0eW11dHVh
bC5jb22CJHBlcmYtcmlza3RyYWMtbGVnMi5saWJlcnR5bXV0dWFsLmNvbYIwdGVz
dC5vbmVpbmMtZ2F0ZXdheS5oeWRyYS1jcnV4LmxpYmVydHltdXR1YWwuY29tgh9o
b2xkLXRlc3Qtb2JzYy5wZWVybGVzcy1pbnMuY29tgiZob2xkLXN0YWdlLW9ic2Mu
bGliZXJ0eW11dHVhbGdyb3VwLmNvbYIgaG9sZC1zdGFnZS1vYnNjLnBlZXJsZXNz
LWlucy5jb22CHnRlc3Qtb2JzYy5vaGlvY2FzdWFsdHktaW5zLmNvbYIeaG9sZC10
ZXN0LW9ic2MuaW5kaWFuYS1pbnMuY29tgiRob2xkLXN0YWdlLW9ic2Mub2hpb2Nh
c3VhbHR5LWlucy5jb22CGXRlc3QtYS1lY2xhaW1zLnNhZmVjby5jb22CKHN0YWdp
bmctZWZ0LWVucm9sbG1lbnQubGliZXJ0eW11dHVhbC5jb22CEXd3dy5kZXYubG1z
YWZlLmNvgiphZ2VuY3ktZmluYW5jaWFscy1wb3J0YWwubGliZXJ0eW11dHVhbC5j
b22CMGFnZW5jeS1maW5hbmNpYWxzLXBvcnRhbC1zdGFnZS5saWJlcnR5bXV0dWFs
LmNvbYIodGVzdC1hdXRvLXF1b3RlLXdpZGdldC5saWJlcnR5bXV0dWFsLmNvbYIm
dGVzdC1wYXJ0bmVyc2VydmljZXMubGliZXJ0eW11dHVhbC5jb22CJnN0YWdlLWJp
bGxpbmdpbnF1aXJ5LmxpYmVydHltdXR1YWwuY29tghtsb2dpbi1kZXYubGliZXJ0
eW11dHVhbC5jb22CJHRlc3QtY2hvaWNlLXBvcnRhbC5saWJlcnR5bXV0dWFsLmNv
bYI4Z3JtdXMtdHdpbGlvLW1lZGlhLXN0cmVhbS1zZXJ2aWNlLXRlc3QubGliZXJ0
eW11dHVhbC5jb22CInN0YWdlLWFkcC1yZXBvcnQubGliZXJ0eW11dHVhbC5jb22C
FGxvZ2luLWRldi5zYWZlY28uY29tgilib29rLWFzc2Vzc21lbnQtdG9vbC1kZXZl
bG9wbWVudC5sbWlnLmNvbYImcmVmZXJyYWxwcm9ncmFtLXRlc3QubGliZXJ0eW11
dHVhbC5jb22CE2xvZ2luLW5wLnNhZmVjby5jb22CI3N0YWdlLWJsLWlkZW50aXR5
LmxpYmVydHltdXR1YWwuY29tgiFkZXYtYmwtaWRlbnRpdHkubGliZXJ0eW11dHVh
bC5jb22CHHRlc3QtZmV0Y2gubGliZXJ0eW11dHVhbC5jb22CIHRlc3QuYXBpLnNw
aXJlLmxpYmVydHltdXR1YWwuY29tgj50ZXN0LmdwZS1oeWRyYS1ub3RpZmljYXRp
b25zLmFwYWMuaHlkcmEtY3J1eC5saWJlcnR5bXV0dWFsLmNvbYIuc3RhZ2UtYmwt
c3VwZXItYWRtaW4tcmVwb3J0cy5saWJlcnR5bXV0dWFsLmNvbYJAdGVzdC5ncGUt
Z2VuZXJpYy1wYXltZW50cy1wYWdlLmFwYWMuaHlkcmEtY3J1eC5saWJlcnR5bXV0
dWFsLmNvbYIkaG9sZC1wZXJmLXJpc2t0cmFjLmxpYmVydHltdXR1YWwuY29tgilo
b2xkLXN0YWdlLWFnZW50c3BvcnRhbC5saWJlcnR5bXV0dWFsLmNvbYIlaG9sZC10
ZXN0LW9ic2MubGliZXJ0eW11dHVhbGdyb3VwLmNvbYIqc3RhZ2UtYWdlbnQtcG9y
dGFsLWZvcm1zLmxpYmVydHltdXR1YWwuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gBAwwCjAIBgZngQwBAgIw
EwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAIKB637wKaJl
KhwzIhA5CZg79Pjd8koAJdjsaBTMCRayc10q3/t/4GDT+xn1Vo27psOYYcDwbtTY
T82lPO4uqmfg9b4IpguZGkL47BSI8ci5n9fJrCPz3UywkVtgtx6GohdcQy2NFr9c
KdUICnb1AAwYvxcXeoc6lTkCamPPKin8+FNk89B6BRWGLv9uzy8cHc+4+0gyR4NL
uhLtXUfjxWuc5MzHcqrf2NCMQuL7uGMmzNesDadC8j0v50OEAL1BMtPwaXid5YuN
VgF56YzMr6haZeLDCQgV7UBtzpZ1TKPqIHlvBCNKV3+sjryQi1hH1CjsK1YWFlvY
780Uey/C4sQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j8zi39MktIIvDNZkcMi
RAB5cUJAQTTU2rOBJ2ysCZqDnJ2h45sxoZ2rD3J6n08hPuTJEMVVuMkWaCA1ps8d
mPNEvA4uxkNrgjsTdWEwdJ5vFGo7mApB7F4Y7OFYYepoTjgJnjqsJZD7V/F66lyn
kv9WV4FJQAfO92XT6dudjgOp2y5O+gjeIhDbKCeWh9vSqnIyONrHX27ba+iLmISw
/SylCJYx3owoZcpKtZPGuQ1k6xeDYi0MtWkJ8Z/Cqrhez0L2GuL38Jz3deg3fn3O
+7KsVFjlW00ADVZr/aT+Tl5gwoPCGWDnt6o7MEZah0+AZGjrr9o5s7Plj/t+H0Ms
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34325031234697655896802842139651821377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 11:31:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 11:31:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clientlist.qa.safeco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26541209788793783251222508184083303554605871680615904401907810361676084757586162379163254734061289310739899899793954380697952850368023611404222077977574838890081330106072500772686764075041440096460054143235143850649156892398687730745896061339085159272533242303231706943993469659058433848035809103778058845019630782073600926817912719273754728976154037376759439082113498114403895400170129912998987283194280575473469745777974418353287644266510530215193494456394844268014259990581378187089393919752814086680443707827941480904098505890941865060526705095197495722057455079286321635005775592403351954119719013541661158616179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							306f199df201e4507811a07baf1c75e004f50894
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1434 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientlist.qa.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.oneinc-gateway.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a-eclaims.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-eft-enrollment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.lmsafe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-financials-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-financials-portal-stage.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auto-quote-widget.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partnerservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-billinginquiry.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-choice-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grmus-twilio-media-stream-service-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-adp-report.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-assessment-tool-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referralprogram-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-np.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fetch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.spire.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gpe-hydra-notifications.apac.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bl-super-admin-reports.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gpe-generic-payments-page.apac.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-perf-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-agent-portal-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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