clientlist.qa.safeco.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 40:a5:a5:83:99:07:97:fb:1c:c8:6a:06:15:c1:bc:ad was issued on by Entrust, Inc..

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 40:a5:a5:83:99:07:97:fb:1c:c8:6a:06:15:c1:bc:ad
Serial Number (int): 85930677735727141011748157742393703597
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b5:10:72:23:59:38:d1:67:87:e8:e2:2d:48:7a:a4:7a:a2:5c:f0:a2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 2d:1b:5e:63:5b:74:64:9c:2f:a7:44:08:b9:5f:11:66:a8:d2:85:3f
Fingerprint (sha256): dd:1c:07:94:3b:b4:b0:27:fb:f4:1e:c0:1e:e5:bf:f4:50:4d:1a:f3:ce:aa:bb:b6:0d:a2:f5:f7:14:06:4d:73

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate clientlist.qa.safeco.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clientlist.qa.safeco.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clientlist.qa.safeco.com
perf-risktrac-leg1.libertymutual.com
perf-risktrac-leg2.libertymutual.com
hold-test-obsc.peerless-ins.com
hold-stage-obsc.libertymutualgroup.com
hold-stage-obsc.peerless-ins.com
test-obsc.ohiocasualty-ins.com
hold-test-obsc.indiana-ins.com
hold-stage-obsc.ohiocasualty-ins.com
test-a-eclaims.safeco.com
staging-eft-enrollment.libertymutual.com
www.dev.lmsafe.co
agency-financials-portal.libertymutual.com
agency-financials-portal-stage.libertymutual.com
test-auto-quote-widget.libertymutual.com
test-partnerservices.libertymutual.com
stage-billinginquiry.libertymutual.com
login-dev.libertymutual.com
test-choice-portal.libertymutual.com
grmus-twilio-media-stream-service-test.libertymutual.com
stage-adp-report.libertymutual.com
login-dev.safeco.com
book-assessment-tool-development.lmig.com
referralprogram-test.libertymutual.com
login-np.safeco.com
stage-bl-identity.libertymutual.com
dev-bl-identity.libertymutual.com
test-fetch.libertymutual.com
test.api.spire.libertymutual.com
test.gpe-hydra-notifications.apac.hydra-crux.libertymutual.com
stage-bl-super-admin-reports.libertymutual.com
test.gpe-generic-payments-page.apac.hydra-crux.libertymutual.com
hold-perf-risktrac.libertymutual.com
hold-stage-agentsportal.libertymutual.com
hold-test-obsc.libertymutualgroup.com
stage-agent-portal-forms.libertymutual.com

Other certificates including the domain name safeco.com

(limited to 100 certificates)
ete-claims.safeco.com
www.libertymutual.com
rewind-webservice.safeco.com
ete-claims.safeco.com
1-internal.us-east-1.production.paas.lmig.com
ete-www2.libertymutual.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
libertymutual.myinstantincentives.com
ete-www2.libertymutual.com
billing.safesite.safeco.com
cswebext-pool-03p.libertymutual.com
cla-haps-http-prd.apps.safeco.com
cicct-taskrouter-gateway.libertymutual.com
cswebext-pool-02k.libertymutual.com
cicct-taskrouter-gateway.libertymutual.com
salescompreporting.safeco.com
test-equote.libertymutual.com
search.libertymutual.com
uat-eservice.safeco.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
4-internal.us-east-1.non-production.paas.lmig.com
dev-a-dpec.safeco.com
ete-www2.libertymutual.com
cm-now.agent.safeco.com
ete-www2.libertymutual.com
dev-i-dpec.safeco.com
MVSA.SAFECO.COM
quotes.safeco.com
clientlist.qa.safeco.com
libertymutual.myinstantincentives.com
ltm-dev-a-dpec.safeco.com
ete-pmds.libertymutual.com
www.libertymutual.com
whalebot.libertymutual.com
search.libertymutual.com
libertymutual.myinstantincentives.com
4-internal.us-east-1.non-production.paas.lmig.com
test.aspire.safeco.com
cs-pool-03k.lm.lmig.com
www.libertymutual.com
2pr-realtimedocs.safeco.com
qni-cpa-np.safeco.com
cswebext-pool-02p.libertymutual.com
uat-agencyservicingpreferences.safeco.com
ete-claims.safeco.com
whalebot.libertymutual.com
customer-pf-pdc.safeco.com
www.libertymutual.com
ete-www2.libertymutual.com
perf-www.libertymutualvantageport.com
pcf-BAZRbYqBVu.us-east-1.production.lmig.com
qa-rpama.safeco.com
msb-prefill.libertyec.com
perf-dpec.safeco.com
1-internal.us-east-1.production.paas.lmig.com
cswebext-pool-02p.libertymutual.com
cswebext-pool-03p.libertymutual.com
ete-www2.libertymutual.com
sip-kdc-03.libertymutual.com
4-internal.us-east-1.non-production.paas.lmig.com
ete-claims.safeco.com
insurance-agent.safeco.com
pcf-WhrmGXwiYi.us-east-1.non-production.lmig.com
dev-c-docupload.safeco.com
vantageporttest.libertymutual.com
agent.safeco.com
cswebext-pool-03p.libertymutual.com
www.libertymutual.com
www.libertymutual.com
dr-spagent.safeco.com
sip-pdc-03.libertymutual.com
legacysafecodocumentloader.safeco.com
libertymutual.myinstantincentives.com
cswebext-pool-02p.libertymutual.com
af.safeco.com
steps.safeco.com
pmds.libertymutual.com
hsp-dev.aws.lmig.com
dev-af2.safeco.com
stage-steps.safeco.com
www.righttrack.safeco.com
uat-dpec.safeco.com
ete-claims.safeco.com
uat-pi-marketservices.libertyec.com
intranet.safeco.com
safesite.qa.safeco.com
dev-i-dpec.safeco.com
cswebext-pool-03p.libertymutual.com
ete-claims.libertymutual.com
search.libertymutual.com
ete-claims.safeco.com
www.libertymutual.com
www.libertymutual.com
test-steps.safeco.com
bps-prd-be.apps.safeco.com
whalebot.libertymutual.com
ltm-test-a-dpec.safeco.com
www.libertymutual.com
billing.safesite.safeco.com
quote.esurance.qa.safeco.com

Certificate

The complete raw certificate details for clientlist.qa.safeco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKgjCCCWqgAwIBAgIQQKWlg5kHl/scyGoGFcG8rTANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAxMDkwOTE0MThaFw0yNTAyMDgwOTE0MTdaMHwxCzAJBgNVBAYTAlVTMRYwFAYD
VQQIEw1OZXcgSGFtcHNoaXJlMRMwEQYDVQQHEwpQb3J0c21vdXRoMR0wGwYDVQQK
ExRMaWJlcnR5IE11dHVhbCBHcm91cDEhMB8GA1UEAxMYY2xpZW50bGlzdC5xYS5z
YWZlY28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy4A7t9f
ACiU1XFn6J7qMeV3dBH4tD4WR03djhlz9hHSlC8M8ZJiO58LACfpHnlGe1ik5DUp
VCM8HhzTP7d4xkywkeSeuz2Sf/UZL8x9XnWiZ7vw0E9asRT/nWbxWQBlTC8C4sDS
JjaIAYE8KWbXOUT3RxIEpgj1MFcGrUgNxWBEKiBQTWY6sxMJ9+J3hdy1koP5ePdQ
Jc2XsF6XIAyxWUo5THqrMXmXRJbYazrt7f7B49JsEc/NLSs2c08EFz3K3LuxM9hm
296lV8DY7MGuo19g2QB3oZQjG9tMuE8+HxEArt0CJ/yz5RhKAfi10cr1BN4upMZ6
g1bv+wWtJ1i+pwIDAQABo4IGvzCCBrswDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
tRByI1k40WeH6OItSHqkeqJc8KIwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+n
YMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5l
bnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9s
MWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50
cnVzdC5uZXQvbGV2ZWwxay5jcmwwggVxBgNVHREEggVoMIIFZIIYY2xpZW50bGlz
dC5xYS5zYWZlY28uY29tgiRwZXJmLXJpc2t0cmFjLWxlZzEubGliZXJ0eW11dHVh
bC5jb22CJHBlcmYtcmlza3RyYWMtbGVnMi5saWJlcnR5bXV0dWFsLmNvbYIfaG9s
ZC10ZXN0LW9ic2MucGVlcmxlc3MtaW5zLmNvbYImaG9sZC1zdGFnZS1vYnNjLmxp
YmVydHltdXR1YWxncm91cC5jb22CIGhvbGQtc3RhZ2Utb2JzYy5wZWVybGVzcy1p
bnMuY29tgh50ZXN0LW9ic2Mub2hpb2Nhc3VhbHR5LWlucy5jb22CHmhvbGQtdGVz
dC1vYnNjLmluZGlhbmEtaW5zLmNvbYIkaG9sZC1zdGFnZS1vYnNjLm9oaW9jYXN1
YWx0eS1pbnMuY29tghl0ZXN0LWEtZWNsYWltcy5zYWZlY28uY29tgihzdGFnaW5n
LWVmdC1lbnJvbGxtZW50LmxpYmVydHltdXR1YWwuY29tghF3d3cuZGV2Lmxtc2Fm
ZS5jb4IqYWdlbmN5LWZpbmFuY2lhbHMtcG9ydGFsLmxpYmVydHltdXR1YWwuY29t
gjBhZ2VuY3ktZmluYW5jaWFscy1wb3J0YWwtc3RhZ2UubGliZXJ0eW11dHVhbC5j
b22CKHRlc3QtYXV0by1xdW90ZS13aWRnZXQubGliZXJ0eW11dHVhbC5jb22CJnRl
c3QtcGFydG5lcnNlcnZpY2VzLmxpYmVydHltdXR1YWwuY29tgiZzdGFnZS1iaWxs
aW5naW5xdWlyeS5saWJlcnR5bXV0dWFsLmNvbYIbbG9naW4tZGV2LmxpYmVydHlt
dXR1YWwuY29tgiR0ZXN0LWNob2ljZS1wb3J0YWwubGliZXJ0eW11dHVhbC5jb22C
OGdybXVzLXR3aWxpby1tZWRpYS1zdHJlYW0tc2VydmljZS10ZXN0LmxpYmVydHlt
dXR1YWwuY29tgiJzdGFnZS1hZHAtcmVwb3J0LmxpYmVydHltdXR1YWwuY29tghRs
b2dpbi1kZXYuc2FmZWNvLmNvbYIpYm9vay1hc3Nlc3NtZW50LXRvb2wtZGV2ZWxv
cG1lbnQubG1pZy5jb22CJnJlZmVycmFscHJvZ3JhbS10ZXN0LmxpYmVydHltdXR1
YWwuY29tghNsb2dpbi1ucC5zYWZlY28uY29tgiNzdGFnZS1ibC1pZGVudGl0eS5s
aWJlcnR5bXV0dWFsLmNvbYIhZGV2LWJsLWlkZW50aXR5LmxpYmVydHltdXR1YWwu
Y29tghx0ZXN0LWZldGNoLmxpYmVydHltdXR1YWwuY29tgiB0ZXN0LmFwaS5zcGly
ZS5saWJlcnR5bXV0dWFsLmNvbYI+dGVzdC5ncGUtaHlkcmEtbm90aWZpY2F0aW9u
cy5hcGFjLmh5ZHJhLWNydXgubGliZXJ0eW11dHVhbC5jb22CLnN0YWdlLWJsLXN1
cGVyLWFkbWluLXJlcG9ydHMubGliZXJ0eW11dHVhbC5jb22CQHRlc3QuZ3BlLWdl
bmVyaWMtcGF5bWVudHMtcGFnZS5hcGFjLmh5ZHJhLWNydXgubGliZXJ0eW11dHVh
bC5jb22CJGhvbGQtcGVyZi1yaXNrdHJhYy5saWJlcnR5bXV0dWFsLmNvbYIpaG9s
ZC1zdGFnZS1hZ2VudHNwb3J0YWwubGliZXJ0eW11dHVhbC5jb22CJWhvbGQtdGVz
dC1vYnNjLmxpYmVydHltdXR1YWxncm91cC5jb22CKnN0YWdlLWFnZW50LXBvcnRh
bC1mb3Jtcy5saWJlcnR5bXV0dWFsLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBMGA1UdIAQMMAowCAYGZ4EMAQICMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpf4GN4t0CsUAT
OcdBaUoB8E+eTPovs7Bh8a+gPXmz4aXvK9jNJlpIp2GN0bom089v4TxoQWvdEAlk
0NW9qzAEjvMVZWf70P6YCaDZO+DPlqYFI/oezLz6yW6q+4KzHJ+37DzIwuRpIuim
x2IClEgZ5BNAjho0XuRtMPF1eJF2us2LIjzg0XiMlPykd4tVlrW2O0h/VtN3xxZK
ebFEdJYEbwXXM/FxVX3tf9FqpvsSzUncFXvXfD2BTJ0QLza6ROxG340uID/IVSMD
HGwNVtgcXwklivFYN8jSPet+jtu8H3Bm3ySJ0PIYRMDF+PHftVJzy3OyK3lbiZbk
8sy5IjNQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy4A7t9fACiU1XFn6J7q
MeV3dBH4tD4WR03djhlz9hHSlC8M8ZJiO58LACfpHnlGe1ik5DUpVCM8HhzTP7d4
xkywkeSeuz2Sf/UZL8x9XnWiZ7vw0E9asRT/nWbxWQBlTC8C4sDSJjaIAYE8KWbX
OUT3RxIEpgj1MFcGrUgNxWBEKiBQTWY6sxMJ9+J3hdy1koP5ePdQJc2XsF6XIAyx
WUo5THqrMXmXRJbYazrt7f7B49JsEc/NLSs2c08EFz3K3LuxM9hm296lV8DY7MGu
o19g2QB3oZQjG9tMuE8+HxEArt0CJ/yz5RhKAfi10cr1BN4upMZ6g1bv+wWtJ1i+
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85930677735727141011748157742393703597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 09:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 09:14:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clientlist.qa.safeco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23629248271446566091510919286223188738535930920386123246915695200733647255991669197607151560558320696804033942110819774617555670966950999245438827568157364055865008505514963087971765101127739078784892354717227202089050313986681813581160454970883066165618735020427158595399408462711092820657804654359331353255912220506619040605609570552728371426020407175347303946111210119720264673805633761996969408887239195421673725350777287868349470325452002159600760649076789355995992230834891000031368971082097617488658038858463772096288627926654551744714287259420622863477175002297803932044391868661950518845930035308476275146407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b51072235938d16787e8e22d487aa47aa25cf0a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientlist.qa.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac-leg1.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf-risktrac-leg2.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.peerless-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.indiana-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-obsc.ohiocasualty-ins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-a-eclaims.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-eft-enrollment.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.lmsafe.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-financials-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agency-financials-portal-stage.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-auto-quote-widget.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-partnerservices.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-billinginquiry.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-choice-portal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grmus-twilio-media-stream-service-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-adp-report.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book-assessment-tool-development.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referralprogram-test.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-np.safeco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-bl-identity.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-fetch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.api.spire.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gpe-hydra-notifications.apac.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-bl-super-admin-reports.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.gpe-generic-payments-page.apac.hydra-crux.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-perf-risktrac.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-stage-agentsportal.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-test-obsc.libertymutualgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-agent-portal-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00697f818de2dd02b1401339c741694a01f04f9e4cfa2fb3b061f1afa03d79b3e1a5ef2bd8cd265a48a7618dd1ba26d3cf6fe13c68416bdd100964d0d5bdab30048ef3156567fbd0fe9809a0d93be0cf96a60523fa1eccbcfac96eaafb82b31c9fb7ec3cc8c2e46922e8a6c76202944819e413408e1a345ee46d30f175789176bacd8b223ce0d1788c94fca4778b5596b5b63b487f56d377c7164a79b1447496046f05d733f171557ded7fd16aa6fb12cd49dc157bd77c3d814c9d102f36ba44ec46df8d2e203fc85523031c6c0d56d81c5f09258af15837c8d23deb7e8edbbc1f7066df2489d0f21844c0c5f8f1dfb55273cb73b22b795b8996e4f2ccb9223350