libertycerts.com.sg

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 11:ec:b9:25:14:2c:91:de:7e:f0:4c:aa:cc:cd:d4:8b was issued on by Entrust, Inc..

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:ec:b9:25:14:2c:91:de:7e:f0:4c:aa:cc:cd:d4:8b
Serial Number (int): 23826013170420059526460879020988683403
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b0:78:8d:6c:e1:e2:74:c7:3f:b4:db:6f:5c:b1:6c:5d:07:66:83:0a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 0e:e3:6b:78:b0:88:21:e4:79:07:c8:6d:a8:3a:a6:cf:b7:74:4a:7b
Fingerprint (sha256): e3:15:d2:19:23:43:50:c7:5c:e3:8f:89:f1:22:1f:16:60:89:0a:47:0a:98:63:ff:7b:d5:27:b1:da:6e:9c:73

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate libertycerts.com.sg

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for libertycerts.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

libertycerts.com.sg
libertylinkap.com
www.libertylinkap.com
liuquote.co.uk
www.libertyspecialtymarkets.au
libertyspecialtymarkets.au
www.helmsmanmanagementprovidersupport.com
helmsmanmanagementprovidersupport.com
libertymbtc.com
libertytradecredit.com
enroll.libertymutualsurety.com
sgf.libertyfianzas.com
hold-agents.libertymutualsurety.com
seguro-garantia.libertyseguros.com.br
wcclaims.iso.lmig.com
ironshore.com
cotizador.libertyfianzas.com
blmg-forms.libertymutual.com
wc-isobatch.libertymutual.com
wc-isobatch-np.libertymutual.com
claimportal-api.libertymutualsurety.com
grs-billing-parallel.lmig.com
claimportal.libertymutualsurety.com
www.contratafianza.libertyfianzas.com
www.libertyseguros.com.pr
www.libertyseguros.com.mx
libertyseguros.com.pr
libertyseguros.com.mx
libertyfianzas.com
borgonline.be
borgonline.nl
nationaleborgre.com
assets.liuasiapacific.com
assets.libertyspecialtymarketsap.com
www.liumalaysia.com.my
liumalaysia.com.my
www.liuhongkong.com.hk
liuhongkong.com.hk
www.liusingapore.com.sg
liusingapore.com.sg
www.liuaustralia.com.au
liuaustralia.com.au
liuasiapacific.com
www.liuasiapacific.com
www.policydocumentation.liuaustralia.com.au
policydocumentation.liuaustralia.com.au
www.libertyspecialtymarkets.com.my
libertyspecialtymarkets.com.my
www.libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.hk
libertyspecialtymarkets.com.sg
www.libertyspecialtymarkets.com.sg
policydocumentation.libertyspecialtymarkets.com.au
www.policydocumentation.libertyspecialtymarkets.com.au
libertyspecialtymarkets.com.au
www.libertyspecialtymarkets.com.au
media.libertyspecialtymarketsap.com
www.libertyspecialtymarketsap.com
libertyspecialtymarketsap.com
nationaleborg.net
www.nationaleborgre.com
nationaleborg.uk
nationaleborg.org
nationaleborg.lu
nationaleborg.fr
nationaleborg.eu
nationaleborg.de
nationaleborg.co.uk
nationaleborg.com
www.nationaleborg.be
www.nationaleborg.nl
nationaleborg.be
nationaleborg.nl
www.nationaleborg.com
www.borgonline.be
www.borgonline.nl
serf.aws.libertyfianzas.com
liu-latinamerica.com
naymu.libertymutual.com
www.libertyspecialtymarketslatam.com
libertyspecialtymarketslatam.com
authorization-policy-api-production.lmig.com
globalclaimcenter-batch.lmig.com
www.libertyassemble.ca
libertyassemble.ca
www.business.libertymutual.com
business.libertymutual.com
agents.libertymutualsurety.lmig.com
DR.libertyquote.com.au
DR.libertycargo.com.au
libertymutualsurety.nl
libertymutualsurety.be
www.libertymutualsurety.nl
www.libertymutualsurety.be
www.lsmcert.com
www.libertycerts.com.sg
lsmcert.com

Other certificates including the domain name libertycerts.com.sg

(limited to 100 certificates)
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg
libertycerts.com.sg

Certificate

The complete raw certificate details for libertycerts.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshmqfYsJKFyR5poEkbJ5
ca5fGmLQR3t6/7oW7IBAi1FQcxowETiEWZC1v62Uetv1Z0Sv1fmyE//r81ReNtEj
wiStz2ew+RCuXwc3GheHSgHa5cxEdd9wArqhww7tRLymC6HW3UZ8CNEuStqxxbkO
He7tdbB/herZCqlUCCUVrgRTG/YH65TxFTRjXG/2KqqERSZB5EG8Y7funqIPuqEw
7Q4k0pQcY1h/SyrQUEHDCez+uVZ/BgrSJlonVB4hlSildcFK1euSZ2WnZj0pHlhS
s/D7LeUJmyvH5d8VGD8uOUZq56o6QAHVv6zQG5HD5XR58eRXAOAa0kJGYQaFxrb6
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23826013170420059526460879020988683403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 19:55:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 19:55:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'libertycerts.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22483074649486406068089981410825726669376981105152103344186742400581902716484037899100794876004271479884188334031588859916417375644414812096607325095699934089974303421793472486595337890119070740186080864645668285999765281261235567644281634481593563022417621744539418841010537805660095418369112114848648280594175835024533688575723499792277767616580159374987001071035107042142874870577188469105355349182553345566912148644127161127991174825484708863163154436216485655672221805512093682055890326020129495457514328925388983577534458190438036232072594044635811634243264463611927086326726507376426127773099537799835628796443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0788d6ce1e274c73fb4db6f5cb16c5d0766830a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2648 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuquote.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helmsmanmanagementprovidersupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymbtc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertytradecredit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enroll.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgf.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hold-agents.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguro-garantia.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcclaims.iso.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ironshore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cotizador.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blmg-forms.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wc-isobatch-np.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal-api.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grs-billing-parallel.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimportal.libertymutualsurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contratafianza.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.pr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liumalaysia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuhongkong.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liusingapore.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liuasiapacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.liuaustralia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.policydocumentation.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarkets.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketsap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborgre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationaleborg.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nationaleborg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serf.aws.libertyfianzas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liu-latinamerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naymu.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyspecialtymarketslatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authorization-policy-api-production.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalclaimcenter-batch.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyassemble.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.libertymutual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.libertymutualsurety.lmig.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertyquote.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'DR.libertycargo.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertymutualsurety.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lsmcert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertycerts.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsmcert.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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