www.libertyinsurance.ie

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:2c:83:c3:bd:42:69:94:49:ed:92:60:c6:db:25:96 was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Liberty International
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:2c:83:c3:bd:42:69:94:49:ed:92:60:c6:db:25:96
Serial Number (int): 16181869514917246085127077007713838486
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: df:1e:cb:19:d9:07:c5:43:f3:e6:7d:3d:e3:cc:73:f4:85:23:87:08
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): f4:28:6c:8e:ff:4d:f8:6f:f0:d1:11:b1:89:8a:f4:6d:6a:ff:3f:fd
Fingerprint (sha256): 01:3b:c4:b2:62:47:ba:e1:56:ef:eb:f9:85:f7:a3:92:4f:20:5f:40:26:7c:3c:b4:b0:32:f2:31:56:2d:3d:39

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.libertyinsurance.ie

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertyinsurance.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

soapmp.segurosliberty.cl
oficinaenlinea.libertyseguros.co
seguimientosiniestro.liberty.cl
coomeva.libertyseguros.co
quinnquotes.libertyinsurance.ie
libertyinsurance.com.vn
adil.libertyseguros.co
adil-agent.libertyseguros.co
wls.libertycolombia.com.co
portal.segurosliberty.cl
vehiculos.segurosliberty.cl
servicios.liberty.cl
simplify.com.hk
www.simplify.com.hk
webapp.libertycolombia.com.co
vc.libertymedicalinsurance.com
www.libertyseguros.pt
docidd.regal.es
docidd.genesis.es
docidd.libertyseguros.es
ventas2.segurosliberty.cl
libertyconnect.ie
api-sg.libertymedicalinsurance.com
ccs.libertymedicalinsurance.com
www.libertyconnect.ie
www.segurosliberty.cl
siniestros.segurosliberty.cl
www8.segurosliberty.cl
seguros.segurosliberty.cl
www.lmginsurance.co.th
www8.pentagenerales.cl
liberty-insurance.ie
www.vidaregal.es
www.regalmoto.es
www.regalhogar.es
www.regal.es
www.regal.cat
www.libertyseguros.es
www.libertyinsurance.ie
www.libertyexpatriates.es
www.libertyeurope.ie
www.libertyeurope.de
www.libertyeurope.at
www-preint-motos.genesis.es
www-preint-hogar.genesis.es
www-preint-coches.genesis.es
ww3.liberty.cl
ww02.libertymutual.com.hk
wir-rufen-sie-zurueck.libertyexpatriates.es
static4.regal.es
static4.libertyseguros.es
static4.genesis.es
static3.regal.es
static3.libertyseguros.es
static3.genesis.es
static2.regal.es
static2.libertyseguros.es
static2.libertyexpatriates.es
static2.genesis.es
static2-fix.regal.es
static2-fix.genesis.es
static2-acpt.regal.es
static2-acpt.genesis.es
static1.regal.es
static1.libertyseguros.es
static1.libertyexpatriates.es
static1.genesis.es
static1-fix.regal.es
static1-fix.genesis.es
static1-acpt.regal.es
static1-acpt.genesis.es
segurosmoto.regal.es
seguroshogar.regal.es
seguroscoche.regal.es
regal.es
regal.cat
qlikview.liberty.cl
profesionales.libertyseguros.es
pasarelapago.libertyseguros.es
mediadoresbk.libertyseguros.es
mediadores.libertyseguros.es
m-profesionales.libertyseguros.es
libertyseguros.es
libertyinsurance.ie
lbis.lmginsurance.co.th
lbis-admin.lmginsurance.co.th
institucional.libertyseguros.es
genesis.es
esb.libertyseguros.es
documentacion.regal.es
documentacion.libertyseguros.es
documentacion.genesis.es
clientes.regal.es
clientes.libertyseguros.es
clientes.genesis.es
claimpartners.libertyseguros.es
canalmediado.libertyseguros.es
apis.libertyseguros.com.br

Other certificates including the domain name libertyinsurance.ie

(limited to 100 certificates)
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
www.libertyinsurance.ie
connect.libertyqa.pt
www.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
www.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyseguros.com.br
digital.libertyseguros.co
act-dmz.libertyseguros.com.br
connect.libertyqa.pt
libertyseguros.com
libertyseguros.com
sip-kdc-03.libertymutual.com
sip-pdc-03.libertymutual.com
uat.mediedge.com
uat.mediedge.com
act-www.libertyseguros.com.br
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
connect.libertyqa.pt
digital.libertyseguros.co
access-emea-01.lmguc.com
www.libertyinsurance.ie
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
www.libertyinsurance.ie
brokers.libertyinsurance.ie
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
digital.libertyseguros.co
www.libertyinsurance.ie
uat.mediedge.com
connect.libertyqa.pt
libertymutual.com
libertymutual.com
act-www.libertyseguros.com.br
l8portal-prod.libertyinsurance.ie
libertymutual.com
webmail.libertyinsurance.ie
act-www.libertyseguros.com.br
www.libertyinsurance.ie
pwkipgf-gflnc02.gfab.lmig.com
act-meucotadorfrota.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
libertyseguros.com
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
pwkipgf-gflnc02.gfab.lmig.com
digital.libertyseguros.co
uat.mediedge.com
libertymutual.com
www.libertyinsurance.ie
act-www.libertyseguros.com.br
connect.libertyqa.pt
webmail.libertyinsurance.ie
uat.mediedge.com
webmail.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
libertymutual.com
uat.mediedge.com
act-www.libertyseguros.com.br
digital.libertyseguros.co
connect.libertyqa.pt
pymes.libertyseguros.co
act-dmz.libertyseguros.com.br
codapd-dev-sp1.libertyinsurance.ie
act-dmz.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
pymes.libertyseguros.co
libertymutual.com
brmspolicy-uat.libertyinsurance.in
digital.libertyseguros.co
uat.mediedge.com
www.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
libertyseguros.com
connect.libertyqa.pt
libertymutual.com
connect.libertyqa.pt
uat.mediedge.com
act-dmz.libertyseguros.com.br
digital.libertyseguros.co
libertymutual.com

Certificate

The complete raw certificate details for www.libertyinsurance.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxaXSaU0t6ND9iGzu4gO
zGDLLHD4gzs/zqyrfpdeUnKkqqko4Vv7dxc21SFhooT2rY/FClqAGYcLDuUJSxhQ
2wJsoJ6DQ6tOcGxIE5SwV/DzVJwhKN9ZcX3pVkAyMFi988SHHRSJAveSZIx0tBPE
xkqLE6JJq+AnbdC7PNCHeSdbTJRBh8VjmgcznZ1NeYsfTbWv7JvMaEzEu5S3Kak+
smhwpyXzpxKNCZETreSqlBgp3j1j8s8VIJ2xLL5FfLChHr4CYVXkLJfhjRofGrdg
VdYS/B8GGonz4E4IrdiJtv7+ItCF1qO1Xo2mqsWIWsw65WvtagbJuJsWbZr58Hmf
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16181869514917246085127077007713838486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertyinsurance.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22102843390323186727657951744874272494238258340175843439221615940276847413989762585957686162150239560526984004306217145473224617844642842674515797204380287522263553217686627179034972456341182063465343599883323938186104209779415453041998054539831263400312398743886179837280506452562290175656523169327060297691325646059302788318295216576009562434517213187931646364401820942530501782612609189490310482086542204921326766234769631484873302862538670890551043454069030361457942789117371260706004765857559501188835339191004725293063446289511211881458859851832230059867101571408887085506459990385902899113193001283634299772867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df1ecb19d907c543f3e67d3de3cc73f485238708
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2430 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soapmp.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oficinaenlinea.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguimientosiniestro.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coomeva.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quinnquotes.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adil.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adil-agent.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wls.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiculos.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicios.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplify.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplify.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventas2.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-sg.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siniestros.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguros.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty-insurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaregal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalmoto.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalhogar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-motos.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-hogar.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-coches.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww3.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww02.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wir-rufen-sie-zurueck.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosmoto.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroshogar.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroscoche.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlikview.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasarelapago.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadoresbk.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadores.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis-admin.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institucional.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canalmediado.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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