www.libertyinsurance.ie

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:a4:be:d9:be:87:7b:43:48:ae:ed:0c:d6:26:ab:6a was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Liberty International
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:a4:be:d9:be:87:7b:43:48:ae:ed:0c:d6:26:ab:6a
Serial Number (int): 16806143543520600562616661855399488362
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: be:74:37:e4:57:bd:9a:58:c3:e0:f9:d1:b8:db:3b:6f:79:44:87:0b
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e8:0d:62:f4:b5:ae:3f:75:3d:5c:52:6a:f0:38:f3:9c:fc:b8:16:77
Fingerprint (sha256): 42:eb:95:cf:d2:cb:27:70:5e:8f:20:9c:1e:f5:8f:40:b8:79:f0:8c:de:38:6b:43:6b:42:cc:cc:ea:ac:dc:61

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.libertyinsurance.ie

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertyinsurance.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oficinaenlinea.libertyseguros.co
seguimientosiniestro.liberty.cl
coomeva.libertyseguros.co
quinnquotes.libertyinsurance.ie
libertyinsurance.com.vn
adil.libertyseguros.co
adil-agent.libertyseguros.co
wls.libertycolombia.com.co
portal.segurosliberty.cl
vehiculos.segurosliberty.cl
servicios.liberty.cl
simplify.com.hk
www.simplify.com.hk
webapp.libertycolombia.com.co
vc.libertymedicalinsurance.com
www.libertyseguros.pt
docidd.regal.es
docidd.genesis.es
docidd.libertyseguros.es
ventas2.segurosliberty.cl
libertyconnect.ie
api-sg.libertymedicalinsurance.com
ccs.libertymedicalinsurance.com
www.libertyconnect.ie
www.segurosliberty.cl
siniestros.segurosliberty.cl
www8.segurosliberty.cl
seguros.segurosliberty.cl
www.lmginsurance.co.th
www8.pentagenerales.cl
liberty-insurance.ie
www.vidaregal.es
www.regalmoto.es
www.regalhogar.es
www.regal.es
www.regal.cat
www.libertyseguros.es
www.libertyinsurance.ie
www.libertyexpatriates.es
www.libertyeurope.ie
www.libertyeurope.de
www.libertyeurope.at
www-preint-motos.genesis.es
www-preint-hogar.genesis.es
www-preint-coches.genesis.es
ww3.liberty.cl
ww02.libertymutual.com.hk
wir-rufen-sie-zurueck.libertyexpatriates.es
static4.regal.es
static4.libertyseguros.es
static4.genesis.es
static3.regal.es
static3.libertyseguros.es
static3.genesis.es
static2.regal.es
static2.libertyseguros.es
static2.libertyexpatriates.es
static2.genesis.es
static2-fix.regal.es
static2-fix.genesis.es
static2-acpt.regal.es
static2-acpt.genesis.es
static1.regal.es
static1.libertyseguros.es
static1.libertyexpatriates.es
static1.genesis.es
static1-fix.regal.es
static1-fix.genesis.es
static1-acpt.regal.es
static1-acpt.genesis.es
segurosmoto.regal.es
seguroshogar.regal.es
seguroscoche.regal.es
regal.es
regal.cat
qlikview.liberty.cl
profesionales.libertyseguros.es
pasarelapago.libertyseguros.es
mediadoresbk.libertyseguros.es
mediadores.libertyseguros.es
m-profesionales.libertyseguros.es
libertyseguros.es
libertyinsurance.ie
lbis.lmginsurance.co.th
lbis-admin.lmginsurance.co.th
institucional.libertyseguros.es
genesis.es
esb.libertyseguros.es
documentacion.regal.es
documentacion.libertyseguros.es
documentacion.genesis.es
clientes.regal.es
clientes.libertyseguros.es
clientes.genesis.es
claimpartners.libertyseguros.es
canalmediado.libertyseguros.es
apis.libertyseguros.com.br

Other certificates including the domain name libertyinsurance.ie

(limited to 100 certificates)
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
www.libertyinsurance.ie
connect.libertyqa.pt
www.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
www.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyseguros.com.br
digital.libertyseguros.co
act-dmz.libertyseguros.com.br
connect.libertyqa.pt
libertyseguros.com
libertyseguros.com
sip-kdc-03.libertymutual.com
sip-pdc-03.libertymutual.com
uat.mediedge.com
uat.mediedge.com
act-www.libertyseguros.com.br
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
connect.libertyqa.pt
digital.libertyseguros.co
access-emea-01.lmguc.com
www.libertyinsurance.ie
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
www.libertyinsurance.ie
brokers.libertyinsurance.ie
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
digital.libertyseguros.co
www.libertyinsurance.ie
uat.mediedge.com
connect.libertyqa.pt
libertymutual.com
libertymutual.com
act-www.libertyseguros.com.br
l8portal-prod.libertyinsurance.ie
libertymutual.com
webmail.libertyinsurance.ie
act-www.libertyseguros.com.br
www.libertyinsurance.ie
pwkipgf-gflnc02.gfab.lmig.com
act-meucotadorfrota.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
libertyseguros.com
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
pwkipgf-gflnc02.gfab.lmig.com
digital.libertyseguros.co
uat.mediedge.com
libertymutual.com
www.libertyinsurance.ie
act-www.libertyseguros.com.br
connect.libertyqa.pt
webmail.libertyinsurance.ie
uat.mediedge.com
webmail.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
libertymutual.com
uat.mediedge.com
act-www.libertyseguros.com.br
digital.libertyseguros.co
connect.libertyqa.pt
pymes.libertyseguros.co
act-dmz.libertyseguros.com.br
codapd-dev-sp1.libertyinsurance.ie
act-dmz.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
pymes.libertyseguros.co
libertymutual.com
brmspolicy-uat.libertyinsurance.in
digital.libertyseguros.co
uat.mediedge.com
www.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
libertyseguros.com
connect.libertyqa.pt
libertymutual.com
connect.libertyqa.pt
uat.mediedge.com
act-dmz.libertyseguros.com.br
digital.libertyseguros.co
libertymutual.com

Certificate

The complete raw certificate details for www.libertyinsurance.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0Dz4SPaq/Y0Lo0ykUyX
lh3CYpc7Axy1iDmmt0p4NufcZ9Xxn2ghcJPC+4liUDT2GOOzS/QmyLwn0ZmRZcyS
abCl4kS2ggoNHvDXFMpF/iABno/eS4s1o44tJBjAGJDe01JW9dXxdscadNQ/kXVr
nKKIPacptZ4sz4IPNxHoamhhkF6zDGEaYfgBz5tNqmwEA/HQSS8DgKSuTkrqh4mH
jYMkLRNx8mjmC7WRNTR25zquQjhlI1jPF1JMjaT4iclzm9UGL1NFbptaKDf56NsN
bB3GLXXR850nLidXstrT9mb+/l6X/D/uCzfjMoIyhPG6hyVNCE5Ke3ygO5Vsn2wl
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16806143543520600562616661855399488362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertyinsurance.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25153452035739711551820378173164265484002782740381261227016975908647280959113776572103642879264160731931844362061100059141179794237102793114235969075666194928962852574600346246269924528156501619756050285706292215618342022650179344828449338158859856535175564928751919508970401351411504657926117807076681106373831401802486235012754347942605036423786119915728418927404009218634193642806856205346811525569810757620944249967819211295071433958347963823082077471800142487573839851147332504480563666611918895406676734121977527557321327946491532408095636755237394810663125797802791750822283462454251707543759422063960222606711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be7437e457bd9a58c3e0f9d1b8db3b6f7944870b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2404 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oficinaenlinea.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguimientosiniestro.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coomeva.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quinnquotes.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adil.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adil-agent.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wls.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiculos.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicios.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplify.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplify.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventas2.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-sg.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siniestros.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguros.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty-insurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaregal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalmoto.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalhogar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-motos.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-hogar.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-coches.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww3.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww02.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wir-rufen-sie-zurueck.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosmoto.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroshogar.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroscoche.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlikview.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasarelapago.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadoresbk.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadores.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis-admin.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institucional.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canalmediado.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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