www.libertyinsurance.ie

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 77:2d:57:b1:08:29:11:ef:93:03:2d:3e:4d:60:d6:1c was issued on by Entrust, Inc..

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 77:2d:57:b1:08:29:11:ef:93:03:2d:3e:4d:60:d6:1c
Serial Number (int): 158413563452584869575721913216944625180
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 95:17:a6:d8:be:41:af:87:b5:6d:78:d4:b9:bc:c3:c9:15:fe:5a:5f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 14:1c:88:66:32:01:06:24:75:fe:40:9e:8d:c6:f2:01:2d:81:f9:8c
Fingerprint (sha256): 5f:5f:e5:6b:e6:79:dc:02:3d:94:85:eb:ae:8c:76:a4:59:10:d6:0a:53:17:36:43:28:cb:2b:28:85:b7:17:57

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.libertyinsurance.ie

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertyinsurance.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.libertyinsurance.ie
api-sg.libertymedicalinsurance.com
canalmediado.libertyseguros.es
ccs.libertymedicalinsurance.com
claimpartners.libertyseguros.es
clientes.genesis.es
clientes.libertyseguros.es
clientes.regal.es
docidd.genesis.es
docidd.libertyseguros.es
docidd.regal.es
documentacion.genesis.es
documentacion.libertyseguros.es
documentacion.regal.es
esb.libertyseguros.es
genesis.es
institucional.libertyseguros.es
laregalitat.cat
liberty-insurance.ie
libertyconnect.ie
libertyinsurance.com.vn
libertyinsurance.ie
libertyseguros.es
m-profesionales.libertyseguros.es
mediadores.libertyseguros.es
mediadoresbk.libertyseguros.es
pasarelapago.libertyseguros.es
profesionales.libertyseguros.es
regal.cat
regal.es
seguroscoche.regal.es
seguroshogar.regal.es
segurosmoto.regal.es
servicios.liberty.cl
static1-acpt.genesis.es
static1-acpt.regal.es
static1-fix.genesis.es
static1-fix.regal.es
static1.genesis.es
static1.libertyexpatriates.es
static1.libertyseguros.es
static1.regal.es
static2-acpt.genesis.es
static2-acpt.regal.es
static2-fix.genesis.es
static2-fix.regal.es
static2.genesis.es
static2.libertyexpatriates.es
static2.libertyseguros.es
static2.regal.es
static3.genesis.es
static3.libertyseguros.es
static3.regal.es
static4.genesis.es
static4.libertyseguros.es
static4.regal.es
vc.libertymedicalinsurance.com
wir-rufen-sie-zurueck.libertyexpatriates.es
www-preint-coches.genesis.es
www-preint-hogar.genesis.es
www-preint-motos.genesis.es
www.laregalitat.cat
www.libertyconnect.ie
www.libertyeurope.at
www.libertyeurope.de
www.libertyeurope.ie
www.libertyexpatriates.es
www.libertyseguros.es
www.libertyseguros.pt
www.regal.cat
www.regal.es
www.regalhogar.es
www.regalmoto.es
www.vidaregal.es
www2.libertyseguros.com.br
www2.indiana.com.br
www.temvalor.libertyseguros.com.br
www.portaldesegurosliberty.com.br
www.libertyweb.com.br
www.libertyseguros.com.br
www.liberty.ec
www.indiana.com.br
www.aliroseguro.com.br
ww3.liberty.cl
webmail1.libertyseguros.com.br
webapp.libertycolombia.com.co
wct.libertyseguros.com.br
uat.liberty.ec
transporte.libertyseguros.com.br
www.liberty.cl
inspecciones.libertyseguros.co
tarificador-seguros-coche.regal.es
habeasdata.libertyseguros.co
aliados.libertyseguros.co

Other certificates including the domain name libertyinsurance.ie

(limited to 100 certificates)
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
www.libertyinsurance.ie
connect.libertyqa.pt
www.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
www.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyseguros.com.br
digital.libertyseguros.co
act-dmz.libertyseguros.com.br
connect.libertyqa.pt
libertyseguros.com
libertyseguros.com
sip-kdc-03.libertymutual.com
sip-pdc-03.libertymutual.com
uat.mediedge.com
uat.mediedge.com
act-www.libertyseguros.com.br
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
connect.libertyqa.pt
digital.libertyseguros.co
access-emea-01.lmguc.com
www.libertyinsurance.ie
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
www.libertyinsurance.ie
brokers.libertyinsurance.ie
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
digital.libertyseguros.co
www.libertyinsurance.ie
uat.mediedge.com
connect.libertyqa.pt
libertymutual.com
libertymutual.com
act-www.libertyseguros.com.br
l8portal-prod.libertyinsurance.ie
libertymutual.com
webmail.libertyinsurance.ie
act-www.libertyseguros.com.br
www.libertyinsurance.ie
pwkipgf-gflnc02.gfab.lmig.com
act-meucotadorfrota.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
libertyseguros.com
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
pwkipgf-gflnc02.gfab.lmig.com
digital.libertyseguros.co
uat.mediedge.com
libertymutual.com
www.libertyinsurance.ie
act-www.libertyseguros.com.br
connect.libertyqa.pt
webmail.libertyinsurance.ie
uat.mediedge.com
webmail.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
libertymutual.com
uat.mediedge.com
act-www.libertyseguros.com.br
digital.libertyseguros.co
connect.libertyqa.pt
pymes.libertyseguros.co
act-dmz.libertyseguros.com.br
codapd-dev-sp1.libertyinsurance.ie
act-dmz.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
pymes.libertyseguros.co
libertymutual.com
brmspolicy-uat.libertyinsurance.in
digital.libertyseguros.co
uat.mediedge.com
www.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
libertyseguros.com
connect.libertyqa.pt
libertymutual.com
connect.libertyqa.pt
uat.mediedge.com
act-dmz.libertyseguros.com.br
digital.libertyseguros.co
libertymutual.com

Certificate

The complete raw certificate details for www.libertyinsurance.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH6HPewcF5u6u2yPr5ks
lbD3zXsDGudtuy1zujxjjJTZM2tR9b7Lf/qCJph1m2lJ+rjaJy/Zw3JthJ37H8OZ
ZRkG+6mlv5qv6+8ses4Ypocs43rCo6mawAGdDyeSMLUiaR80IiHRLq0UTJTXOGgF
SJPJwBW17BbwRncCYmCk0x9ylYTd5hNoUCpyTbhc27rSh1YE5Pqua6Zp7QfO7+ut
INGqw0BCjQv/dvs1+MZVMMUcH5bdTFQWSExoKe4f9bEE/Hb6KRcehyoTeSw5MNBt
y3fv1l0cfVV3eco2ovIDc7Cyxc6ZF2t43JnF0bRXn+AHKwYHsx91VPYWRy+IofSR
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158413563452584869575721913216944625180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 02:13:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 02:13:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertyinsurance.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19755568999253204037797382643060793231673575671005902901470256062120708564448888984027866803884818862304956048869687218112285941362432424858547541386888033077229677569300951352811567529817754696106507789262455512162084239735556525774464815729358317281568675642451918475560954961256507143362484188835265363010596016029930877216013300696942593071374228952569552342416808968950790522575798978851667945638295244787780126186053753803490910831142799580674112472584997254683958656136465656811528881012191276143304914200461392692591830012400004720933182056510702425875723413830596270354119801189238266134136707625140591301059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9517a6d8be41af87b56d78d4b9bcc3c915fe5a5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-sg.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canalmediado.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institucional.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laregalitat.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty-insurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadores.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadoresbk.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasarelapago.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroscoche.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroshogar.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosmoto.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicios.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wir-rufen-sie-zurueck.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-coches.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-hogar.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-motos.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laregalitat.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalhogar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalmoto.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaregal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temvalor.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldesegurosliberty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aliroseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww3.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail1.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wct.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transporte.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspecciones.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarificador-seguros-coche.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habeasdata.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliados.libertyseguros.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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