www.libertyinsurance.ie

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 4e:48:1f:fb:d2:8d:06:33:d6:f9:1e:11:3a:be:c1:a7 was issued on by Entrust, Inc..

With 92 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Mutual Group

Organization: Liberty Mutual Group
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:48:1f:fb:d2:8d:06:33:d6:f9:1e:11:3a:be:c1:a7
Serial Number (int): 104054277751166789851404442357454520743
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b6:72:95:da:f2:0a:f2:a8:92:c4:10:2d:3a:5c:0b:49:4e:2a:2d:70
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 24:5e:0c:b7:cc:0c:c6:aa:64:d1:d6:36:95:6a:58:e3:ca:43:c4:17
Fingerprint (sha256): 69:98:bb:ea:2b:5c:cb:81:64:5f:05:ab:3e:c9:4c:08:7d:77:58:9c:e8:28:27:e6:10:63:74:8b:cd:39:03:42

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.libertyinsurance.ie

92

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertyinsurance.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.libertyinsurance.ie
api-sg.libertymedicalinsurance.com
canalmediado.libertyseguros.es
ccs.libertymedicalinsurance.com
claimpartners.libertyseguros.es
clientes.genesis.es
clientes.libertyseguros.es
clientes.regal.es
docidd.genesis.es
docidd.libertyseguros.es
docidd.regal.es
documentacion.genesis.es
documentacion.libertyseguros.es
documentacion.regal.es
esb.libertyseguros.es
genesis.es
institucional.libertyseguros.es
laregalitat.cat
liberty-insurance.ie
libertyconnect.ie
libertyinsurance.com.vn
libertyinsurance.ie
libertyseguros.es
m-profesionales.libertyseguros.es
mediadores.libertyseguros.es
mediadoresbk.libertyseguros.es
pasarelapago.libertyseguros.es
profesionales.libertyseguros.es
regal.cat
regal.es
seguroshogar.regal.es
servicios.liberty.cl
static1-acpt.genesis.es
static1-acpt.regal.es
static1-fix.genesis.es
static1-fix.regal.es
static1.genesis.es
static1.libertyexpatriates.es
static1.libertyseguros.es
static1.regal.es
static2-acpt.genesis.es
static2-acpt.regal.es
static2-fix.genesis.es
static2-fix.regal.es
static2.genesis.es
static2.libertyexpatriates.es
static2.libertyseguros.es
static2.regal.es
static3.genesis.es
static3.libertyseguros.es
static3.regal.es
static4.genesis.es
static4.libertyseguros.es
static4.regal.es
vc.libertymedicalinsurance.com
wir-rufen-sie-zurueck.libertyexpatriates.es
www-preint-coches.genesis.es
www-preint-hogar.genesis.es
www-preint-motos.genesis.es
www.laregalitat.cat
www.libertyconnect.ie
www.libertyeurope.at
www.libertyeurope.de
www.libertyeurope.ie
www.libertyexpatriates.es
www.libertyseguros.es
www.libertyseguros.pt
www.regal.cat
www.regal.es
www.regalhogar.es
www.regalmoto.es
www.vidaregal.es
www2.libertyseguros.com.br
www2.indiana.com.br
www.temvalor.libertyseguros.com.br
www.portaldesegurosliberty.com.br
www.libertyweb.com.br
www.libertyseguros.com.br
www.liberty.ec
www.indiana.com.br
www.aliroseguro.com.br
ww3.liberty.cl
webmail1.libertyseguros.com.br
webapp.libertycolombia.com.co
wct.libertyseguros.com.br
uat.liberty.ec
transporte.libertyseguros.com.br
www.liberty.cl
inspecciones.libertyseguros.co
tarificador-seguros-coche.regal.es
habeasdata.libertyseguros.co
aliados.libertyseguros.co

Other certificates including the domain name libertyinsurance.ie

(limited to 100 certificates)
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
www.libertyinsurance.ie
connect.libertyqa.pt
www.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
www.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyseguros.com.br
digital.libertyseguros.co
act-dmz.libertyseguros.com.br
connect.libertyqa.pt
libertyseguros.com
libertyseguros.com
sip-kdc-03.libertymutual.com
sip-pdc-03.libertymutual.com
uat.mediedge.com
uat.mediedge.com
act-www.libertyseguros.com.br
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
connect.libertyqa.pt
digital.libertyseguros.co
access-emea-01.lmguc.com
www.libertyinsurance.ie
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
www.libertyinsurance.ie
brokers.libertyinsurance.ie
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
digital.libertyseguros.co
www.libertyinsurance.ie
uat.mediedge.com
connect.libertyqa.pt
libertymutual.com
libertymutual.com
act-www.libertyseguros.com.br
l8portal-prod.libertyinsurance.ie
libertymutual.com
webmail.libertyinsurance.ie
act-www.libertyseguros.com.br
www.libertyinsurance.ie
pwkipgf-gflnc02.gfab.lmig.com
act-meucotadorfrota.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
libertyseguros.com
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
pwkipgf-gflnc02.gfab.lmig.com
digital.libertyseguros.co
uat.mediedge.com
libertymutual.com
www.libertyinsurance.ie
act-www.libertyseguros.com.br
connect.libertyqa.pt
webmail.libertyinsurance.ie
uat.mediedge.com
webmail.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
libertymutual.com
uat.mediedge.com
act-www.libertyseguros.com.br
digital.libertyseguros.co
connect.libertyqa.pt
pymes.libertyseguros.co
act-dmz.libertyseguros.com.br
codapd-dev-sp1.libertyinsurance.ie
act-dmz.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
pymes.libertyseguros.co
libertymutual.com
brmspolicy-uat.libertyinsurance.in
digital.libertyseguros.co
uat.mediedge.com
www.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
libertyseguros.com
connect.libertyqa.pt
libertymutual.com
connect.libertyqa.pt
uat.mediedge.com
act-dmz.libertyseguros.com.br
digital.libertyseguros.co
libertymutual.com

Certificate

The complete raw certificate details for www.libertyinsurance.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyI49n6oSUe7JODH/2r2
Oi1btUf7wwIMHtRb2ZsRRjH2/bIexEcsTdi8SwZzW00hhPuer/+Yoj1Tt5JiCpIt
tKQn56ZHQ6Dgv+RBxnYCC60l0x1Yblspqg9hep5qoRUNCfNCJikiA550HiWtIbJ5
3Y7plZc9CxRLcSTd8u+5WWilCkhni4mIerGcgA6n7w4yiMdYCykApbNL3lm91GgD
memMKwjmMupr/+Hrysd9ZiJGk7zC4pBN4T2U5KaT6tY8TnNas2hJL4jYkCJAm6lh
BqZRRrXnf5FhjlDiAnPmpf++qKClidEvZRnw6kI5g7MRFmydpKPJHNdUA1KPdt2+
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104054277751166789851404442357454520743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 14:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-30 14:16:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertyinsurance.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20088766238849488011822792266713019334954187542313415824496822737515359653632764633073417899351228099768097167115552571960144820090301218678999879600813769896663275706833590048807800785391153033422147828607831608972837691306233141739774209478611723486225613092001733607634282410800567415650526027421880408123101373642804219296258237435327630593702267954222661789609648267782127649373910913298006883208973600379279009688838073365022013265667216590646918036517221785954081769513558595054175319979812741636252342356029389140226592048046064575297230165098247372874696217327118016861324655803598560338436958829267763707623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b67295daf20af2a892c4102d3a5c0b494e2a2d70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-sg.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canalmediado.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institucional.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laregalitat.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty-insurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadores.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadoresbk.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasarelapago.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroshogar.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicios.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wir-rufen-sie-zurueck.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-coches.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-hogar.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-motos.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laregalitat.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalhogar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalmoto.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaregal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temvalor.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldesegurosliberty.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyweb.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiana.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aliroseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww3.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail1.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wct.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'transporte.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspecciones.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tarificador-seguros-coche.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'habeasdata.libertyseguros.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliados.libertyseguros.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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