www.libertyinsurance.ie

- Liberty Mutual Group -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:92:28:ed:dc:c6:77:dd:b9:09:89:7f:c5:f9:b8:01 was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Liberty International
State / Province: New Hampshire
Locality: Portsmouth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:92:28:ed:dc:c6:77:dd:b9:09:89:7f:c5:f9:b8:01
Serial Number (int): 12721957445195625162019536393874290689
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 61:e6:1c:70:4f:ca:f6:b3:5d:a0:69:54:90:e7:a5:b6:e8:d1:e7:9d
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 48:cf:53:b7:ab:6a:63:44:64:0a:74:70:a3:c8:10:0a:e2:10:d6:ba
Fingerprint (sha256): 6b:f1:44:c3:f2:be:6b:90:06:f4:14:5e:09:9a:19:e0:a1:26:cb:83:13:8a:0e:3d:be:03:10:65:93:8c:38:42

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.libertyinsurance.ie

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.libertyinsurance.ie

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webapp.libertycolombia.com.co
vc.libertymedicalinsurance.com
www.libertyseguros.pt
docidd.regal.es
docidd.genesis.es
docidd.libertyseguros.es
ventas2.segurosliberty.cl
libertyconnect.ie
api-sg.libertymedicalinsurance.com
ccs.libertymedicalinsurance.com
www.libertyconnect.ie
www.segurosliberty.cl
siniestros.segurosliberty.cl
www8.segurosliberty.cl
seguros.segurosliberty.cl
www.lmginsurance.co.th
www8.pentagenerales.cl
liberty-insurance.ie
www.vidaregal.es
www.regalmoto.es
www.regalhogar.es
www.regal.es
www.regal.cat
www.libertyseguros.es
www.libertyinsurance.ie
www.libertyexpatriates.es
www.libertyeurope.ie
www.libertyeurope.de
www.libertyeurope.at
www-preint-motos.genesis.es
www-preint-hogar.genesis.es
www-preint-coches.genesis.es
ww3.liberty.cl
ww02.libertymutual.com.hk
wir-rufen-sie-zurueck.libertyexpatriates.es
static4.regal.es
static4.libertyseguros.es
static4.genesis.es
static3.regal.es
static3.libertyseguros.es
static3.genesis.es
static2.regal.es
static2.libertyseguros.es
static2.libertyexpatriates.es
static2.genesis.es
static2-fix.regal.es
static2-fix.genesis.es
static2-acpt.regal.es
static2-acpt.genesis.es
static1.regal.es
static1.libertyseguros.es
static1.libertyexpatriates.es
static1.genesis.es
static1-fix.regal.es
static1-fix.genesis.es
static1-acpt.regal.es
static1-acpt.genesis.es
segurosmoto.regal.es
seguroshogar.regal.es
seguroscoche.regal.es
regal.es
regal.cat
qlikview.liberty.cl
profesionales.libertyseguros.es
pasarelapago.libertyseguros.es
mediadoresbk.libertyseguros.es
mediadores.libertyseguros.es
m-profesionales.libertyseguros.es
libertyseguros.es
libertyinsurance.ie
lbis.lmginsurance.co.th
lbis-admin.lmginsurance.co.th
institucional.libertyseguros.es
genesis.es
esb.libertyseguros.es
documentacion.regal.es
documentacion.libertyseguros.es
documentacion.genesis.es
clientes.regal.es
clientes.libertyseguros.es
clientes.genesis.es
claimpartners.libertyseguros.es
canalmediado.libertyseguros.es
apis.libertyseguros.com.br

Other certificates including the domain name libertyinsurance.ie

(limited to 100 certificates)
uat.mediedge.com
brmspolicy-uat.libertyinsurance.in
libertymutual.com
www.libertyinsurance.ie
connect.libertyqa.pt
www.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
www.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyseguros.com.br
digital.libertyseguros.co
act-dmz.libertyseguros.com.br
connect.libertyqa.pt
libertyseguros.com
libertyseguros.com
sip-kdc-03.libertymutual.com
sip-pdc-03.libertymutual.com
uat.mediedge.com
uat.mediedge.com
act-www.libertyseguros.com.br
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
connect.libertyqa.pt
digital.libertyseguros.co
access-emea-01.lmguc.com
www.libertyinsurance.ie
uat.mediedge.com
uat.mediedge.com
uat.mediedge.com
libertymutual.com
libertymutual.com
www.libertyinsurance.ie
brokers.libertyinsurance.ie
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
digital.libertyseguros.co
www.libertyinsurance.ie
uat.mediedge.com
connect.libertyqa.pt
libertymutual.com
libertymutual.com
act-www.libertyseguros.com.br
l8portal-prod.libertyinsurance.ie
libertymutual.com
webmail.libertyinsurance.ie
act-www.libertyseguros.com.br
www.libertyinsurance.ie
pwkipgf-gflnc02.gfab.lmig.com
act-meucotadorfrota.libertyseguros.com.br
soatenlinea-nonprod.libertyseguros.co
libertyseguros.com
pwwipgf-gflnc01.gfab.lmig.com
uat.mediedge.com
pwkipgf-gflnc02.gfab.lmig.com
digital.libertyseguros.co
uat.mediedge.com
libertymutual.com
www.libertyinsurance.ie
act-www.libertyseguros.com.br
connect.libertyqa.pt
webmail.libertyinsurance.ie
uat.mediedge.com
webmail.libertyinsurance.ie
libertyseguros.com
libertymutual.com
digital.libertyseguros.co
libertymutual.com
uat.mediedge.com
act-www.libertyseguros.com.br
digital.libertyseguros.co
connect.libertyqa.pt
pymes.libertyseguros.co
act-dmz.libertyseguros.com.br
codapd-dev-sp1.libertyinsurance.ie
act-dmz.libertyseguros.com.br
libertyseguros.com
connect.libertyqa.pt
www.libertyinsurance.ie
pymes.libertyseguros.co
libertymutual.com
brmspolicy-uat.libertyinsurance.in
digital.libertyseguros.co
uat.mediedge.com
www.libertyseguros.com.br
brmspolicy-uat.libertyinsurance.in
libertyseguros.com
connect.libertyqa.pt
libertymutual.com
connect.libertyqa.pt
uat.mediedge.com
act-dmz.libertyseguros.com.br
digital.libertyseguros.co
libertymutual.com

Certificate

The complete raw certificate details for www.libertyinsurance.ie in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdzripraUGKVdUSI2iGC
eCL9Iy0JjQTrH5o6PBCdfZ6xwaHtM+czUrP2bAIDLK3nzOeDZp45O8xt4PHYd6nu
pcbSdWb3+C1kegH/CIx1f32Ok1GXrQVf4YkbMeZYBP3/hI/70WLUSNu4Zo6VWgRT
mhwefmsbTMnDkomF79mOXRLzcr4Ljf/Nw3a3Dk+1IiwJq5hZ2xGFWJIe/B8t++iO
uhGv81Mir7PWflGZBY9M3pdTTwOPjQIq14Va1IjH3lZYou5YaOZkvDrTYn21cQM4
x8x/LZBGzzbZDR61pSWGttfs/j83AavWQj9KqBw8bA4xhc75vdUXukDZwh6JuzYK
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12721957445195625162019536393874290689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty International'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.libertyinsurance.ie'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23967979392094233668217704656814954990319663287313215634932528970818047666567502605091454828450537426274708947897053271794677919845729538743665531596310884016834016657038458133088706291083133063159470834491589969036168381557968840491646607668980248216021558435725348103561238141173087145734235677240401710045683546534823569577470048529118838687979003108457242584590217585412166401541658933108521944364132486133292724044290827856509375680518857395220334876007283779308158407208867712248267384987170517555223380491416151274066018617347830304725557248880669770463521411678115790366841369545619587457765657404198656281187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61e61c704fcaf6b35da0695490e7a5b6e8d1e79d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2055 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.libertycolombia.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vc.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docidd.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventas2.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-sg.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccs.libertymedicalinsurance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyconnect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'siniestros.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguros.segurosliberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www8.pentagenerales.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liberty-insurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vidaregal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalmoto.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regalhogar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertyeurope.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-motos.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-hogar.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preint-coches.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww3.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww02.libertymutual.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wir-rufen-sie-zurueck.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.libertyexpatriates.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-fix.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static1-acpt.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosmoto.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroshogar.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroscoche.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regal.cat'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qlikview.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pasarelapago.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadoresbk.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediadores.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-profesionales.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbis-admin.lmginsurance.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institucional.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esb.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentacion.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.regal.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.genesis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimpartners.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canalmediado.libertyseguros.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.libertyseguros.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001665e4066e00000040300473045022100b7bb860d50efd49110c7780b9bc04600c2ec0e7f8b835a82cabc9ef0f625ce7e022015739b3046bd03261f8b9ee180cee3808e7e0ade93815dccdfe894c24c00c3200075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001665e4066aa000004030046304402205ed1133aa5b908cb848fc0fd4dbd27bd90f7ae05ead33c2489c34f558ba4d41902207973f43cdef45a8669fdbb2991025dce75b66fbc041a499a6b95fd852fe98e08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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