DV SSL/TLS Certificate for liber.pro

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the liber.pro DV SSL/TLS Certificate

This certificate with serial number 05:45:ec:24:c7:55:05:bc:8f:e1:93:3d:66:67:4f:cf:a8:34 for liber.pro was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for liber.pro provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:45:ec:24:c7:55:05:bc:8f:e1:93:3d:66:67:4f:cf:a8:34
Serial Number (int): 459354801748973814934849882541967016962100
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 45:50:ad:c7:01:30:77:ec:a4:a7:a9:8e:b2:21:49:94:01:a9:a0:61
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): b6:a4:31:e6:1a:6e:ee:d0:8b:6b:c1:4b:1b:e7:7e:8b:81:0a:e6:20
Fingerprint (SHA-256): 1e:22:1f:51:9e:20:ff:24:8b:16:ff:01:07:f0:2a:27:ca:0d:38:aa:fb:50:11:fd:c3:68:0f:1d:53:f4:78:c2

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/53.crl

Check the revocation status for certificate liber.pro
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for liber.pro

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for liber.pro in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLpTvfJWzw8JxJ3hsSCI
yhAeuXsBcqARr1BRelzubnAq/bducmEX+dXTBgCucJD3EAb6vCQeK0y+nIs8nmE2
v/WnDPMgkEjmT9h+9virXo+dl12rO9wJjmOIsA6XLNsrAY1ZURnExiaN1ZI92WHJ
qsLweSVmaAJuGFOPsAXQ1Usu8qyD6HtYniaeKAFp38VF0wP2FU1E8AWgQ9WDnUDZ
XhFz9DT2ldN8JpJYpDpx3ElO3TLUphOWWoG7PbUhHJUNbWtN7Q8JjbyCu6C8NlOW
cGFnb0J9KYfz5x8h9pAdegakIBGYuzezTToGUpgdFqIhfMYiie+s+9It2EOWO9lN
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 459354801748973814934849882541967016962100
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-25 05:06:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-23 05:06:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liber.pro'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25339542319120442856755070447707459778170293769578518262847837151872140486110778805732951541154818671818129185627921891855100099724340888313923040224132868305871616494467047265172433165705368380928616646907084205587978536230602597117872549104632976042811157464039427057872800193981922515199654335970914914112553394138675187835643016819627810730125670367520911822244793876216373931616670795248894803349507544765462794296479194608576146564194359170570858773413055115682267609539082287154539347590399849336683210002918808167930530718904418956827247401617801173209437754841043439156366663215344345024156485707027699027221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4550adc7013077eca4a7a98eb221499401a9a061
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liber.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liber.pro'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/53.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a00000197060b9ae00000040300473045022100bb382cb403f0a3d3994b5ca789bbc83c02f335924dfaa3eb1a3912490d314d79022050857af6d3bf4efd79f96c05bc7aa3b55626ca4d43c7502427184a5ad4b80d28007500af181a28d68ca3e0a98a4c9c67ab09f8bbbc22baaebcb138a3a19dd3f9b6030d00000197060b9f2c00000403004630440220696847e8f7e007ef2ff2f2cbdbc58118b674433e6a299951fd8114a1a980ba3602207e9b46bec0ed92d0478e38d8fb0dd984a23f60c2ab36601469fbc4c4cf0212f6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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