www.liberata.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:45:30:6e:e7:81:9b:a8:aa:95:e6:fa:1d:a2:da:7d:d2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.liberata.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:45:30:6e:e7:81:9b:a8:aa:95:e6:fa:1d:a2:da:7d:d2
Serial Number (int): 337311793830015259847912887725951821708754
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:2d:f0:12:ac:84:08:2d:a9:e0:e9:ba:c6:f7:f2:77:24:e5:d3:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:5b:ef:55:5e:58:00:70:ab:40:f5:f5:eb:d2:39:64:44:73:d7:89
Fingerprint (sha256): 35:61:fb:bf:d5:ff:29:e2:f0:19:50:e5:eb:c6:22:70:40:92:72:1c:a1:63:74:8d:4c:12:0f:20:05:f1:0b:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.liberata.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.liberata.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.liberata.co

Other certificates including the domain name liberata.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.liberata.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqAXa1ol8UH2WpCuF3LT2
FeKJmPfs36n39xz/Eu+Wa3CziZnJjpNVQm6sJWkI2Wutsb/qE8jf3Bn9LVmBz8pL
waGMQxPgn5ss4uQmmiUudzRCFtpWMyFDW+p8k2K07dIEup+yHIyWoXKO2Pmf3xaG
tnuRDzgI04uhUkhsAcMzcY/tdF7V5bx7ZsLdTt8PwHrH3Mp87iML2ScZjheHBfJ3
KJPOyIgS5D2QkTwRUuPm4IReUkZ8IJSdyWKMhgJuj6wEMbTN7zbCoxyS8ZB2avII
H/ZpQ2x6Zg3+5EdbZLkOGXDvHqAVNg3GoAn4Swlj4gjJcV6ObpkfoqXSbosuhMMj
IfEWgI6xUAQlKBjNH5JZwqjRXF1IJmhFjePztyMUulZT3vpvs99GsLaFkLabTuwH
pPdSa7Cx7/HX8G+eX8OUz/IkE2QOzPgqYZ6LAqLc8X6F7B7OoYqFpxOiYuab2hcm
gHvjOxHorXg11F1TljktnGdrujqtsz3aV0fWVw2t60H4IxkEYLDzZ/AYFpsxQVGl
sYFCzOp5JW0UvtqOpddzcfvMoPOedvl0/6PQH32NOpdmkgePooYUAyOzqolOhY31
//1qG2QAQ2lkZ7uq4UtoM2RzD5C+7kLNP1la2g+xmWGnF1La7mGIf9fccsclhdUt
L1OHC8yiARbc9bc9Yo7dDXECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337311793830015259847912887725951821708754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 16:12:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 16:12:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.liberata.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 685473506737011077117525215730737845966011473371428592308937948644841982921706252932188065908291775990484076225563563192334438317345619919302038916239947178218990545537539441301196181684913620685157847952819108868219303369991963108939178281154735072632955673136101576289780203158105148241931151573083799481228067440106381468112306336289527559860252784330217459938570351123477585229122674358802557052880473812713795259335585109914499777051922853510662186538524253002925623281872606705458154831331717198830902185702634155429834478642068135753837075833466077964607911702255363437838872710960398304358138755634671813013428726411862068785020995963121251054364309465408152692738924353956028653821324112479278652211992920818692005940300032122449537790344397917250217230966272788948009874120897980965205182642671544196643775493570662511796584758242098567960112306907033956179274882981451075876538660261839256376695127256799436861174643485024797612396017966462587387780698099313722336465220085023421047275548138414678068229864672359844513396530500581083397850759457200625969046025791894682368346871326733118453261196832557884949551077347115049955638272509015609842391246047813306656516161490354543945427010503004591933176211369623030813494641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e2df012ac84082da9e0e9bac6f7f27724e5d3fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberata.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aff6e33af000004030047304502206602644f02cb766001c7ed9c8f32e05977862b159b2654b34e09f1c949e9a7c4022100bc7efc81c3b85222685d755e9ffc1d18b2bc83a45b9ab9cf809b3275e70f9df100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aff6e35c2000004030046304402205c3305a5425dcac690bfd9caced97d9b68afcc33087ffe809884f780290d3ae3022053396086dfcbea2b00c1fa5983cbbfcf4cf68858b2722d685ee4b9ad0cdf94f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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