*.liveagent.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:50:2d:e5:84:6f:4b:0a:3a:fa:9b:69:75:40:39:82 was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.liveagent.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:50:2d:e5:84:6f:4b:0a:3a:fa:9b:69:75:40:39:82
Serial Number (int): 13708594599199891459621205803182078338
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:38:bc:ef:8b:8d:a1:e8:bf:04:28:7e:c4:d3:84:0b:ec:39:11:90
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 13:c3:8e:44:af:8f:c2:5b:5e:3b:89:28:dc:17:4f:57:61:84:7b:92
Fingerprint (sha256): 51:9b:7b:2e:39:2d:20:cd:54:6f:f5:bd:65:a1:3f:90:cf:4e:cd:14:1d:ae:eb:8b:eb:c5:82:ce:41:10:92:f5

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.liveagent.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.liveagent.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.liveagent.com
*.liveagent.ee
*.live-agent.co.uk
*.live-agent.cz
*.liveagent.ae
*.liveagent.ch
*.live-agent.cn
*.live-agent.it
*.liveagent.sk
*.liveagent.com.br
*.liveagent.si
*.liveagent.dk
*.liveagent.lt
*.liveagent.lv
*.liveagent.hr
*.liveagent.fr
*.liveagent.hu
*.liveagent.de
*.liveagent.no
*.liveagent.bg
*.liveagent.ph
*.liveagent.vn
*.liveagent.ro
*.liveagent.cr
*.live-agent.pl
*.liveagent.gr
*.live-agent.nl
*.liveagent.es

Other certificates including the domain name liveagent.com

(limited to 100 certificates)
liveagent.com
admin.liveagent.com
liveagent.com
liveagent.com
admin.liveagent.com
*.liveagent.com
*.liveagent.com
translate.liveagent.com
status.liveagent.com
account.liveagent.com
cdn.liveagent.com
account.liveagent.com
admin.liveagent.com
*.liveagent.com
cdn.liveagent.com
status.liveagent.com
*.liveagent.com
*.liveagent.com
account.liveagent.com
account.liveagent.com
cdn.liveagent.com
admin.liveagent.com
admin.liveagent.com
admin.liveagent.com
account.liveagent.com
liveagent.com
account.liveagent.com
admin.liveagent.com
status.liveagent.com
liveagent.com

Certificate

The complete raw certificate details for *.liveagent.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7jPwwzrbJ+rHQrQ1dsj
BVpW/HNPWbAk+wYXCPpZuzwyKCLnhwlmPDN3rA86N0mPbFdTE77fRFeyDhQj7BTV
618mK5nBjQXNYa7x/ial5a2yAEegkWg5SNQ/okgnqKnSce8+jNZWplNL+WYRKwbg
EIWMgaTynUSFk+A3B3F2qgg1AHxrrVHXPJJQiVo444GtpgTZSb+5SCTStdi0e341
G22xH9KQvTWq6p7dhdopza3mwuStvHyD8kgCvBWMwsOOsDqDUFOJ5k5DF6iy2k++
nQ9g5Akdsfq/yWe5SmKm4qwtbsWad+3axullhv+sqYsQq3OKGQuZcvUl1IZkwaX6
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13708594599199891459621205803182078338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.liveagent.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23192743790557822853806294403755345213631028543995751795684179574303295236930997113906793561522133148951985490591656305389368933376939296910750720899560856137177169511172883137891020684292260719077094064409538825343789376926661064175888324046029518144687935926969615089283694988736231551799748309564940251006190274862807562523809415258266827351078031321744514379902045007414368727780337295943860935038280145557647496973335786867338854689769463014745001271597970892897869139374776714837186225507384655623170021119661636803823382906405196159332626410434406141247354546505600679700702762506376066800619285094880590035483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1438bcef8b8da1e8bf04287ec4d3840bec391190
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (466 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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