*.liveagent.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:52:ae:5b:9d:20:df:3f:3d:b0:60:f6:af:64:08:8a was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.liveagent.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:52:ae:5b:9d:20:df:3f:3d:b0:60:f6:af:64:08:8a
Serial Number (int): 4416988727417314095453969656861427850
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: af:17:7e:52:c7:77:96:2f:7f:45:34:86:fe:90:55:7c:05:01:1c:2b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): fe:ec:21:16:75:91:7a:87:db:ca:06:0b:1c:f2:f6:51:02:91:94:b3
Fingerprint (sha256): 8b:7d:24:2e:2c:fd:63:38:b9:da:bf:13:e0:f0:ad:0c:3a:97:33:20:bf:ba:72:d9:ac:c4:ab:6b:94:f7:56:5c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.liveagent.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.liveagent.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.liveagent.com
*.liveagent.ee
*.live-agent.co.uk
*.live-agent.cz
*.liveagent.ae
*.liveagent.ch
*.live-agent.cn
*.live-agent.it
*.liveagent.sk
*.liveagent.com.br
*.liveagent.si
*.liveagent.dk
*.liveagent.lt
*.liveagent.lv
*.liveagent.hr
*.liveagent.fr
*.liveagent.hu
*.liveagent.de
*.liveagent.no
*.liveagent.bg
*.liveagent.ph
*.liveagent.vn
*.liveagent.ro
*.liveagent.cr
*.live-agent.pl
*.liveagent.gr
*.live-agent.nl
*.liveagent.es

Other certificates including the domain name liveagent.com

(limited to 100 certificates)
liveagent.com
admin.liveagent.com
liveagent.com
liveagent.com
admin.liveagent.com
*.liveagent.com
*.liveagent.com
translate.liveagent.com
status.liveagent.com
account.liveagent.com
cdn.liveagent.com
account.liveagent.com
admin.liveagent.com
*.liveagent.com
cdn.liveagent.com
status.liveagent.com
*.liveagent.com
*.liveagent.com
account.liveagent.com
account.liveagent.com
cdn.liveagent.com
admin.liveagent.com
admin.liveagent.com
admin.liveagent.com
account.liveagent.com
liveagent.com
account.liveagent.com
admin.liveagent.com
status.liveagent.com
liveagent.com

Certificate

The complete raw certificate details for *.liveagent.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4XLg/YpMpBp66XLC3Nw
YyOm2mhf7tQhCSZozmZUVF4FdC8HeRK6Lza9/r/RvClKbcbDheCDHnCdPVg04oaw
Rd6eWX1wRLXSflhAaz869DJnxBqm03K0E4WgknO/SRTPULiXTb3xJb6gJxiHTtmq
aIyZMxzIbMYqXHruxpgMGx1Jra3aiXsqxEUpCgSj64yQgXKubDab3Ah55pXlYBvx
1aRj/MrEvWgB9A91Qj8a/jiKrwN4TU0Qi7N2h1YoXaa0fV0Mq+xOjyHmfkxAt6Mk
sieM7s85WuJG32mxiRi1+OWpjUrU03LoxbWRyNXPmeLOgJp7KdumRlPPv/EHffl0
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4416988727417314095453969656861427850
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.liveagent.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22662633353696008606301688448050376517893681745753553088569974587995911247350986793473161729052643912022483007779138849702942779476822498749959925597300662239934139104175818448333197654283935649809073401662754160389662514560330222476447611083212387735667406926308125088167900887328780908457920866703042264856701282195215936290625862570224127086663486845491395960800956639030066688051614905876073591605333215915970486498004176460530618812043140850918353666510600473865789248842752773176197533033574879002819790872095654393945320766845655527376657426666680552953683914261911359153188779545104660600151731081277494359211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af177e52c777962f7f453486fe90557c05011c2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (466 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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