*.liveagent.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:3c:05:e0:62:ca:90:f3:2c:af:52:c0:3d:86:00:db was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.liveagent.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:3c:05:e0:62:ca:90:f3:2c:af:52:c0:3d:86:00:db
Serial Number (int): 14933164954877004197823646345801892059
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cf:0e:af:fb:2b:33:6c:4d:47:29:21:12:33:fa:c2:e9:c6:10:08:64
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 81:60:87:31:40:c0:96:1b:59:3a:9f:5b:d3:29:35:ce:96:a2:14:57
Fingerprint (sha256): 97:9b:1d:a4:5d:39:25:18:5c:fa:3d:ab:17:79:0d:3f:38:73:d9:fa:b5:86:d6:b4:8a:9c:dd:4f:f1:97:2a:de

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.liveagent.com

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.liveagent.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.liveagent.com
*.liveagent.ee
*.live-agent.co.uk
*.live-agent.cz
*.liveagent.ae
*.liveagent.ch
*.live-agent.cn
*.live-agent.it
*.liveagent.sk
*.liveagent.com.br
*.liveagent.si
*.liveagent.dk
*.liveagent.lt
*.liveagent.lv
*.liveagent.hr
*.liveagent.fr
*.liveagent.hu
*.liveagent.de
*.liveagent.no
*.liveagent.bg
*.liveagent.ph
*.liveagent.vn
*.liveagent.ro
*.liveagent.cr
*.live-agent.pl
*.liveagent.gr
*.live-agent.nl
*.liveagent.es

Other certificates including the domain name liveagent.com

(limited to 100 certificates)
liveagent.com
admin.liveagent.com
liveagent.com
liveagent.com
admin.liveagent.com
*.liveagent.com
*.liveagent.com
translate.liveagent.com
status.liveagent.com
account.liveagent.com
cdn.liveagent.com
account.liveagent.com
admin.liveagent.com
*.liveagent.com
cdn.liveagent.com
status.liveagent.com
*.liveagent.com
*.liveagent.com
*.liveagent.com
*.liveagent.com
account.liveagent.com
account.liveagent.com
cdn.liveagent.com
admin.liveagent.com
admin.liveagent.com
admin.liveagent.com
account.liveagent.com
liveagent.com
account.liveagent.com
admin.liveagent.com
status.liveagent.com
liveagent.com

Certificate

The complete raw certificate details for *.liveagent.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xxltZk7rnCDjbYVkhDn
KYJJt3fDWAsOe7AGmCFZmp7OxeTSkiC5P1mu+bVMBfbrDOUcN6KNraMU7b4A0p2d
TEkV5Pr0Y/PxrnuzRT6M76L7vGqQEkf5sv4EjptcaqBeZDtRjOAd9beMeLV9V71P
StKtoHDvkuBpzAf1sscOGSHoiVxeKNhCseBji1DVKjkCJ8aiBymM7b2YhiC2GC/a
j8W1/BE4a95sHWP3TyBN9T12njWUt+9NfI4ttkOConUhWVHhxBHyKjOywIPS9pvI
+DvKf1Q5NwqDILNJN2CsTqPEDxUAfpVKo+lyHFt/B9Cuk6TeEAbN3hSxa//gqMUU
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14933164954877004197823646345801892059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.liveagent.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26650285579472725764463040023030868374868302405743250051356838970976056757975969790755839603342689788007419016316060428361659176160859362461487745671635607397221028396830032471045784075042663051650016609712763751591333152186497250126687533616503666456646717369469134150848840880712421163309183324420552446717053983652455656684375785192885973749864691337289685786209721112417481773579018183986947369458989356751199264739122693995568921032588163379215624398890444642891408859315235097952231128941313634395274848446010146710160107204965768889306756171404800974787369575569683964464083246128123222277034338093956273083619
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf0eaffb2b336c4d4729211233fac2e9c6100864
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (466 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.live-agent.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveagent.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008357233da42c29b09f68d636b8c28b824920262aab327c9e1fbceb45cd066710653f534c6e5639626d7651a07e1695dfe78c67702f9dd70872fa37f8b4a1c4d6946794367c28dbdd12a9bd5220df0a790c2ae822721333aac5995bc9b62e63942c5417dd269490d8354dcaad90febbbce9faad7ec3c429f852734b8082ae7ac11760f7183f5d65ce15d7407a1430f84ff8fd7fab66b97fbee5c0876f9d84aba7c3208c5932b7ee4e236d4775086ea1b8cd163cf10b038d0576f0e0639ed45ab3d252db9f4bc10a67f71f3ba1b4aa8e20cec91f33b6bab42c4a3e7033d460fc14c0b1eb301cac019f5b3a59665d8f29c1de7c358ea0256a6210c48aa815585141