*.libertydiversified.com

- Liberty Diversified International, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:75:45:f1:56:d2:92:0a:03:c6:5e:27:3f:44:8a:58 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Liberty Diversified International, Inc.

Organization: Liberty Diversified International, Inc.
State / Province: Minnesota
Locality: New Hope
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:75:45:f1:56:d2:92:0a:03:c6:5e:27:3f:44:8a:58
Serial Number (int): 11242741305847994635733833049669143128
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 63:ff:b4:5a:15:b7:ee:dd:61:bb:97:f0:7e:18:cc:1d:b2:d8:9c:a2
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): d7:61:e1:a3:7a:6a:2c:ab:5a:7c:dc:5e:51:8b:4d:dc:fd:e7:2f:9d
Fingerprint (sha256): b4:1e:f7:3e:67:46:ba:a7:42:0f:e8:1a:29:90:54:da:bd:87:3f:9b:c6:a7:65:61:fd:f8:3a:5f:55:b9:f5:50

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate *.libertydiversified.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.libertydiversified.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.libertydiversified.com
libertydiversified.com

Other certificates including the domain name libertydiversified.com

(limited to 100 certificates)
jobs.libertydiversified.com
servicedesk.oiplans.com
mail.libertydiversified.com
mail.libertydiversified.com
mail.libertydiversified.com
helpdesk.brisbanemarkets.com.au
support.first-epdc.com
meeting.libertydiversified.com
mail.libertydiversified.com
jobs.libertydiversified.com
jobs.libertydiversified.com
soporte.grupoxxi.com.co
support.first-epdc.com
itsd.acqueon.com
support.first-epdc.com
traveler.libertydiversified.com
mail.libertydiversified.com
ithelpdesk.holmes-hills.co.uk
servicedesk.bdo.bw
gateway.libertydiversified.com
portal.libertydiversified.com
portal.libertydiversified.com
lync.libertydiversified.com
jobs.libertydiversified.com
insideldi.libertydiversified.com
itservicedesk.sodic.com
helpdesk.brisbanemarkets.com.au
jobs.libertydiversified.com
meeting.libertydiversified.com
itsd.acqueon.com
servicedesk.libertydiversified.com
gateway.libertydiversified.com
access.libertydiversified.com
lync2013pool.libertydiversified.com
servicedesk.oiplans.com
servicedesk.oiplans.com
lync2013pool.libertydiversified.com
lync2013pool.libertydiversified.com
servicedesk.oiplans.com
itsd.acqueon.com
itsd.acqueon.com
insideldi.libertydiversified.com
mail.libertydiversified.com
servicedesk.oiplans.com
servicedesk.oiplans.com
mail.libertydiversified.com
gateway.libertydiversified.com
insideldi.libertydiversified.com
jobs.libertydiversified.com
ithelpdesk.holmes-hills.co.uk
servicedesk.libertydiversified.com
servicedesk.bdo.bw
*.libertydiversified.com
servicedesk.libertydiversified.com
mail.libertydiversified.com
*.libertydiversified.com
servicedesk.oiplans.com
helpdesk.brisbanemarkets.com.au
quickplace.libertydiversified.com
servicedesk.libertydiversified.com
jobs.libertydiversified.com
mail.libertydiversified.com
*.libertydiversified.com
support.first-epdc.com
servicedesk.oiplans.com
lync2013pool.libertydiversified.com
*.libertydiversified.com
libertydiversified.com
*.libertydiversified.com
ithelpdesk.holmes-hills.co.uk
*.libertydiversified.com
jobs.libertydiversified.com
servicedesk.oiplans.com
libertydiversified.com
itservicedesk.sodic.com
*.libertydiversified.com
insideldi.libertydiversified.com
ithelpdesk.holmes-hills.co.uk
helpdesk.brisbanemarkets.com.au
itservicedesk.sodic.com
*.libertydiversified.com
soporte.grupoxxi.com.co
servicedesk.oiplans.com
soporte.grupoxxi.com.co
servicedesk.oiplans.com
soporte.grupoxxi.com.co
mail.libertydiversified.com
lync2013pool.libertydiversified.com
lync.libertydiversified.com
mail.libertydiversified.com
access.libertydiversified.com
itservicedesk.sodic.com
servicedesk.oiplans.com
mail.libertydiversified.com
jobs.libertydiversified.com

Certificate

The complete raw certificate details for *.libertydiversified.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzw/uzViI+CplD7RY6JIw
hgbNW7jHW2AnnaKb8I8leKl+HyEpL3kV9+pjfpddM4IhIZga1iUjXkzXIy+QmvPs
0m6qwkHb34RQdaQO5kGI72Wp4YhbhqjtmHNt35lp6yYHHY82WwMYa3nEjvG9Ydfp
3PyMUtFBc3YG8Zo/RXTmXEhrhNMPlPZrgGOuq+nQrONbk9FOQHUEYyCkWTgpDTpo
4yVf9C84U7K9KnTyS2wdo8hEnOYg+7eF2SOwpcLUu2CvKnaXsGigG88ptTVVb7Cn
hxaCc+uec3xxLFhfNmxhQ2wDPyFUu/Gb7Q2b16uYnJqUEwwgABj4gOToH6w8NHQe
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11242741305847994635733833049669143128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hope'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Diversified International, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.libertydiversified.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26139185894750552189848983285887889781733200193013294177330271011797892204696476049871738865641729924135595955847561654010642303561351486432214420287967532321195483514741481447679356212434532081738845210664479198648223749215746860718490007611110787168979920751600340623869281707640555686896649384773706363658877763840524250249854706892131038453284327701593435030326278627151988932673774983130883293368387761417498608494345753752388988056749991201910656931416442776524614724593413555139295431183576009320828009085495968239626599620797447723940873512223044734700463325497729944429177021336482696496308664714319889702581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							63ffb45a15b7eedd61bb97f07e18cc1db2d89ca2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.libertydiversified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'libertydiversified.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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