liveby.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0c:5f:16:eb:8e:6c:ae:50:21:f9:f9:1e:e9:2d:9a:13 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=liveby.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:5f:16:eb:8e:6c:ae:50:21:f9:f9:1e:e9:2d:9a:13
Serial Number (int): 16444469026687528841529929905424144915
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1f:c2:00:53:4c:b6:65:e9:32:7b:ec:97:4a:be:e2:90:7d:43:d2:41
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 43:e6:ab:51:94:66:b3:0c:e3:dc:9b:d5:61:8c:0b:87:bb:d2:c5:a0
Fingerprint (sha256): d4:1a:ec:e7:e7:82:b5:f5:94:cf:b2:06:fd:7a:c4:ed:d0:1e:88:6d:10:be:4c:3b:f3:f2:19:c8:4f:08:b8:60

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate liveby.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for liveby.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

liveby.com
*.liveby.co
liveby.co
*.liveby.com

Other certificates including the domain name liveby.com

(limited to 100 certificates)
admin.liveby.com
status.liveby.com
dev.api.liveby.com
dv.liveby.com
dev.api.liveby.com
api.liveby.com
*.liveby.com
*.liveby.com
dev.jupyter.liveby.com
*.liveby.com
liveby.com
liveby.com
dev.liveby.com
console.liveby.com
dv.liveby.com
dev.jupyter.liveby.com
*.demo.liveby.com
qa.liveby.com
*.portal-beta.liveby.com
dv.liveby.com
console.liveby.com
liveby.com
developer.liveby.com
api.liveby.com
*.liveby.com
*.liveby.com
dev.liveby.com
liveby.com
dv.liveby.com
api.liveby.com
api.liveby.com
metrobrokers.reports-guides.liveby.com
liveby.com
api.liveby.com
*.liveby.com
qa.liveby.com
developer.liveby.com
liveby.com
liveby.com
api.liveby.com
dev.api.liveby.com
status.liveby.com
*.dv.liveby.com
dev.api.liveby.com
*.console.liveby.com
liveby.com
dv.liveby.com
dev.api.liveby.com
*.liveby.com
*.liveby.com
qa.liveby.com
developer.liveby.com
api.liveby.com
qa.liveby.com
dev.admin.liveby.com
reliancecache.liveby.com
api.liveby.com
dv.liveby.com
*.liveby.com
*.demo.liveby.com
*.portal-beta.liveby.com
portal-beta.liveby.com
dev.api.liveby.com
api.liveby.com
*.liveby.com
status.liveby.com
status.liveby.com
reliancecache.liveby.com
liveby.com
admin.liveby.com
developer.liveby.com
*.liveby.com
api.liveby.com
console.liveby.com
liveby.com
*.portal-beta.liveby.com
dev.api.liveby.com
seo.liveby.com
dev.liveby.com
dev.liveby.com
console.liveby.com
qa.liveby.com
dev.liveby.com
api.liveby.com
liveby.com
api.liveby.com
*.liveby.com
liveby.com
dev.api.liveby.com
dev.api.liveby.com
*.portal-beta.liveby.com

Certificate

The complete raw certificate details for liveby.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E2XksB1qwP7R5E20twZ
sBCUPF6NPn7djGbjrMMxQwPhRs5uhZ89kG6t4O7TuYMuCcf/erJV9lyF4cNXT+mZ
RulYsQu5Bwh5vUvl7KuNEkv4geDGse+npfd0kHXurGcR62UV7xFxtLZxWZngl99D
sqPTaqN97fDM1NyujA02HLZuPUrjY3oZMFf2je5wN2FGkYZ1PsKRZ23h0LtRcLrN
U0rY/CqjLBqxMRiU4vCKNuS+rZDEzaEqemiAoUqMJjCLz5ln1rN4nbEHYwr9CACH
m8r7+ZvtiNCx6uAzt8okvyjUbSocCfSPVISFTacIyoJfAEj+qlkQ3E3+i6pUvgrV
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16444469026687528841529929905424144915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'liveby.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28315642394574076693220649252498836369449042614420780105678683461833870594278173197450239898401593905756950128176746627204317406621952033100236559934361870262516156293088466844247300111687774053602048719380574898616815183385240454577189961147505924028979574327156668187443972051628594507933429058995707767373729394493319445109536905566327368146479541559848178144032833114847207319916982624283731316707882584564370037307895600736778043375341841030658331848930446868698371147425637235239621427722058929330010880864594490174434212209775348427714349000181029566413630586634365724600928522600674419403072313891452311229893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1fc200534cb665e9327bec974abee2907d43d241
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveby.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'liveby.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.liveby.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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