kf.kobo.iom.int

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 02:36:41:27:dc:8d:4d:cb:3e:96:19:da:cb:74:e6:fb was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kf.kobo.iom.int

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:36:41:27:dc:8d:4d:cb:3e:96:19:da:cb:74:e6:fb
Serial Number (int): 2940161536710815925314609905057195771
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f1:f6:05:7f:4a:61:8a:04:80:0d:1b:e6:78:ed:ef:09:79:b1:ea:c8
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 6b:26:a9:da:70:75:73:ab:f1:b5:a0:32:88:a2:5c:1c:0d:81:b1:10
Fingerprint (sha256): 01:38:cc:97:10:c1:56:22:92:21:54:2e:ee:e2:19:f0:07:75:55:16:d2:1f:96:de:84:67:54:5d:58:42:6d:8a

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate kf.kobo.iom.int

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kf.kobo.iom.int

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kf.kobo.iom.int

Other certificates including the domain name iom.int

(limited to 100 certificates)
support.bluelabel.net
*.burundi.iom.int
GMSGuate.iom.int
colombia.oim.org.co
*.drcongo.iom.int
*.uruguay.iom.int
support.bluelabel.net
support.bluelabel.net
*.croatia.iom.int
kf.kobo.iom.int
*.srilanka.iom.int
*.ebolaresponse.iom.int
maldives.iom.int
www.rosanjose.iom.int
rosanjose.iom.int
unitedkingdom.iom.int
*.mhdpakistan.iom.int
support.bluelabel.net
beta.iom.int
*.rodakar.iom.int
externalconsultantsoigmonitoring.iom.int
*.denmark.iom.int
mic.iom.int
rosanjose.iom.int
*.syria.iom.int
*.croatia.iom.int
albania.iom.int
*.donate.iom.int
*.pakistan.iom.int
telerad-mhd.iom.int
*.timor-leste.iom.int
p-mrcis.cloud.iom.int
publications.iom.int
*.missingmigrants.iom.int
d-eaps.iom.int
programamesoamerica.iom.int
d-mgi-api.iom.int
nigeriadtm.iom.int
*.tunisia.iom.int
*.liberia.iom.int
www.rosanjose.iom.int
www.rosanjose.iom.int
*.crisisresponse.iom.int
*.weblog.iom.int
im4mmp-uat.iom.int
*.spain.iom.int
support.bluelabel.net
webmail.iom.int
nepal.iom.int
*.lgbt.iom.int
*.nicaragua.iom.int
kmrepository.iom.int
*.micicinitiative.iom.int
support.bluelabel.net
gss.iom.int
iom-nederland.nl
programamesoamerica.iom.int
madportal.iom.int
*.techatwork.iom.int
beratung.iom.int
*.pvigm.iom.int
programamesoamerica.iom.int
maldives.iom.int
www.italy.iom.int
oimperu.org
*.nepal.iom.int

www.programamesoamerica.iom.int
*.micicinitiative.iom.int
maldives.iom.int
ext-globalroster.iom.int
ee.kobo.iom.int
*.primi.iom.int
*.unitedkingdom.iom.int
*.weareallin.iom.int
kmhub.iom.int
kosovo.iom.int
*.panama.iom.int
paraguay.iom.int
*.myanmar.iom.int
*.spain.iom.int
rohingyarrosomorghor.iom.int
*.environmentalmigration.iom.int
*.missingmigrants.iom.int
*.zimbabwe.iom.int
iom.int
*.liberia.iom.int
*.italy.iom.int
*.mmp.iom.int
ecuadorimsodk.iom.int
fseuc-3.freshservice.com
Iraqimsuat.cloud.iom.int
ecampus.iom.int
*.thailand.iom.int
*.ch.iom.int
compass.iom.int
portal.iom.int
*.slovenia.iom.int
*.romania.iom.int
ammportal.iom.int

Certificate

The complete raw certificate details for kf.kobo.iom.int in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lyHhM34hzqypEwDvnJf
X7E7lB036Wnt3LGXHTuM+PNHKmzWei2uG3Sebg6q3mHgh2c2zVNjmS9lBtR/bXpf
aV+OXdGoD+78ve2SGKE7O0tCo1MbLJT/dR/L0l9dEhkn9zueGG6P3mMwZQdPMpUd
pHQ7k5tO9rR7LZHGCLVzKAEfX80tWs/Gl/x7P0bpEQ7C4B3bz36yd6FEb8LHGizm
vw74f1UQrhAYC57EpMkV8iDxpWj5d64RWl+kEGyCsuJs0Ec8kRQMEcuZS9OzrLip
hLsFlD6wly7M5g7Aaybc10F56oR/4jcYUQJUbTuHy1IAE5tMywhKAtGZU7dbpSr8
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2940161536710815925314609905057195771
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kf.kobo.iom.int'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29080438075209031884148240799486835839608702172650106983980273392635931738398296463396501961715289273961263346102612127939611867403537879108142188551394551834899798771544884711832321666111810379808743370217540074069518582541581209849118632406188532948146566275330260776755129486971111511082306508171847496495387253061683978093091746857261925017181571150709944729870049028720297778538753142460865904867132074562985427843748357069449799807839086569234037392321932764141834233709204048884186569017103307186711660623983797545782317622491981402870607664911289787992391220158611689249771123860405947748502879065148396076189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1f6057f4a618a04800d1be678edef0979b1eac8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kf.kobo.iom.int'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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