kpi.kiaintra.com

- Hyundai Motor Company -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number bd:c3:30:a7:e9:11:01:cb:af:fb:e0:e3:c4:bb:44:0e was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Hyundai Motor Company

Organization: Hyundai Motor Company
Locality: Seoul
Country: KR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): bd:c3:30:a7:e9:11:01:cb:af:fb:e0:e3:c4:bb:44:0e
Serial Number (int): 252237575949658074035751064753267229710
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ef:5e:8d:81:ff:0e:ce:51:fa:a2:99:11:c9:8b:17:f0:0b:3a:49:8e
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 95:3a:2a:05:17:6d:24:48:76:51:42:f2:d7:6d:00:bd:5d:8f:d0:e4
Fingerprint (sha256): 10:78:fa:dc:18:b4:de:5a:5e:24:dc:9b:1f:8b:2a:96:2e:5b:45:dc:9b:e2:7f:63:58:28:57:22:37:0e:f3:1c

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate kpi.kiaintra.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kpi.kiaintra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kpi.kiaintra.com
www.kpi.kiaintra.com

Other certificates including the domain name kiaintra.com

(limited to 100 certificates)
msos.kia.com
stg-web.icps.kiaintra.com
ksw.kia.co.kr
ems.kiaintra.com
kpi.kiaintra.com
www.hyundai.com
ktong-gw.kiaintra.com
h1asmt.kiaintra.com
tstmgsw.kiaintra.com
khcbopq.kiaintra.com
ems.kiaintra.com
dmis.kiaintra.com
ems.kiaintra.com
stg-web.icps.kiaintra.com
k-cube.kiaintra.com
kmmmes.kiaintra.com
k-cubedev.kiaintra.com
vocas.kiaintra.com
ems.kiaintra.com
msos.kia.com
ems.kiaintra.com
otms.kiaintra.com
otms.kiaintra.com
kas.kiaintra.com
ksw.kia.co.kr
k-cubespdev.kiaintra.com
ktong-mm.kiaintra.com
dmobileautoq.kiaintra.com
kmmmes.kiaintra.com
dmis.kiaintra.com
h1asmt.kiaintra.com
ksw.kia.co.kr
ems.kiaintra.com
ksw.kia.co.kr
www.hyundai.com
otms.kiaintra.com
ktong-push.kiaintra.com
dmis.kiaintra.com
hknpms.hmc.co.kr
ktong-wm.kiaintra.com
ksw.kia.co.kr
dmis.kiaintra.com
msos.kia.com
ktong-gw.kiaintra.com
ems.kiaintra.com
apiportal.kiaintra.com
sohamesweb.kiaintra.com
ems.kiaintra.com
dmobileautoq.kiaintra.com
vocas.kiaintra.com
ktong-push.kiaintra.com
k-cubeoodev.kiaintra.com
dmis.kiaintra.com
khcbopq.kiaintra.com
k-cubesp.kiaintra.com
k-cubeoo.kiaintra.com
em.hmc.co.kr
apiportal.kiaintra.com
sohamesweb.kiaintra.com
ktong-gw.kiaintra.com
ktong-gw.kiaintra.com
otms.kiaintra.com
k-cubeoo.kiaintra.com
k-cubeoodev.kiaintra.com
k-cube.kiaintra.com
pis.hmc.co.kr
gpms-dev.kiaintra.com
gpms-dev.kiaintra.com
tstmgswmob.kiaintra.com
msos.kia.com
ksw.kia.co.kr
ksw.kia.co.kr
www.hyundai.com
ems.kiaintra.com
ems.kiaintra.com
h1asmt.kiaintra.com
k-cubespdev.kiaintra.com
khcbopq.kiaintra.com
tstmgswmob.kiaintra.com
ems.kiaintra.com
pis.hmc.co.kr
ksw.kia.co.kr
ktong-gw.kiaintra.com
pas.kia.com
devktong-gw.kiaintra.com
k-cubedev.kiaintra.com
ems.kiaintra.com
devktong-gw.kiaintra.com
ems.kiaintra.com
ems.kiaintra.com
h1asmt.kiaintra.com
sohamesweb.kiaintra.com
ktong-mm.kiaintra.com
tstmgsw.kiaintra.com
gpms-dev.kiaintra.com
khcbopq.kiaintra.com
sohamesweb.kiaintra.com
ktong-gw.kiaintra.com
ksw.kia.co.kr
k-cubesp.kiaintra.com

Certificate

The complete raw certificate details for kpi.kiaintra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrLMWEuRJv+2pelTgoaa
LWwsmYyuG7UDqRlcZSCqLH1BITJCEw9TTVpGBNURgnWXinqamZnDes62fdDHney1
fhmd/jWmgpvuReJ49qoFoCfQCXrHYEaBDEWVkCzBH0hH5jP/Vj7v0GJb8Ypvaj9j
kynM9ntxc3iHRi4g/Bl6jcc/2Ow1B+edUHMkaiMO542JwX3Jt6Ky1gBc+EEU3NrD
0ky6XgI3F+6uxi7z4Ge3LhjPopSIxSnVyJO+Uev/J0uIKDLg0kpLr5lg8xVbyTQ7
6kSmoUuEV3paZhfP65os5nQjJmw7cpgCO/ojUfxRtYIE2zgnpDJ1oiHRBuMGISMA
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 252237575949658074035751064753267229710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyundai Motor Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kpi.kiaintra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17004101554948990166153571659635482718490907978429261279635832596923818730246436779646350722904736154720710790879942523220785504426379653115270652697493414850930768950245906044217673841935462805392137398722890391802275958817250957632948843269327418496543786444139129289021787210390271234128394382215151885225423684036586664177506563944508818566730875145178282992981420571308646156557869838286081423388967021143916611029160838773732458309761527855096409509523205770317882163533850717495037290712480820766590338724129075052131999376918516763808649584972259454928889250777664982368248199155165347776081874558067729956943
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef5e8d81ff0ece51faa29911c98b17f00b3a498e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kpi.kiaintra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kpi.kiaintra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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