nainitalfiprod.kiya.ai

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number db:f1:0b:fe:9d:e8:03:ff:71:e8:45:26:1f:2e:cb:b4 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=nainitalfiprod.kiya.ai

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): db:f1:0b:fe:9d:e8:03:ff:71:e8:45:26:1f:2e:cb:b4
Serial Number (int): 292352517899132024627254851510775761844
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ea:e0:c3:df:40:6e:00:84:5e:c2:a2:62:53:c9:32:8b:a2:83:74:92
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 74:20:b3:66:91:01:c3:09:25:d6:9c:e2:54:6e:65:57:31:45:bc:0f
Fingerprint (sha256): 1e:b5:50:28:96:ac:14:71:00:d3:d7:ca:27:1a:79:e3:a1:29:26:a6:e2:3d:94:fb:97:ed:4c:e6:cc:36:a8:c3

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate nainitalfiprod.kiya.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nainitalfiprod.kiya.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nainitalfiprod.kiya.ai
www.nainitalfiprod.kiya.ai

Other certificates including the domain name kiya.ai

(limited to 100 certificates)
hr.worms-safety.com
personal.lrsocialjustice.life
people.libertyone.com.br
ppl.kapua.nl
people.alzadfoods.com
hr.redbridgecs.com
recursoshumanos.natlatam.com
people.intris.in
personal.davidsondebtcollections.site
vasaiimps.kiya.ai
personal.davidsondebtcollections.site
hr.7thpillar.com
mahamobile.kiya.ai
jkgbuat.kiya.ai
ccblupiprod.kiya.ai
people.workcentral.ng
ccblupiprod.kiya.ai
kerala.kiya.ai
people.tradefy.com.br
kaijsbupiprod.kiya.ai
hr.redbridgecs.com
bicholimprod.kiya.ai
rsblupiprod.kiya.ai
hr.redbridgecs.com
upi.kiya.ai
ppl.kapua.nl
wardhman.kiya.ai
msbuat.kiya.ai
hr.7thpillar.com
kolhapurprod.kiya.ai
hr.anoda.mobi
hr.worms-safety.com
personal.lrsocialjustice.life
bomupiprod.kiya.ai
hr.redbridgecs.com
personal.lrsocialjustice.life
akolaimps.kiya.ai
people.workcentral.ng
pavanaupiprod.kiya.ai
talenthub.nimbusnext.com
people.houxo.com
hr.redbridgecs.com
hr.anoda.mobi
nainitalfiprod.kiya.ai
servicedesk.kiya.ai
rh.curante.net
inbuat.kiya.ai
people.spiible.com
sharad.kiya.ai
people.libertyone.com.br
warngalprod.kiya.ai
sindhudurgprod.kiya.ai
burdwanupi.kiya.ai
hr.anoda.mobi
rh.curante.net
bicholimuat.kiya.ai
infrascbamex.kiya.ai
warngalprod.kiya.ai
sharad.kiya.ai
kaijsbupiprod.kiya.ai
burdwanccb.kiya.ai
boomshakalaka.parkcandy.com
acblupiprod.kiya.ai
iconnect.kiya.ai
bomupiprod.kiya.ai
erp.bluepi.in
hr.anoda.mobi
www.kiya.ai
people.tradefy.com.br
people.tindosolar.com
people.dars.ai
burdwandccbuatupi.kiya.ai
bomnguat.kiya.ai
adilabad.kiya.ai
bomappuat.kiya.ai
bbps.kiya.ai
talenthub.nimbusnext.com
bicholimurban.kiya.ai
hr.anoda.mobi
burdwandccbuatupi.kiya.ai
akolaimps.kiya.ai
tscabprod.kiya.ai
samtaprod.kiya.ai
4sight.kiya.ai
scbupiuatcz.kiya.ai
hr.anoda.mobi
upiqr.kiya.ai
fortibang.kiya.ai
people.alzadfoods.com
people.seoegypt.com
rsblupiprod.kiya.ai
msbprod.kiya.ai
people.libertyone.com.br
people.thebabygarage.com
hr.worms-safety.com
akolaimpsuat.kiya.ai
*.kiya.ai
wardhman.kiya.ai
kscbuat.kiya.ai
bdcbupiprod.kiya.ai

Certificate

The complete raw certificate details for nainitalfiprod.kiya.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mBdXkD9Dl6DdRbKE2M+
BVTP6sUo/EeIb1/1dCkv//Gb2f7BrWKZfkDV6hWSmKMn6rAl47nI1zBtxrQ+mHzQ
YA2dljBPBPHt9UK8FeS5Fy4IFE/zc8W3R9TXytUdWIaE/NOGmTcRsWsfS434TMTe
SnghYqqzzL+JwinmbNsONtSyNK3d/D+t0BhT2DfqlXyMO62h64CKYTHU6inY5ueT
Yhnam346ZLmXB6vWVIPlTPcHl65gZY0CPgqWZ9nGW9G9w85Kf+sTkvzQhwB4BtGZ
i15OF3Djo+5BpM7i3GovR8NbRkvv3eZ6BpuRQRuyWTKyFay3b62fckdHezB5M2r4
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292352517899132024627254851510775761844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nainitalfiprod.kiya.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27062516476962604009608584918264607742595431208565616897260798075360045311790578639275747083630377318562248623805819651893742949541980620315111003601094895224344771670904333634740490351771735219987871730657214954988209181538424752371916034690514021016731512126269816428302551768596294118197149134944713502327420339172493831868112084401759726653335462234242309344613961746994999590393575899161565812077062622124962624375292879303581612910649767683759125451049368601166369070554242292177022619451139337173160750583517764757992731145250574107064908843058506757319687402942445650637141744763841061535574216091286649894969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eae0c3df406e00845ec2a26253c9328ba2837492
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nainitalfiprod.kiya.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nainitalfiprod.kiya.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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