kiuglobal.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 43:b4:f4:01:83:7b:2e:ba:1e:52:89:21:29:48:e4:db was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiuglobal.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 43:b4:f4:01:83:7b:2e:ba:1e:52:89:21:29:48:e4:db
Serial Number (int): 89997838179988540804084715750739731675
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: a3:92:58:10:0d:38:66:6b:94:e0:25:9a:89:44:7b:13:45:df:6b:3c
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 17:ff:b2:a0:2a:44:51:d1:ce:70:50:c3:e5:2c:0c:67:24:57:40:fb
Fingerprint (sha256): 53:cc:a5:db:96:fa:18:d1:36:61:58:d9:84:41:1b:5a:7f:23:cf:19:f9:84:c9:3d:58:e7:05:61:2c:a5:0a:fc

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate kiuglobal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiuglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiuglobal.com
www.kiuglobal.com

Other certificates including the domain name kiuglobal.com

(limited to 100 certificates)
tennisscoring.app
www.puffymore.com
laplayahostel.com
kiuglobal.com
kiuglobal.com
*.bmp.kiuglobal.com
www.rsimu.net
pgaovh.kiuglobal.com
botsabuesa.com
jacob-klimczak.com
virtual-office.kayac.biz
vc.coza.org.ng
codifiedself.com
link.etiqmediasites.com
www.ikigaicareercounseling.in
member.gala.com.ph
install.kiuglobal.com
kiuglobal.com
www.planup.app
kiuglobal.com
cdn.boostedui.com
urna.net.br
kiuglobal.com
www.boky.si
*.erp2.kiuglobal.com
thinvite.app
www.goodnessbreath.com
business.ratewait.com
csportfolio.csplayground.com
kiuglobal.com
kiuglobal.com
kiuglobal.com
kiuglobal.com
kiuglobal.com
preetail.com
neostaging.flyrlabs.com
kiuglobal.com
www.ceminnovations.com
kiuglobal.com
www.ceminnovations.com
wgmi.kr
alt-minutes.com
yoma.kiuglobal.com
www.daebreon.com
*.kiuglobal.com
wish.kiuglobal.com
wish.kiuglobal.com
dmself.shipr.tech
yoma.kiuglobal.com
titans.mirror.flavorstack.dev
wish.kiuglobal.com
getminerva.co
kiuglobal.com
needy-mh.com
isheon.name
yuiplayer.app
kiuglobal.com
www.alpha.feedbucket.io
www.martelliengineering.it
lightideasdc.com
kiuglobal.com
mgr-test.drcdev.ca
www.nawal.com
auction.drivecloud.com.au
perodua-as.celcomfms.celcom.com.my
craftml.io
needy-mh.com
motivatid.com
acappolli.com.br
app.yesvg.app
nextwallet-marketplace.cloudandthing.com
www.tama38free.co.il
cdn.boostedui.com
portal.insightbusinesscoaching.com
chutaai.com.br
www.clarobscura.com
app.wildfeelings.co
kiuglobal.com
kiuglobal.com
kiuglobal.com
www.kiuglobal.com

Certificate

The complete raw certificate details for kiuglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnudUU5qX89fzUbl0UpQj
IxMKXpdI0+8i+QGEVi6oxBxpepz9IEnrqOMD2+IY+v/Gt9xAP5Dd3LTz+i78ZhW7
FQitFj3OZqqtSxe6PscqOYIwTczd5CXy6R4lQ3Y8Dr3je7BnHl1C1KhvRdDnmHxv
bsl/wuZyO0xdC613ypN1RDreqPYUzJfAzlaJ273GJUewgj41MmEFbO9N2tK6BRuE
2xc6AQBf32iHpVsZuxdnUJI3AypxrzW8KJirZ2jr1yHcET0wihdB6GZJXgVaFzLZ
aHKxLv/E/hcMynWet3fSwC345PZxPPpQTUFbhZs7EOZUnePPQ0jHYJtEScoerZUj
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 89997838179988540804084715750739731675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiuglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20059724963670164912853632497754041844371155922909052413770700299236955790389136467737924497086561042338865128125182831334986392479674739016049200069917626334603243037929753482921478919605614862259375693046042205585880321825748141699105359314906079471685198482091487341712907571509085391762317789010461344960469237475850955762454658723241394260472317696277232510242828967279625327502453439957673170907074650442048125373539270496336725026130021512351973567634293440841636234213172186314844347952366287437178620628233850136247476165408671281509593349800016407996180253929908192315941481356961707796945282086236472026027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a39258100d38666b94e0259a89447b1345df6b3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiuglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiuglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ff0d115dc00000403004730450220443409152587d1651165acc55139a9814408895b1a9de0f9e26e79212ea76912022100f2c6abb65bf7ccde6c49b337f93b8c598ea4e23ac5d7eacce5a5c9ef6723ba3e0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff0d115c70000040300483046022100c82059c698998ce912f7ace2bbb3ddaa59b8a414af19377a8f90986f259460f1022100a20a8f2363ac39bcbc98f5d41c2a3dbfe7fac83004e4870c61da2596aa79c26a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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