www.krantiindustries.com

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:92:c3:9a:16:22:35:89:5e:8c:8b:fc:dc:ae:b5:48 was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.krantiindustries.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:92:c3:9a:16:22:35:89:5e:8c:8b:fc:dc:ae:b5:48
Serial Number (int): 14054322577055009348621175534383969608
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:98:d8:24:ce:d7:11:4d:22:e1:57:3a:e8:22:15:09:b1:58:ef:3d
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): d8:48:e9:67:96:d9:a9:43:16:eb:19:2e:11:47:95:f3:4e:ee:1e:9b
Fingerprint (sha256): 72:76:bb:b7:e0:6c:d6:47:ac:03:43:b2:9e:fc:1d:9a:e7:ba:50:48:d6:59:ba:16:12:90:cd:d0:30:af:6e:b2

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate www.krantiindustries.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.krantiindustries.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.krantiindustries.com
krantiindustries.com

Other certificates including the domain name krantiindustries.com

(limited to 100 certificates)
meeting.feret.com
welcome.spiritualplaydate.com
meeting.krantiindustries.com
www.krantiindustries.com
krantiindustries.com.thesmartcares.com
meeting.curb360.com
meeting.ammoyyc.com
meeting.djedankh.online
krantiindustries.com
krantiindustries.com
meeting.paznetworks.com
krantiindustries.com
meeting.virtualopservices.com
meetings.cjissolutions.support
krantiindustries.com
meeting.krantiindustries.com
meeting.virtualopservices.com
customdomain4.assist-domain.com
www.krantiindustries.com
krantiindustries.com
www.krantiindustries.com
www.krantiindustries.com
meeting.virtualopservices.com
meetings.karzo.mx
krantiindustries.com
meeting.iscantech.com
meeting.virtualopservices.com
meeting.virtualopservices.com
www.krantiindustries.com
meeting.paznetworks.com
clientes.bas.com.ar
meeting.ammoyyc.com
meeting.sadjawebsolutions.com
meeting.octogonecollectif.com
meetings.cjissolutions.support
krantiindustries.com
www.krantiindustries.com
meetings.kraft-boron.com
krantiindustries.com

Certificate

The complete raw certificate details for www.krantiindustries.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/Ak8g+mNco6QiMRl0ww
O54429tYBpdyEDK+X2U474G08Vn7patahYfAtJQBZHlbEk+Nl3+xe0uNjB9LC1m3
vanj2+l4QhO8A+7YllEL3Q1eQj67DBFM3uW580tWPefTxW6E5Zx1QGM4Lr41uorm
B9TE/NzUVp97cYqzbocasgu9a1OsvYOhd3fKLmeirwVxNY/u1A9cNafex84FxBsL
79mqnYchMpOIiJ4mlW3Yi4BtTs+uv28E6RjTTDDdziaoZyuEO00U5cNpqKEZwniG
gUtRO0hAO0S67+ZBB84/NV8XxHK85dXt3qj+ce/eHcPK3gdDUpeIRjM4bEIfoUs8
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14054322577055009348621175534383969608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.krantiindustries.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26754701924878246125511469792899376920950123221346692531123339616075084268919125209330638156633298859560820940810455278977798711497294856733943377878778621515018360028291302242183413823601659140702632906299998244942823119708689950849562796684884774536699353808850885155470026697581052302093448388544657517500460107266761751737188211143372624028382264745796813706327349402677851706277356469601981738504785733677289609651899693311667237662567309865009768155886646675006219778945875406421815077751311892942774273403593893847175727271517197374958735740485751765665683773459164035365334617981273835227518431407671045995581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d98d824ced7114d22e1573ae8221509b158ef3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krantiindustries.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'krantiindustries.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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