api.kairos-staging.kiwibot.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number ca:0f:f6:1a:ca:5f:51:4a:0a:7b:21:e3:75:56:a6:fc was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.kairos-staging.kiwibot.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ca:0f:f6:1a:ca:5f:51:4a:0a:7b:21:e3:75:56:a6:fc
Serial Number (int): 268586931196756956237068554250623559420
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ca:b3:6b:d5:03:85:90:65:98:14:07:6d:cb:19:1c:28:86:46:eb:74
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): ea:52:96:80:d7:75:8e:d8:49:b6:70:a6:3d:76:a2:47:54:10:cc:7c
Fingerprint (sha256): 82:43:2e:19:96:c7:4e:c8:d2:94:1a:6c:ff:bf:c4:6a:9c:fb:1f:46:23:43:67:61:6d:94:6d:2f:a0:c6:f6:b0

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/aQ1d8-hEKNc
CRL Distribution Point: http://crls.pki.goog/gts1d4/KS3or9pF2-o.crl

Check the revocation status for certificate api.kairos-staging.kiwibot.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.kairos-staging.kiwibot.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.kairos-staging.kiwibot.com

Other certificates including the domain name kiwibot.com

(limited to 100 certificates)
kiwibot.com
plantae.app
kiwibot.com
remibots.staging.kiwibot.com
quiz.foxfox.io
www.gaded.xyz
dejonckheeretaxlaw.be
www.gaded.xyz
www.ephemerabigdata.com
toal.app
go.ghiveci.com
www.ampletime.com
hal-cg.com
www.josefhalcomb.com
howdyudo.com
spacetrace.app
nitish.design
appducks.com
www.maiape.com
pass.patriciandraade.com.br
word.classicaleffect.com
kiwibot.com
partypeople.app
www.alumni-universe.com
cheatsforhiguesswho.apptget.com
marionlaitselart.fr
note2mail.com
www.bnaiif.club
files.pirika.org
www.gijernet.no
www.kiwibot.com
kiwibot.com
www.youssryessmatt.com
go.ghiveci.com
www.academix.wtf
bridgeshullltd.com
www.moneytroc.net
learn.nixonsucuc.com
roadsideflowers.niels.codes
appducks.com
chiara-pietro.com
commissionercup.com
jonaz.tech
sni.cloudflaressl.com
stg.blog-gen.com
qr.kiwibot.com
www.walkietalkie.live
dev.fytolife.com
mediocremelodies.com
app.butler.care
sni.cloudflaressl.com
www.ozgulcobanoglu.com
account.staging.tred.com
www.abrewabraham.com
www.kiwibot.com
liffapp.siomusubi.life
login.everyfax.com
kiwibot.com
juridisch.facet-adviseurs.nl
www.delivertu.com
kijes.com
desktop.haffprice.com
tag.bigoysterdata.com
www.bulhrtg.club
capsule-ec.com
fundmy.xyz
haembina.com
www.pokebattle.click
go.ghiveci.com
api.kairos-staging.kiwibot.com
kiwibot.com
www.kiwibot.com
app.glacierridgesportspark.com
kiwibot.com
www.olikirolli.com
wakuas-dev00.app.wakuas.com
cyriouslyinjapan.com
results-uat.microba.com
www.hyppe.io
api.staging.kiwibot.com
kiwibot.com
sni.cloudflaressl.com
coxlab-indoors.cox2m.com
app-uat.advo.bz
mouse.bizoo.cloud
investchamp.app
telus-insights-dev.carto.solutions
www.alumni-universe.com
annaiherb.pp.ua
beheer-test.toegang.org
remibots.staging.kiwibot.com
www.josefhalcomb.com
superbmeteor.co
kiwibot.com
howdyudo.com
api.kairos.kiwibot.com
whats-up-in-the-cloud.se
invite.oozi.aimpact.ai
sophie-qa.hr-campus.ch
link.staging.drest.com

Certificate

The complete raw certificate details for api.kairos-staging.kiwibot.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2DD1morfubny16DRU5j
xHqzKq+xLYG4vm5CW/G0q4IXWgH8R6EtmBGh851g3OwdNiftF/8YgpuQqAM9zb90
WR9aziy66DAnSr2r0OhOrTaG6ODuOf39hfRtUx1VZdsW3I76FlwNlafZO5erbuyw
dPSPCISZk1s4w8a4jbaPq/dmywkb+lVdxYcnwbHURWLCljJbmTqTwbjRqLv58ZDp
FznekkQe3mgMBsisuJNvcvT0NK2kWFWGgF+MqMwDm2r+VaG21Oq2jRQ916JKScsU
dZ6mOnfKeonthcxiEH9qHBJelXeDXwuH3dfqXvo2lT0rhQ377qu09BSU9nX1pRK8
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268586931196756956237068554250623559420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 22:08:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 23:01:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.kairos-staging.kiwibot.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22644373184141723657502132322702007551386594140982157822185116499457363909555814623215534769943788295990957978956156001448288375403161394854761245722083943658491829457599602283321160446374305388839024301713703296433782485079453924406352358894356094761347768945839751691620567273118068215720439651114059803934286155724453800714393087393559563016455679643505442978191780755579440412085921832544118497566168528248954255634762273518136018219348262205617466762569884288183310148089548083138744891429066953782279665432918705061165102884477490952453961703161339927712991155133425502477088728167159085691582926810738878233663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cab36bd5038590659814076dcb191c288646eb74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/aQ1d8-hEKNc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.kairos-staging.kiwibot.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/KS3or9pF2-o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d4807c7c0000004030048304602210089a8787a6b7ba963074e69b4b1cb8d3ae44347fa0862f93c3de9295f93dfa9dc022100837a523774b12557c5da83fcf39607f16047cad14ad7e6dfa19ce8aaaaea7632007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d4807c6a90000040300473045022075319439e48a8a33162ee223476980077f1ed6e19cf2552548444180d61af698022100825bef1278ecb8335ebffe4b5897f644c86b6e0516f1a8f7a4bb6ca11bd66757
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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