*.kristal.ai

- O2O Technologies Pte. Ltd -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:cd:15:46:ea:cc:4d:b0:6f:33:7f:a2:68:40:51:d7 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

O2O Technologies Pte. Ltd

Organization: O2O Technologies Pte. Ltd
Locality: Singapore
Country: SG

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:cd:15:46:ea:cc:4d:b0:6f:33:7f:a2:68:40:51:d7
Serial Number (int): 11698676371518499372916899536420491735
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b2:24:7a:ae:0c:db:0d:9b:94:4e:6c:21:9b:9c:dd:49:d7:d1:31:7e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): dc:00:d0:c9:66:1c:d4:7c:2e:9f:d1:1a:58:65:d9:da:3c:34:a6:fe
Fingerprint (sha256): bf:90:11:62:50:21:41:07:6d:1c:fe:03:5b:b0:b4:15:bb:0a:92:18:03:05:de:88:41:b5:85:9a:6e:e0:58:19

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate *.kristal.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kristal.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kristal.ai
kristal.ai

Other certificates including the domain name kristal.ai

(limited to 100 certificates)
tls.automattic.com
lovelouie.live
kristal.ai
tls.automattic.com
tls.automattic.com
staging-web1.kristal.ai
kristal.ai
www.mateusnobre.com.br
www.inspirally.com
kristal.ai
investo2o.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
invest.kristal.ai
kristal.ai
kristal.ai
kristal.ai
invest.kristal.ai
snoo.app
app.kidsplace.fr
www.tanakaoriginal.com
invest.kristal.ai
investo2o.com
tls.automattic.com
invest.kristal.ai
invest.kristal.ai
*.kristal.ai
invest.kristal.ai
tls.automattic.com
kristal.ai
*.kristal.ai
kristal.ai
solutions.kristal.ai
invest.kristal.ai
invest.kristal.ai
*.kristal.ai
*.kristal.ai
*.kristal.ai
*.kristal.ai
tls.automattic.com
kristal.ai
*.kristal.ai
stage-manager.mblazek.dev
solutions.kristal.ai
investo2o.com
*.kristal.ai
kristal.ai
kristal.ai
invest.kristal.ai
bfi.org.uk
tls.automattic.com
investo2o.com
staging.kristal.ai

Certificate

The complete raw certificate details for *.kristal.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11698676371518499372916899536420491735
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Singapore'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'O2O Technologies Pte. Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kristal.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 906889134743638552764582778590994898930396042097455279283191024259848245930994798137487290246029011504057681546774421280535604212549465972551019451703616738408013174442723002400624308466888124381116687007345616341253093910947394271223414579858256161249245005018866569731512811499965870787623683898724795761338902041862862265166358561367416145039891304442671854801918640247122572880612671846757019257479553271084005393431805791599922395181659490854116989849609899323309632480793570864448539105902494749821860416474571214365394736746544811831246371764748246055699953916526064348828797097195397311789671542670778994514689938318141887622952373449525804548914357095427707287655944681766268776159942799785311662813507335663918442152993320910646512165300384516371627380775317208360791172333341893489356790566939749106311220477923119894084308551648401390607272608094157174976849337112823141074802785636844833117943011924536788975796383518054438115197299015524164494712865318305658261737504276571444397331198828220062592840244726377391933253477609518615485729463645239850518240357940030203493499543680999947896204626991048286457698957609207968241075771844303407939308999089035939297877781830566721308207909782332815806192964423564782130931901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2247aae0cdb0d9b944e6c219b9cdd49d7d1317e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kristal.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kristal.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0022028d5608694f94a08f50bf7d0b2f856affe27946d68f34e4498827f5ee47802f5a5075c865a71346d18ab267343a5ed98a3ad0215dffa48f7a32cca2b0d762c8d03bdca3350bd323b83494d099d873d348ef44e2356a581f03bae057855b724424d64d7aed2191f6e0e8d86913b7c8a047580b86e4fc18f702dbcf1c7b9f875fe185443a4aa0a88464f391e318daf99cd89da1de797629d1017b1625462ded41e2870b9c65b1b98416366f66666697e2c37b2f60d2e9a695dbe4f74d9bebdcdc82c7219da182efc14f48c14809e1a8fb17036f4b34af60779f78422611ce0c4b4e304609de712fe79b9fd1ebd74043c994efc45f68c6f2659194d2e2056f42