*.kiuglobal.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 0e:3b:2e:dc:f2:ef:5a:9b:18:70:da:c0:dc:8f:21:bd was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.kiuglobal.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:3b:2e:dc:f2:ef:5a:9b:18:70:da:c0:dc:8f:21:bd
Serial Number (int): 18916487951864631687373710953949372861
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:93:0e:63:a5:10:c6:6f:32:03:73:4d:bf:b3:a4:b0:a1:67:dc:48
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): b4:c9:70:97:20:ff:3f:5f:78:41:53:3c:30:29:69:0d:f7:18:ce:88
Fingerprint (sha256): d0:55:9b:bd:52:6b:af:a1:55:44:f9:79:c3:c8:f4:69:29:f0:a1:7a:e1:4b:0e:91:d3:34:75:2b:b4:b8:51:6d

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate *.kiuglobal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kiuglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kiuglobal.com
kiuglobal.com

Other certificates including the domain name kiuglobal.com

(limited to 100 certificates)
tennisscoring.app
www.puffymore.com
laplayahostel.com
kiuglobal.com
kiuglobal.com
*.bmp.kiuglobal.com
www.rsimu.net
pgaovh.kiuglobal.com
botsabuesa.com
jacob-klimczak.com
virtual-office.kayac.biz
vc.coza.org.ng
codifiedself.com
link.etiqmediasites.com
www.ikigaicareercounseling.in
member.gala.com.ph
install.kiuglobal.com
kiuglobal.com
www.planup.app
kiuglobal.com
cdn.boostedui.com
urna.net.br
kiuglobal.com
www.boky.si
*.erp2.kiuglobal.com
thinvite.app
www.goodnessbreath.com
business.ratewait.com
csportfolio.csplayground.com
kiuglobal.com
kiuglobal.com
kiuglobal.com
kiuglobal.com
kiuglobal.com
preetail.com
neostaging.flyrlabs.com
kiuglobal.com
www.ceminnovations.com
kiuglobal.com
www.ceminnovations.com
wgmi.kr
alt-minutes.com
yoma.kiuglobal.com
www.daebreon.com
*.kiuglobal.com
wish.kiuglobal.com
wish.kiuglobal.com
dmself.shipr.tech
yoma.kiuglobal.com
titans.mirror.flavorstack.dev
wish.kiuglobal.com
getminerva.co
kiuglobal.com
needy-mh.com
isheon.name
yuiplayer.app
kiuglobal.com
www.alpha.feedbucket.io
www.martelliengineering.it
lightideasdc.com
kiuglobal.com
mgr-test.drcdev.ca
www.nawal.com
auction.drivecloud.com.au
perodua-as.celcomfms.celcom.com.my
craftml.io
needy-mh.com
*.kiuglobal.com
motivatid.com
acappolli.com.br
app.yesvg.app
nextwallet-marketplace.cloudandthing.com
www.tama38free.co.il
cdn.boostedui.com
portal.insightbusinesscoaching.com
chutaai.com.br
www.clarobscura.com
app.wildfeelings.co
kiuglobal.com
kiuglobal.com
kiuglobal.com
www.kiuglobal.com

Certificate

The complete raw certificate details for *.kiuglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuRolYihcREsbjcYgb78
9uzNHWLkiOSGyGU/SqKUsEgoSfWaPxgEVCpkWYQ2OC2C9CVpDGs7Og1fp1C5VFJY
Q533cy98UvGY2HSQcnWgcptlqGnMGpyzkGln9J0qwJdlkbW/xOHXq6Sjp2iFQ6aX
4IBWD4M8hnKDKdKxMbqyQcO9JP4GoAX8TSe1g3uOHfznoIjJJKgB3MZRL3aBE+1b
Af3GW7hZ2vAw6d+0/7diuf4IDl8mgsb/H8yFuqQhDMN6q9H1rRVJiQh+hqr7Bwq2
p2noZGqqGgGfDne9TogwKYKbT52MSQ+wAp6V1o7fOAMKP5dkL5yUr6M+cj/Q+JDe
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18916487951864631687373710953949372861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kiuglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25107816828131256771624891575369324717764630460986795102618984331593400985778027703671604629933944204397542204495541501839265268278203651726301163662825501940287680357834482477711930120218788941737663012167604571131423095450885176367201326674353329476631025918214782347438323150549012239783819731082380603903003627737789905406738330243384056640137203871617176195526253774094491137764202471464196933524551044330993783679842390671736553906115349444484799184740639418807421900816753407231147768438755478439002965483742313275015289243784513081478010117280250320620896397034649479973448896724928561400773069879087247449819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac930e63a510c66f3203734dbfb3a4b0a167dc48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kiuglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiuglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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