fiori.kbl.co.in

- Kirloskar Brothers Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:2d:21:f2:fd:bf:b3:fc:0a:d0:83:ce:ad:6a:0b:00 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Kirloskar Brothers Limited

Organization: Kirloskar Brothers Limited
State / Province: Maharashtra
Locality: Pune
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:2d:21:f2:fd:bf:b3:fc:0a:d0:83:ce:ad:6a:0b:00
Serial Number (int): 6880481908822357834202499993414798080
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 71:73:48:5a:62:bb:b4:87:13:45:57:8f:dd:3b:4c:11:11:ab:45:ae
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 0e:a1:2f:d4:24:66:5e:2a:3b:0b:a2:e9:cf:00:42:19:00:0e:40:f5
Fingerprint (sha256): d1:f7:a0:46:57:69:d7:66:2e:9f:41:80:67:d0:20:d5:0f:0f:5f:78:1d:44:f7:0b:bc:f9:f4:b0:c6:24:36:64

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate fiori.kbl.co.in

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fiori.kbl.co.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fiori.kbl.co.in

Other certificates including the domain name kbl.co.in

(limited to 100 certificates)
servicedesk.gainsight.com
webmail.kbl.co.in
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
sip.kirloskarpumps.com
sip.kirloskarpumps.com
fiori.kbl.co.in
fiori.kbl.co.in
*.kbl.co.in
humanresource.thepawscuers.life
*.kbl.co.in
servicedesk.celestialsys.com
servicedesk.celestialsys.com
servicedesk.gainsight.com
taops.fractal.ai
servicedesk.celestialsys.com
itdesksupport.amphenol-omni.com
itdesksupport.amphenol-omni.com
servicedesk.celestialsys.com
*.kbl.co.in
customer-sdpondemand.manageengine.in
s4hcrmprd.kbl.co.in
webmail.kbl.co.in
webmail.kbl.co.in
gtac.plintron.in
itdesksupport.amphenol-omni.com
helpdesk.allinoneservices.in.net
fiori.kbl.co.in
hr.aletheiagroup.co.in
helpdesk.allinoneservices.in.net
customer-sdpondemand.manageengine.in
itcare.hdfcfund.com
servicedesk.celestialsys.com
*.kbl.co.in
servicedesk.kbl.co.in
itcare.hdfcfund.com
itcare.hdfcfund.com
servicedesk.gainsight.com
servicedesk.celestialsys.com
customer-sdpondemand.manageengine.in
hr.aletheiagroup.co.in
servicedesk.celestialsys.com
taops.fractal.ai
fiori.kbl.co.in
fiori.kbl.co.in
fiori.kbl.co.in
helpdesk.allinoneservices.in.net
hr.aletheiagroup.co.in
*.kbl.co.in
fiori.kbl.co.in
itservicedesk.coraplus.com
*.kbl.co.in
taops.fractal.ai
servicedesk.celestialsys.com
webmail.kbl.co.in
itdesksupport.amphenol-omni.com
servicedesk.kbl.co.in
servicedesk.gainsight.com

Certificate

The complete raw certificate details for fiori.kbl.co.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxG5TQNvvcHlqNakLAe/
NTk1Un2ttTJEJC5OUyjdWkagki+caam5s9SWYFLlY3rXPbYksoRhXuzJlWAITxHJ
HEnOoZ384o2D8/9DOmW3IlFsSI11B7dqJk/DcOsoV+1TNMr1/WqPdNe8RnvhizTi
jqLZ9Nh1gyPdGPJ0laWuXAMR6b0hSq+GQlSevmBSustG/YtchVdXdfXNwECU0gw6
O0tbRvhNoYG3hFzMSDPIlr3Zc3Y+/LX4AE0MWWN3wc46uj3ND78Ufe/oNlLyJR20
3uFajukIa6FBd954XyYWNAV6regptaICGvpDcmbMJA6ajSwiCpvKJBXIuUbrexat
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6880481908822357834202499993414798080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maharashtra'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pune'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kirloskar Brothers Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fiori.kbl.co.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25130162635242212601668204524760680006328016803670718417917465103570358661767934891008130290779739495377224289820909934092011340917831331173333921672362248578765245828983579088838224603187454890200054604359939740174590177888595247826932512186946360221475547535149687691230325953406038138626282721203803893947015740336518948725828210416388238754173481418181933111830165516463499699032702117855185937702467413559924252340304876269233857873834050133666145100977626528254245065073993869256279243577947681901627488066154922509420003053173206404493337926162256590511769506781395965045493822032616800237722828448153915010383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7173485a62bbb4871345578fdd3b4c1111ab45ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fiori.kbl.co.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016ca8578e7c0000040300473045022100f8b1080506552dd392c1f961ab7952e66dbd215959871b3ddade8e38987979cc0220647e480781c49e1a0aa6f97ebace67c4b1ea70ac3b4c4a4a185ddcccfbb552f40076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ca8578ec30000040300473045022100de8a68de58708ba9543be791feba1ee2ac112b25dcbf49df37eb397fd32635cb02201ed90062fe1fa5b057a0d53b90c00e9d9457b135fd8ec82b50c9cef63bf09e0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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