epss.lge.com

- LG Electronics Inc -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:05:39:c4:37:fa:12:0f:ce:3b:24:12:c2:3e:e8:da was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LG Electronics Inc

Organization: LG Electronics Inc
Organization unit: it 1
State / Province: Seoul
Locality: Yeongdeungpo-gu
Country: KR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:05:39:c4:37:fa:12:0f:ce:3b:24:12:c2:3e:e8:da
Serial Number (int): 8002501102393422605825828062488357082
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 98:2c:6a:8e:4a:ee:a8:99:91:83:5f:16:45:8b:a8:5f:97:63:05:86
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): cf:27:65:1f:c1:c8:8a:57:de:9a:69:bf:15:a5:05:0f:b6:bf:03:5d
Fingerprint (sha256): 03:e4:2d:3e:c2:25:b1:e7:8a:73:0e:7f:97:f6:c4:da:e1:1a:df:e6:81:f6:10:25:cc:66:48:98:4d:8e:20:3c

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate epss.lge.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epss.lge.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epss.lge.com
dmzepss.lge.com

Other certificates including the domain name lge.com

(limited to 100 certificates)
cams.lgpayqa.lge.com
aicsso.lge.com
epss.lge.com
gsfsplus-eu.lge.com
invoiceportal.lge.com
cicvpn.lge.com
lge.com
aicacs.lge.com
nmpis.lge.com
gcrc.lge.com
winwin.lge.com
vmi.lge.com
dm01.gdms.lge.com
nmpis.lge.com
rone-kic.lge.com
redmine.lgcom.lge.com
drmcp.lge.com
teleaic.lge.com
msis.lge.com
dm04.gdms.lge.com
pcms.lge.com
*.lge.com
liveplus.lge.com
*.lge.com
chatbotqa.lge.com
lgsync.lge.com
*.lge.com
vpc.lge.com
dm01.gdms.lge.com
ems.lge.com
*.lge.com
glopp.lge.com
lge.com
telepresence.lge.com
qhelp.lge.com
flaskdevlgetsacs.lge.com
vpn.lge.com
pcms.lge.com
etax.lge.com
learningnet.lge.com
gscs.lge.com
thinqpet.lge.com
www.lge.com
epss.lge.com
gsfs-eu.911.lge.com
www.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
*.lge.com
*.lge.com
gscs.lge.com
tms.eu.lge.com
moffice.lge.com
kmsso.lge.com
lmu.lge.com
sso.lge.com
es.lgcom.lge.com
imc.lge.com
*.lge.com
membership.lgpaytest.lge.com
caweb.lgpaytest.lge.com
gcuv2.lge.com
almmobile.lge.com
qhelp.lge.com
dm01.gdms.lge.com
g-crm.lge.com
ineo.lge.com
*.lge.com
ehealth.lge.com
*.lge.com
epss.lge.com
*.lge.com
vpn.lge.com
gsfsplus.lge.com
lgvmi.lge.com
lgpatent.lge.com
lspmv.lge.com
www.lgcomstg.lge.com
sign.lge.com
sdss.lge.com
oil.lge.com
smile.lge.com
cicvpn.lge.com
brand.lge.com
cnmas2.lge.com
gitlab.lgcom.lge.com
*.lge.com
*.lge.com
lgpatent.lge.com
fido.lgpay.lge.com
san-3-s13.tlsprovisioning.exacttarget.com
*.lge.com
smile.lge.com
glcp.lge.com
cloud.marketing.lge.com
gscs-america.lge.com
san-9-s51.tlsprovisioning.exacttarget.com
caweb.lgpaytest.lge.com
vecs.lge.com
dm01.ksut.lge.com
newlss.lge.com

Certificate

The complete raw certificate details for epss.lge.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5K4VeS16u0BpWUHM7V0O
KruEIucS4B6vdh8rSUzHw/m3WknOjSOW5RZ4WX68sz4F+SfQE2qqheZRXUARej5E
AdUcOwAXj/JQjf6X68b9g3LZfaXFwEdGX2MNDYFGklrqKzdTtqm6haMP00lTKO+t
+stQMumZMNec7mrYg9vQzsWLeckTzDzPkcVoUWrTTZcWm/Q5ZxE8FH8Zy6tLxRP7
QLQSOfkwbeIRDwuy3bkDHw2dwgV40yL5Ezcz1WH7rnE5DjLFRBVVslgft8hH5NYJ
bCL3GErj3fbu0HWYGopbTPz6+iHL0WBJimk0tdBRiqSBL+UC/anjXdKgiyfF5lNG
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8002501102393422605825828062488357082
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yeongdeungpo-gu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LG Electronics Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'it 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epss.lge.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28868177493072838630464412670913600238818693138612436553455277652729387945715374914488103716621596963965805935099271714023469473076062257638018760152690154087602579842139168276919918719418193849024939789183757376306454186977544640067361009761375655883113825130643264150436249710196516191153443873010733202690351538258821681212596911414601813440542650291345658054108776018652543344848896652083169912693222392247222218983817981486600599556006435824427131407701492959025853821268681794560245747643511850905482555545829987186896324844285544203663481408162725201946669014361384558565750927968923628630495915077983733499563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							982c6a8e4aeea89991835f16458ba85f97630586
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epss.lge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dmzepss.lge.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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