ems.kiaintra.com

Issued by EssentialSSL CA

About this certificate

This digital certificate with serial number df:1d:6f:f0:f0:53:65:37:51:2e:1c:48:da:9e:a7:95 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Certificate Subject

CN=ems.kiaintra.com,OU=Domain Control Validated+OU=Hosted by Korea Information Certificate Authority\, Inc.+OU=EssentialSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): df:1d:6f:f0:f0:53:65:37:51:2e:1c:48:da:9e:a7:95
Serial Number (int): 296570690105535979597220608100376946581
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 84:f1:39:9c:bc:ba:07:8a:20:01:9d:d2:d1:de:df:c9:ad:be:4e:29
AuthorityKeyId: da:cb:ea:ad:5b:08:5d:cc:ff:fc:26:54:ce:49:e5:55:c6:38:f4:f8

Fingerprint (sha1): 4e:e7:ca:1f:ea:20:9f:6f:8b:fb:1b:a3:3b:88:01:c0:71:a7:96:4f
Fingerprint (sha256): 04:04:86:63:ff:4e:49:4d:d5:34:60:10:47:d9:8c:61:3d:b3:60:09:20:cc:5f:06:35:8d:09:fb:9a:2e:d1:5b

Issuing Certificate URL: http://crt.comodoca.com/EssentialSSLCA_2.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/EssentialSSLCA.crl

Check the revocation status for certificate ems.kiaintra.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ems.kiaintra.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ems.kiaintra.com
www.ems.kiaintra.com

Other certificates including the domain name kiaintra.com

(limited to 100 certificates)
msos.kia.com
stg-web.icps.kiaintra.com
ksw.kia.co.kr
ems.kiaintra.com
kpi.kiaintra.com
www.hyundai.com
ktong-gw.kiaintra.com
h1asmt.kiaintra.com
tstmgsw.kiaintra.com
khcbopq.kiaintra.com
ems.kiaintra.com
dmis.kiaintra.com
ems.kiaintra.com
stg-web.icps.kiaintra.com
k-cube.kiaintra.com
kmmmes.kiaintra.com
k-cubedev.kiaintra.com
vocas.kiaintra.com
ems.kiaintra.com
msos.kia.com
ems.kiaintra.com
otms.kiaintra.com
otms.kiaintra.com
kas.kiaintra.com
ksw.kia.co.kr
k-cubespdev.kiaintra.com
ktong-mm.kiaintra.com
dmobileautoq.kiaintra.com
kmmmes.kiaintra.com
dmis.kiaintra.com
h1asmt.kiaintra.com
ksw.kia.co.kr
ems.kiaintra.com
ksw.kia.co.kr
www.hyundai.com
otms.kiaintra.com
ktong-push.kiaintra.com
dmis.kiaintra.com
hknpms.hmc.co.kr
ktong-wm.kiaintra.com
ksw.kia.co.kr
dmis.kiaintra.com
msos.kia.com
ktong-gw.kiaintra.com
ems.kiaintra.com
apiportal.kiaintra.com
sohamesweb.kiaintra.com
ems.kiaintra.com
dmobileautoq.kiaintra.com
vocas.kiaintra.com
ktong-push.kiaintra.com
k-cubeoodev.kiaintra.com
dmis.kiaintra.com
khcbopq.kiaintra.com
k-cubesp.kiaintra.com
k-cubeoo.kiaintra.com
em.hmc.co.kr
apiportal.kiaintra.com
sohamesweb.kiaintra.com
ktong-gw.kiaintra.com
ktong-gw.kiaintra.com
otms.kiaintra.com
k-cubeoo.kiaintra.com
k-cubeoodev.kiaintra.com
k-cube.kiaintra.com
pis.hmc.co.kr
gpms-dev.kiaintra.com
gpms-dev.kiaintra.com
tstmgswmob.kiaintra.com
msos.kia.com
ksw.kia.co.kr
ksw.kia.co.kr
www.hyundai.com
ems.kiaintra.com
ems.kiaintra.com
h1asmt.kiaintra.com
k-cubespdev.kiaintra.com
khcbopq.kiaintra.com
tstmgswmob.kiaintra.com
ems.kiaintra.com
pis.hmc.co.kr
ksw.kia.co.kr
ktong-gw.kiaintra.com
pas.kia.com
devktong-gw.kiaintra.com
k-cubedev.kiaintra.com
ems.kiaintra.com
devktong-gw.kiaintra.com
ems.kiaintra.com
ems.kiaintra.com
h1asmt.kiaintra.com
sohamesweb.kiaintra.com
ktong-mm.kiaintra.com
tstmgsw.kiaintra.com
gpms-dev.kiaintra.com
khcbopq.kiaintra.com
sohamesweb.kiaintra.com
ktong-gw.kiaintra.com
ksw.kia.co.kr
k-cubesp.kiaintra.com

Certificate

The complete raw certificate details for ems.kiaintra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jGLyUcrW7UU31bEK5I3
FTw4ve/kfDmOGA4WAIrxS9POWKxKmDK8Fqh2hqc0fRJy92Yx8HFUGvZZfUYM0cop
ulbB5+s/P1lnICVlOV49vvlYMjCwYVm0ukwuft7/FfKQ3IWn9DJ3KDogKZYhzHE9
VR/2gDPrPJq5qpSc5Qxdb9kB6Ep4IVLOf/UD4fhUMFCNIjSJuNc+ZTvE9gr0P1/N
nXDHxbU1+LyCZJNWSsN7AT0sKLwTA8D/pKPEtIxYdWJEg1yL6+/KrGAXc7tHL0iX
gjQDYrcAcf4k50spCMKHcRtcxnOVt40MEPbUT3lzHgglhqJjS2LITRy8ib5srNAv
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296570690105535979597220608100376946581
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by Korea Information Certificate Authority, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EssentialSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ems.kiaintra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27039429325660254265675633368495786104847716216080141088240687989218883972558954315860105682657702526440824011394053056168212401485192269002713836090550476796026665115584956083225524912771831004938784848574873605823746175031449995694829116171337746726699676430251342370421706576450281365599002908165708491088550048356709481888576809726453353953816818853041415851561639816095640779223365526840046810136854802189351084672213382537014729026520921792616484730002738709270248605783103654676919579365711213502522977823657802075715471368114189247520366676940446627356094683370822084740392971500716580532407929443491075075889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dacbeaad5b085dccfffc2654ce49e555c638f4f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84f1399cbcba078a20019dd2d1dedfc9adbe4e29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/EssentialSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/EssentialSSLCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ems.kiaintra.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ems.kiaintra.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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