sudcorea.org

Issued by R3

About this certificate

This digital certificate with serial number 03:dc:db:d6:af:10:80:7b:e1:78:a7:5e:f8:20:63:19:ff:14 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sudcorea.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:db:d6:af:10:80:7b:e1:78:a7:5e:f8:20:63:19:ff:14
Serial Number (int): 336491194151220920014254178059639229906708
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0e:a6:0d:72:6c:b2:b8:a2:5b:f1:ca:29:82:1f:05:3a:54:f4:5a:ac
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 97:6d:07:9b:fa:44:6a:d9:14:46:97:ab:c4:6f:40:ed:f5:e6:76:86
Fingerprint (sha256): 07:8b:a0:5c:65:33:08:c4:e7:92:9a:41:e6:b5:42:77:ca:f7:c8:e4:25:79:62:05:0a:c6:cc:75:b2:c2:1c:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sudcorea.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sudcorea.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sudcorea.org

Other certificates including the domain name sudcorea.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sudcorea.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336491194151220920014254178059639229906708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 14:31:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 14:31:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sudcorea.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1001925173746613292987183861041551565861034900937384097050049108399682543405211088488032315496092722564017074152433401303137364855612765984017927840075949501887533224127598744030887526899876500832678472145882630018228789326338399199877800932630897852527011822213160312608348792181691521128197919778323266040955425192851500994524551838421579444609535851438917259846235038641656659095492969159605583234974299506388337198105721210076798906980909817390963292021289048130067793611284157322848395731595565803395458725557057046074933088693128906094471909907364123710204279735324714525784821323227635092254038915177642945244391484403684495425542829545381185946806764469573173268373764763177727362496206096822244751828959958713558378584009448215148501710498404740782703963453019584848272378502362670615827185332733380205128641102272778476979734354672469528737756536950091903910463308787177784149459358391425362042547366319072227255569313405364821872548188048762323981493246076071028875846870096064947903775482786366723049903364672193419101334038628845113355408744491787525809710528789361391403111956954908941671802913408837980563326577026764408112861334392084371106616406526345634433918478547904958199927004521218886584304239985526843108563447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ea60d726cb2b8a25bf1ca29821f053a54f45aac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sudcorea.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c9c74098000000403004830460221008ac4a47d7a6adda8a29d54f5e82f7d23c73ebf1eaf5416230588272f0ddf764c022100f40295e40beaa47f2fba5cfb02e5f5a04bf8ac2cc3d6978046ccc8726e936a7000750029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c9c740a8c000004030046304402200520008f3f47a0f25499b2a5b8fbdc9e41a63ddb4d3e42d0052706aa77525bc402207e8c7c913162d5ec19cfa064218614ec59a81098bd2bd7a69a17de59af9fa2b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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