ispam.kepco.co.kr

- Korea Electric Power Corporation -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:25:fb:b0:44:b2:6d:56:11:9a:28:c3:d6:82:8e:d4 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Korea Electric Power Corporation

Organization: Korea Electric Power Corporation
State / Province: Jeollanam-do
Locality: Naju-si
Country: KR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:25:fb:b0:44:b2:6d:56:11:9a:28:c3:d6:82:8e:d4
Serial Number (int): 12160271796057836347567581993885667028
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 70:5d:46:d3:a5:7f:3a:67:30:40:c7:01:f4:a6:6b:c8:78:1e:5f:70
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 85:48:75:46:ec:ff:ea:e8:f5:ea:8f:f5:b4:05:e5:8b:f0:56:76:a3
Fingerprint (sha256): 14:18:2e:22:e8:84:49:2a:0f:a2:dc:72:f0:97:75:d5:e8:ab:e9:90:2c:e1:88:fe:d5:7d:ed:35:69:82:92:60

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate ispam.kepco.co.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ispam.kepco.co.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ispam.kepco.co.kr

Other certificates including the domain name kepco.co.kr

(limited to 100 certificates)
cyber.kepco.co.kr
*.kepco.co.kr
vpn.kepco.co.kr
vpni.kepco.co.kr
bqm.kepco.co.kr
smart.kepco.co.kr
e-bill.kepco.co.kr
evc.kepco.co.kr
isl.kepco.co.kr
bigdata-bi.kepco.co.kr
e-bill.kepco.co.kr
sts.kepco.co.kr
evc.kepco.co.kr
home.kepco.co.kr
evc.kepco.co.kr
hjms.kepco.co.kr
spin.kepco.co.kr
edsm.kepco.co.kr
sso.kepco.co.kr
home.kepco.co.kr
e-bill.kepco.co.kr
e-bill.kepco.co.kr
cis.kepco.co.kr
vpni.kepco.co.kr
edu.kepco.co.kr
es.kepco.co.kr
imail.kepco.co.kr
edu.kepco.co.kr
si-ndis.kepco.co.kr
home.kepco.co.kr
imail.kepco.co.kr
law.kepco.co.kr
edms.kepco.co.kr
cyber.kepco.co.kr
ebiz.kepco.co.kr
e-bill.kepco.co.kr
*.kepco.co.kr
vpni.kepco.co.kr
ebiz.kepco.co.kr
ispam.kepco.co.kr
toms.kepco.co.kr
e-bill.kepco.co.kr
bigdata-bi.kepco.co.kr
vpn.kepco.co.kr
e-bill.kepco.co.kr
es.kepco.co.kr
cyber.kepco.co.kr
si-ndis.kepco.co.kr
pccs.kepco.co.kr
cyber.kepco.co.kr
home.kepco.co.kr
edustrm.kepco.co.kr
eportal.kepco.co.kr
pap.kepco.co.kr
e-bill.kepco.co.kr
ftc.kepco.co.kr
*.kepco.co.kr
*.kepco.co.kr
cis.kepco.co.kr
meter.kepco.co.kr
*.kepco.co.kr
cis.kepco.co.kr
sms-crm.kepco.co.kr
pap.kepco.co.kr
slm.kepco.co.kr
bigdata-bi.kepco.co.kr
home.kepco.co.kr
si-ndis.kepco.co.kr
law.kepco.co.kr
ssl.kepco.co.kr
cyber.kepco.co.kr
bigdata-login.kepco.co.kr
smart.kepco.co.kr
pp.kepco.co.kr
isl.kepco.co.kr
si-ndis.kepco.co.kr
imail.kepco.co.kr
ugsm.kepco.co.kr
sms-crm.kepco.co.kr
tas.kepco.co.kr
ndiscloud.kepco.co.kr
sms-crm.kepco.co.kr
*.kepco.co.kr
lms.kepco.co.kr
e-bill.kepco.co.kr
law.kepco.co.kr
recruit.kepco.co.kr
e-bill.kepco.co.kr
cyber.kepco.co.kr
cis.kepco.co.kr
tas.kepco.co.kr
ssl.kepco.co.kr
iusb.kepco.co.kr
cyber.kepco.co.kr
imail.kepco.co.kr
edu.kepco.co.kr
lms.kepco.co.kr
bigdata-login.kepco.co.kr
pp.kepco.co.kr
imail.kepco.co.kr

Certificate

The complete raw certificate details for ispam.kepco.co.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEfvOnyx0TURMq6zHD/t
bmRCuxZRaW/0X8+t0NA9cgQAe0kXYaHQkEwozCnrcS1CUoyFNyGDwh+TIuPMppRI
abITtdz17MPCT5gVNu1Tifn1NP8LF8Zjx6P2Ievwi6CY9uBz1BTQ9+pbZOxm14Pd
gyeChKZo+mpJ7u3SsSdW62BnaRKXibR+7AF/RKzjfhZb19bObUWbjwv3ZyT4LbSb
MjftAVtzM4VoBdSocrqN01s3vZdqeJZRIAifEEEOmzA/vfCsu28dhS7NoJK86k4o
zwFZbheDS1BtvjCxKzko79WafuY88JANQrCZaJ3oNZTwZp7bIIqeCN8TpKj/c968
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12160271796057836347567581993885667028
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jeollanam-do'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Naju-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Korea Electric Power Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ispam.kepco.co.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24273226770692241667582471539229615039194224593905547128437656210840421815106352086705201010185728751393375577004625130227201725212839935475880292286490699858637627801608811265802131092384569969840338795454585518210266106319807279490254057465002540111083258082912921729916798207291836702932499785816216178092739786999468019804378144329134214754252788163641713795707513567665467789974731276683230657509902706572612159332013916771173217374025522048390785266702875537948307009084118717415021487228979490896496636016650039482948787384638975592385881607654912426435931564163890432997025893858639422187334796597576404483157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							705d46d3a57f3a673040c701f4a66bc8781e5f70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ispam.kepco.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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