cyber.kepco.co.kr

- Korea Electric Power Corporation -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 0e:36:df:3b:f8:ee:2f:f0:ef:8a:29:61:2a:03:07:9b was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Korea Electric Power Corporation

Organization: Korea Electric Power Corporation
State / Province: Jeollanam-do
Locality: Naju-si
Country: KR

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:36:df:3b:f8:ee:2f:f0:ef:8a:29:61:2a:03:07:9b
Serial Number (int): 18894103700193138753160189271920019355
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): eb:c1:d2:d5:c4:84:3e:40:ca:4f:94:26:9f:9b:6d:22:17:a5:ac:49
Fingerprint (sha256): 18:e8:02:09:8f:72:9b:07:4b:ea:bc:59:25:97:28:fb:1e:25:a2:3d:d5:7a:b7:9d:10:cc:b1:e2:ef:67:42:bc

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate cyber.kepco.co.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cyber.kepco.co.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cyber.kepco.co.kr

Other certificates including the domain name kepco.co.kr

(limited to 100 certificates)
cyber.kepco.co.kr
*.kepco.co.kr
vpn.kepco.co.kr
vpni.kepco.co.kr
bqm.kepco.co.kr
smart.kepco.co.kr
e-bill.kepco.co.kr
evc.kepco.co.kr
isl.kepco.co.kr
bigdata-bi.kepco.co.kr
e-bill.kepco.co.kr
sts.kepco.co.kr
evc.kepco.co.kr
home.kepco.co.kr
evc.kepco.co.kr
hjms.kepco.co.kr
spin.kepco.co.kr
edsm.kepco.co.kr
sso.kepco.co.kr
home.kepco.co.kr
e-bill.kepco.co.kr
e-bill.kepco.co.kr
cis.kepco.co.kr
vpni.kepco.co.kr
edu.kepco.co.kr
es.kepco.co.kr
imail.kepco.co.kr
edu.kepco.co.kr
si-ndis.kepco.co.kr
home.kepco.co.kr
imail.kepco.co.kr
law.kepco.co.kr
edms.kepco.co.kr
cyber.kepco.co.kr
ebiz.kepco.co.kr
e-bill.kepco.co.kr
*.kepco.co.kr
vpni.kepco.co.kr
ebiz.kepco.co.kr
ispam.kepco.co.kr
toms.kepco.co.kr
e-bill.kepco.co.kr
bigdata-bi.kepco.co.kr
vpn.kepco.co.kr
e-bill.kepco.co.kr
es.kepco.co.kr
cyber.kepco.co.kr
si-ndis.kepco.co.kr
pccs.kepco.co.kr
cyber.kepco.co.kr
home.kepco.co.kr
edustrm.kepco.co.kr
eportal.kepco.co.kr
pap.kepco.co.kr
e-bill.kepco.co.kr
ftc.kepco.co.kr
*.kepco.co.kr
*.kepco.co.kr
cis.kepco.co.kr
meter.kepco.co.kr
*.kepco.co.kr
cis.kepco.co.kr
sms-crm.kepco.co.kr
pap.kepco.co.kr
slm.kepco.co.kr
bigdata-bi.kepco.co.kr
home.kepco.co.kr
si-ndis.kepco.co.kr
law.kepco.co.kr
ssl.kepco.co.kr
cyber.kepco.co.kr
bigdata-login.kepco.co.kr
smart.kepco.co.kr
pp.kepco.co.kr
isl.kepco.co.kr
si-ndis.kepco.co.kr
imail.kepco.co.kr
ugsm.kepco.co.kr
sms-crm.kepco.co.kr
tas.kepco.co.kr
ndiscloud.kepco.co.kr
sms-crm.kepco.co.kr
*.kepco.co.kr
lms.kepco.co.kr
e-bill.kepco.co.kr
law.kepco.co.kr
recruit.kepco.co.kr
e-bill.kepco.co.kr
cyber.kepco.co.kr
cis.kepco.co.kr
tas.kepco.co.kr
ssl.kepco.co.kr
iusb.kepco.co.kr
cyber.kepco.co.kr
imail.kepco.co.kr
edu.kepco.co.kr
lms.kepco.co.kr
bigdata-login.kepco.co.kr
pp.kepco.co.kr
imail.kepco.co.kr

Certificate

The complete raw certificate details for cyber.kepco.co.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31XG3lCkxVmV4fu1K7tv
e5BT50o3pvurit+0/lbK4U+thOgBi+9jj+rpP6uNTRg1XtDpd4agtaqbvwS95zhm
B8Q6t248L4Nqpnhqu4Wpe36z1IfRsKhIF9XznYmdbbzUDvZDePjfHlgCAejy0acp
5ENRU5VAhYbYvEzxdVvKeNXIGlePjXWcbuLZ7E6bk381XtE/Kcz5HFpLC2QTa53G
ly8zu/6QzMhrXskBAveihs1K767CQz8xgEIb/XL316axzjyBgK7OikITYY/+MSks
KZFJBQXRRZRrCqTTdd3RS4JGmEyPdCcfjj2TcQWX8/C5A45I+D4ts6IkbjVh4e28
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18894103700193138753160189271920019355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Jeollanam-do'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Naju-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Korea Electric Power Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cyber.kepco.co.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28193440138657636741931845925970896863932253221630740739325775576069651523291497274387239052360407260852985362187286609250217155850336802239595644538683047670096736351511492000415065928786480638306403853127176169883756375196575981188782136319197485647418306475657165380121601453019195531758271392490839429481961033110690193052999349508606393881372310841437070509471501521026352950348337279214358205399491359043854404672211158659512065427692737098678406206585462093733222614880641286841645964668596789219438695125024916297556575193471228451456179883715952218078433820095669880559229229748767392069878972809775384738877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyber.kepco.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000158aa006206000004030046304402206084ab5ea154a85d22993cc3929bb920753ffe84ee305e38dbb91b09dd2f3fca0220626bd5d9fbf5188a421f2bc465de0145c496b6d9022aace68e7daa01bd77f778007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000158aa00625400000403004830460221008f3f0d1776bbf322d77f1b4249064c852011eb252e866fcc721d74ae20e9266a022100ce9d29fe80bfd5fd12f64113d3ef7c06d84b1f7ed95e7b545e8769fe2133876c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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