gds.kia.co.kr

Issued by GlobalSign RSA DV SSL CA 2018

About this certificate

This digital certificate with serial number 73:38:cb:61:22:c8:36:69:44:63:98:79 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gds.kia.co.kr,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 73:38:cb:61:22:c8:36:69:44:63:98:79
Serial Number (int): 35659436407589612843316779129
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: b8:84:9f:8d:8c:bc:11:20:4c:64:01:58:a7:f2:80:82:ea:22:ea:0f
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11

Fingerprint (sha1): 7f:17:0a:23:52:2c:1e:aa:9c:e4:7e:25:84:b7:26:c4:eb:69:ca:cc
Fingerprint (sha256): 18:f1:6e:33:82:a0:d9:7e:ff:e6:34:98:a5:5f:11:e2:8f:3e:56:d6:57:fa:d2:34:97:b3:54:f9:3c:6a:b3:09

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl

Check the revocation status for certificate gds.kia.co.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gds.kia.co.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gds.kia.co.kr

Other certificates including the domain name kia.co.kr

(limited to 100 certificates)
sfs.kia.co.kr
disir.kia.co.kr
scam.kia.co.kr
mvfmea.kia.co.kr
kedis.kia.co.kr
www.hyundai.com
vspace.kia.co.kr
kiain.kia.co.kr
ksw.kia.co.kr
autodocsmanager.hmc.co.kr
campaign.kia.co.kr
gsw.kia.co.kr
fleet.kia.co.kr
qsvc.kia.co.kr
kiain.kia.co.kr
epay.kia.co.kr
grims.hmc.co.kr
sales.kia.co.kr
pms.kia.co.kr
digitalkpi.kia.co.kr
outlook.hmc.co.kr
campaign.kia.co.kr
sales.kia.co.kr
qsvc.kia.co.kr
kedis.kia.co.kr
rent.kia.co.kr
fleet.kia.co.kr
visit.hyundai.com
gqis.kia.co.kr
qsos.kia.co.kr
csplaza.kia.co.kr
sales.kia.co.kr
*.kia.co.kr
autodocsmanager.hmc.co.kr
owa.hmc.co.kr
rent.kia.co.kr
grims.hmc.co.kr
www.hyundai.com
gswchina.kia.co.kr
gsw.kia.co.kr
sales.kia.co.kr
kedis.kia.co.kr
sales.kia.co.kr
oss.taps2.kia.co.kr
autoway.hmc.co.kr
san-25-s12.tlsprovisioning.exacttarget.com
vars.kia.com
gds.kia.co.kr
taps2.kia.co.kr
*.kia.co.kr
kiain.kia.co.kr
*.kia.co.kr
kqsvc.kia.co.kr
sfs.kia.co.kr
digitalkpi.kia.co.kr
rsms.kia.co.kr
kcacms.kia.co.kr
q.kia.co.kr
fleet.kia.co.kr
otp.kia.co.kr
autoway.hmc.co.kr
tospms.kia.co.kr
*.kia.co.kr
saisautoway.hmc.co.kr
kiain.kia.co.kr
gswchina.kia.co.kr
epay.kia.co.kr
autodocsmanager.hmc.co.kr
myehr.kia.co.kr
isir.kia.co.kr
kerms.kia.co.kr
mprs.kia.co.kr
grims.hmc.co.kr
wlounge.kia.co.kr
gqis.kia.co.kr
csplaza.kia.co.kr
scam.kia.co.kr
dmss.kia.co.kr
san-25-s12.tlsprovisioning.exacttarget.com
*.kia.co.kr
epay.kia.co.kr
gds.kia.co.kr
gim.hyundai.com
kerms.kia.co.kr
sales.kia.co.kr
scam.kia.co.kr
outlook.hmc.co.kr
kgasc.kia.co.kr
grims.hmc.co.kr
isir.kia.co.kr
www.hmc.co.kr
sales.kia.co.kr
mvfmea.kia.co.kr
visit.kia.co.kr
otp.kia.co.kr
*.kia.com
owa.hmc.co.kr
saisautoway.hmc.co.kr
gim.hyundai.com
grims.hmc.co.kr

Certificate

The complete raw certificate details for gds.kia.co.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QwLC+4BbGi/l81DsE0d
HKAW8HK/GX1jDlMblNRFicOoYMCKdvqGnT7EMFTuZK4uPgd1g3cMPVae1eeysnck
8UhIjx4YznPJjVXe2u3O3K0DQe5+yLhCGrxwH5HO9YcQ4GLzduqkXiEZRhD/z2me
1bEt0PHGpwArArdRQcpgbyFXl0PM7dUuFwxNurDVSMiDUUMjz1to2sYQb4qc0s4k
s0LI07R3y310lcegAUTOZ8pAtYt/nfFJf6ougrh8RKJhfl6ERo3sj+xY0hsz9JnJ
MYcTrkf7A/ZTrNpOAPrfGj8Fdj9soXCPZUGjg7Uc2dam50NUEoAQb4apXm/uQtQz
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35659436407589612843316779129
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 01:59:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-19 01:43:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gds.kia.co.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28409557316352588642847629590445819530424155864682389523022625007768529271259648802877204219680867893731160943266502075807792465637516328785917900565355413983815948350136572297729849870735910042633334940660778706987925057595779135125737596788481996644466598389152871725118187273574792286154518006094504852682839504788741131561438515882155927968840415829562631146758831369092488762330404383333343942309679844429548242819521260287218399484354205462201338497243874522653138862122271753725185515163776707760237398195510890360320164361897355563846647790086567865049567897484550085393599130252328418999703314922982421574597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gds.kia.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8849f8d8cbc11204c640158a7f28082ea22ea0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b9ae98f72a9ec5a5ebf8220bf8e42657b7a1325102ce1260b00ab95a3540643b278419c3d842df34a2d98df578979042c8d26f5d2f7c4bd113294702d706bfb638aeb02f670f841871750df03f37c20230342ff2fc80c8aa4dea19441e791a96020c4b486f3b823bb5d17630d4dabb91de13c6ef02cad4ad1a267b99a1484b5f2dace821b5b3e9f4d0b852b8618f9aa1bb420d5e7201dbf6d173d47084ffa26ab166887be199f5e36b0e5b4fd875a9a800eeda50087e1982e2beb0b3ec98c031509c6da51f3247984ffd9cadff79f6cd368c4bda0bfd5157205b443b35c8e400942a18a5a74627148b0c6c2ed14538c09222d730114c6bb052c410992e763f7