epay.kia.co.kr

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 0f:1e:af:b6:7b:c3:5a:0b:ce:d2:38:0c was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=epay.kia.co.kr

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:1e:af:b6:7b:c3:5a:0b:ce:d2:38:0c
Serial Number (int): 4679372702268609203048429580
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: 51:2f:f0:c9:4d:97:82:68:4d:c1:49:40:b7:fa:52:93:a3:a2:4f:19
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 1a:fc:e4:3f:c6:d7:c8:b0:0d:f0:f8:da:c4:a3:34:9e:72:45:4f:3f
Fingerprint (sha256): 22:8f:a6:25:bf:c0:61:c9:27:10:20:ee:84:f7:e5:e4:63:84:0e:6b:da:ba:dd:8e:23:2e:c1:15:4f:2e:d1:08

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate epay.kia.co.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for epay.kia.co.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

epay.kia.co.kr

Other certificates including the domain name kia.co.kr

(limited to 100 certificates)
sfs.kia.co.kr
disir.kia.co.kr
scam.kia.co.kr
mvfmea.kia.co.kr
kedis.kia.co.kr
www.hyundai.com
vspace.kia.co.kr
kiain.kia.co.kr
ksw.kia.co.kr
autodocsmanager.hmc.co.kr
campaign.kia.co.kr
gsw.kia.co.kr
fleet.kia.co.kr
qsvc.kia.co.kr
kiain.kia.co.kr
epay.kia.co.kr
grims.hmc.co.kr
sales.kia.co.kr
pms.kia.co.kr
digitalkpi.kia.co.kr
outlook.hmc.co.kr
campaign.kia.co.kr
sales.kia.co.kr
qsvc.kia.co.kr
kedis.kia.co.kr
rent.kia.co.kr
fleet.kia.co.kr
visit.hyundai.com
gqis.kia.co.kr
qsos.kia.co.kr
csplaza.kia.co.kr
sales.kia.co.kr
*.kia.co.kr
autodocsmanager.hmc.co.kr
owa.hmc.co.kr
rent.kia.co.kr
grims.hmc.co.kr
www.hyundai.com
gswchina.kia.co.kr
gsw.kia.co.kr
sales.kia.co.kr
kedis.kia.co.kr
sales.kia.co.kr
oss.taps2.kia.co.kr
autoway.hmc.co.kr
san-25-s12.tlsprovisioning.exacttarget.com
vars.kia.com
gds.kia.co.kr
taps2.kia.co.kr
*.kia.co.kr
kiain.kia.co.kr
*.kia.co.kr
kqsvc.kia.co.kr
sfs.kia.co.kr
digitalkpi.kia.co.kr
rsms.kia.co.kr
kcacms.kia.co.kr
q.kia.co.kr
fleet.kia.co.kr
otp.kia.co.kr
autoway.hmc.co.kr
tospms.kia.co.kr
*.kia.co.kr
saisautoway.hmc.co.kr
kiain.kia.co.kr
gswchina.kia.co.kr
epay.kia.co.kr
autodocsmanager.hmc.co.kr
myehr.kia.co.kr
isir.kia.co.kr
kerms.kia.co.kr
mprs.kia.co.kr
grims.hmc.co.kr
wlounge.kia.co.kr
gqis.kia.co.kr
csplaza.kia.co.kr
scam.kia.co.kr
dmss.kia.co.kr
san-25-s12.tlsprovisioning.exacttarget.com
*.kia.co.kr
epay.kia.co.kr
gds.kia.co.kr
gim.hyundai.com
kerms.kia.co.kr
sales.kia.co.kr
scam.kia.co.kr
outlook.hmc.co.kr
kgasc.kia.co.kr
grims.hmc.co.kr
isir.kia.co.kr
www.hmc.co.kr
sales.kia.co.kr
mvfmea.kia.co.kr
visit.kia.co.kr
otp.kia.co.kr
*.kia.com
owa.hmc.co.kr
saisautoway.hmc.co.kr
gim.hyundai.com
grims.hmc.co.kr

Certificate

The complete raw certificate details for epay.kia.co.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x5tECFrOe79QoPeYFfb
Ev83h8tUr2fbwNq+7ArAmLnOIMaXiZOCFcF54b2EFc8jm4qWm8EhkWDj0gLxuDNe
DtCgaRBwx8CMp837tqHxyTQBJH2IF7Uqe/RhD9l5Mnm8LA5eGymc+alBNE1M8i7/
q5WvVTgtvrYodENNUeVTogJYKaAyN4hzhkVqmITmV6Wf9Mq77bNjyPs0R7jycMwe
nU7u1oNpFYd8R6PasNC7YeQOVJxbYvsrkyA7r47aG8V7/7SfDfqxAJSjkjz2qXom
zwaotfbBwj2SS33sCKJKsjiEfKsk6fR6dNGBnlUSdXCEsL6k+HiGn2LkPo/orQhR
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4679372702268609203048429580
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-20 01:22:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epay.kia.co.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26651285981133772503751408784335788727316266974958530401027409548424496912720415211153369886225821341629936862988565778820685479582960050911182551854709254139175902951040833877464623242339552841522518795558555933319608544174715043934681211200097372402677398996520981057012895085831734232448678818771557805632865057833299655455147238841054401784752932056180441417936025902681867899723647517813427497377235411060954555933790004584915809204959898659181739964308870004413111739718760582547944124687933040466608165963260123148565747149587427686127016670981157309323384965769673556965780234452306986668068499395805731901839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epay.kia.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							512ff0c94d9782684dc14940b7fa5293a3a24f19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000174097583e50000040300463044022051a56ad783d351719386dbaa607f1afe3d91aef3648aee14ca5e1ae556172aef0220657512b7846510dc5870832e3407c6d56fdb34a36f7e7f9b02c943cc493c79b20075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000174097583de000004030046304402205262c43909d88eb69411c1c6768a1474cd7a5c7777afa312bc5e5b98d478bbb602202de3dd896620424652a1f4728545474bb02300136edc838f9e0ccebba5b69513
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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