gds.kia.co.kr

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 72:cd:08:3c:5a:e3:fb:e4:b0:c0:34:b3 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=gds.kia.co.kr

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 72:cd:08:3c:5a:e3:fb:e4:b0:c0:34:b3
Serial Number (int): 35529159804940199437937947827
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: ad:89:8f:dd:95:3a:62:2b:1f:ef:af:ca:0c:15:68:ee:61:bb:ff:19
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 3e:34:ac:4f:32:5f:52:47:a5:fd:8c:01:d4:3f:20:dd:d3:6b:fd:65
Fingerprint (sha256): 2a:48:50:78:0f:01:66:30:f2:af:80:ee:a3:d7:5f:88:a9:6a:5c:d9:ff:c6:80:72:22:1a:7c:35:95:97:23:f0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate gds.kia.co.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gds.kia.co.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gds.kia.co.kr

Other certificates including the domain name kia.co.kr

(limited to 100 certificates)
sfs.kia.co.kr
disir.kia.co.kr
scam.kia.co.kr
mvfmea.kia.co.kr
kedis.kia.co.kr
www.hyundai.com
vspace.kia.co.kr
kiain.kia.co.kr
ksw.kia.co.kr
autodocsmanager.hmc.co.kr
campaign.kia.co.kr
gsw.kia.co.kr
fleet.kia.co.kr
qsvc.kia.co.kr
kiain.kia.co.kr
epay.kia.co.kr
grims.hmc.co.kr
sales.kia.co.kr
pms.kia.co.kr
digitalkpi.kia.co.kr
outlook.hmc.co.kr
campaign.kia.co.kr
sales.kia.co.kr
qsvc.kia.co.kr
kedis.kia.co.kr
rent.kia.co.kr
fleet.kia.co.kr
visit.hyundai.com
gqis.kia.co.kr
qsos.kia.co.kr
csplaza.kia.co.kr
sales.kia.co.kr
*.kia.co.kr
autodocsmanager.hmc.co.kr
owa.hmc.co.kr
rent.kia.co.kr
grims.hmc.co.kr
www.hyundai.com
gswchina.kia.co.kr
gsw.kia.co.kr
sales.kia.co.kr
kedis.kia.co.kr
sales.kia.co.kr
oss.taps2.kia.co.kr
autoway.hmc.co.kr
san-25-s12.tlsprovisioning.exacttarget.com
vars.kia.com
gds.kia.co.kr
taps2.kia.co.kr
*.kia.co.kr
kiain.kia.co.kr
*.kia.co.kr
kqsvc.kia.co.kr
sfs.kia.co.kr
digitalkpi.kia.co.kr
rsms.kia.co.kr
kcacms.kia.co.kr
q.kia.co.kr
fleet.kia.co.kr
otp.kia.co.kr
autoway.hmc.co.kr
tospms.kia.co.kr
*.kia.co.kr
saisautoway.hmc.co.kr
kiain.kia.co.kr
gswchina.kia.co.kr
epay.kia.co.kr
autodocsmanager.hmc.co.kr
myehr.kia.co.kr
isir.kia.co.kr
kerms.kia.co.kr
mprs.kia.co.kr
grims.hmc.co.kr
wlounge.kia.co.kr
gqis.kia.co.kr
csplaza.kia.co.kr
scam.kia.co.kr
dmss.kia.co.kr
san-25-s12.tlsprovisioning.exacttarget.com
*.kia.co.kr
epay.kia.co.kr
gds.kia.co.kr
gim.hyundai.com
kerms.kia.co.kr
sales.kia.co.kr
scam.kia.co.kr
outlook.hmc.co.kr
kgasc.kia.co.kr
grims.hmc.co.kr
isir.kia.co.kr
www.hmc.co.kr
sales.kia.co.kr
mvfmea.kia.co.kr
visit.kia.co.kr
otp.kia.co.kr
*.kia.com
owa.hmc.co.kr
saisautoway.hmc.co.kr
gim.hyundai.com
grims.hmc.co.kr

Certificate

The complete raw certificate details for gds.kia.co.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C5roOvXAbtN+4q2Q617
C2xHXCRtKxGzCxiytaBNM8qgIYQGZ+wZGvZ96WibyM4BTpCMntRL6DDQFQK2LY0K
fh9f9biLkOxyx1TIKFKdfe1FeuGbLggMKXvYn8Lh1iB06p6ZvuLcZFLTqpViRoW8
bnyBpEytc2elHOxluTrsyXEbUQ5NF5+44OLZ3VmbFV56Df3qvmQvh1UE9Obk+yUd
P5G0CjPXP9XiBf1TW9KdPhestVO2W5A6N7uNViZ3y4oHrpxAPL8GQ0M3F4KAgSO0
cGj12YzAbkbmPThPcDbTJqyRxNgujw2G2jip4BqgjOsCEsEj1kmh71Dlzmf3Sfm8
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35529159804940199437937947827
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-22 05:55:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-23 05:55:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gds.kia.co.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30320083956184167836270262434701260145728446468563890003669559678751652473197425578071654764860614021836755528575184224453249962969509666596238074429716024136113278020901665054490663442044155414634296354397708011358978642728171332104729284600689631104115018881140661280011051245044407108971585035304860402024856872384236277422625513690784292602531653649304637622354200037181781261454643376502954446264526616750266940205741262702987743658518108206922724004462558050811440040515155269911030584311388970195289761312049234290056692571118385622124587925223550914642664651781779255307837275033422053752645033373182501436581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gds.kia.co.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad898fdd953a622b1fefafca0c1568ee61bbff19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017728a93d5e0000040300463044022068e1f8a454e5f9b6b4991b26212249ad1d93643e723c0e7e4fefb6e92295118c022076d26cc00ce1aef8bfc592737b67e9abf0fadeb77c502fb5df20be64844c62c60077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017728a9402d0000040300483046022100ffe407d33794550d777fef2e611f8f3847c7b745c26e2b0bd5e6eac705234713022100db359504f7e0f4b168c5d0aea787a0eb26b34fa189b2679119ece7298a92ee3e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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