extra2.gdoc.go.kr

- Ministry of the Interior and safety -

Issued by CA131100001

About this certificate

This digital certificate with serial number 21:87:00:58:f6:9e:58:c6:fe:60:4c:15:ab:f6:5f:10:33:78:eb:6c was issued on by Government of Korea.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment ContentCommitment KeyEncipherment DigitalSignature] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministry of the Interior and safety

Organization: Ministry of the Interior and safety
State / Province: Sejong
Locality: Sejong-si
Country: KR

Government of Korea

Organization: Government of Korea
Organization unit: GPKI
Country: KR

This certificate has expire since

Certificate Details

Serial Number (hex): 21:87:00:58:f6:9e:58:c6:fe:60:4c:15:ab:f6:5f:10:33:78:eb:6c
Serial Number (int): 191407326311648897951070570055017018375976577900
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: ee:a5:40:39:31:e9:cd:ed:35:c4:44:8e:37:cf:3e:82:01:5c:34:4a
AuthorityKeyId: 92:a4:78:17:b1:aa:2f:19:d8:2b:3f:b9:b3:2b:23:15:83:d5:97:35

Fingerprint (sha1): d9:b3:68:3f:0d:18:98:2f:97:90:77:7b:37:3a:44:b2:c5:53:d7:3f
Fingerprint (sha256): 2b:93:71:5e:32:7e:c0:c2:e9:ce:41:b5:ef:d2:a2:88:76:ac:2d:e5:41:d8:df:32:a4:43:c9:67:41:5a:c3:e0

Issuing Certificate URL: http://ssl-crl.gpki.go.kr/CA131100001.cer

Revocation information

OCSP Server: http://ssl-ocsp-gov.gpki.go.kr:8100
CRL Distribution Point: ldap://cen.dir.go.kr:389/cn=crl3p1dp9,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary
CRL Distribution Point: http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp9.crl

Check the revocation status for certificate extra2.gdoc.go.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extra2.gdoc.go.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extra2.gdoc.go.kr

Other certificates including the domain name gdoc.go.kr

(limited to 100 certificates)

Certificate

The complete raw certificate details for extra2.gdoc.go.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltwoRdY+lf6c5LtoKV5s
THfmVKH+fOD5YikTSlUk6pXR5dyJxQjnJzm3t5k4i8m1nEf0937pi0Sag6QJMk8x
F6gRzjWrjTMN6xCkEbmzFrsg5nAOvMT27ORv2FODg81ikSlIcRVBp6PtqakOJ4WH
8/XlgHNd6SjfFt+KhhAOrLuP5NwPCQU31Jja7fn+xQoQydf8eJJ5k4uVAyoFOGEN
GJK4oos0pBUd+4uAJ+E2JU+IH9hC/IGi25rtN9P6UezJe4fCBH9qH7lUFVfRt5Sy
AkMjOIyrqSlGK+3Zl67obouqKUvmfMPE8mquSxExZ0jPhxDOpWUdzHGRrx3FIeR2
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 191407326311648897951070570055017018375976577900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government of Korea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GPKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA131100001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 09:12:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sejong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sejong-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ministry of the Interior and safety'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'extra2.gdoc.go.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19044309363465651630223538937494762584478375538461206729524407974374646947380618795348990082081151317269982892577008982556398626883205946828495010683054693198536889776224364930113819005466423481551043585639416021140046592562004598423110773053235926102228099447782209329828035645675404941671867154589001123532485015104666727018064640657279754921868158567354855121301207491374957366421623356001393434518812176479609665005693447523252049726756322277913922485448540810209081474940333696605024873396007214336176620800324271487141847938012597768783148849446113357173643534150762957813567321455923079112621779602843208283841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92a47817b1aa2f19d82b3fb9b32b231583d59735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eea5403931e9cded35c4448e37cf3e82015c344a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.410.100001.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.gpki.go.kr/cps.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extra2.gdoc.go.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://cen.dir.go.kr:389/cn=crl3p1dp9,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp9.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-ocsp-gov.gpki.go.kr:8100'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/CA131100001.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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