*.sc.or.kr

- Save the Children Korea -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0f:82:ad:6a:1f:4a:3b:72:1b:62:6b:ad:f5:39:c9:f1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Save the Children Korea

Organization: Save the Children Korea
State / Province: Seoul
Locality: Mapo-gu
Country: KR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:82:ad:6a:1f:4a:3b:72:1b:62:6b:ad:f5:39:c9:f1
Serial Number (int): 20616935793113700475906949600117377521
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:ec:0c:e8:4e:a6:aa:48:12:8d:cb:34:e2:74:bd:e7:85:b8:63:0d
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 22:33:92:b2:2f:3a:3b:07:45:e5:ca:8b:46:7a:69:aa:bc:c3:9c:6b
Fingerprint (sha256): 40:d0:b2:de:c7:c4:82:e8:31:1f:a7:b2:95:31:ab:2a:46:44:27:96:ca:4f:e5:1c:75:11:64:20:15:eb:8e:5b

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.sc.or.kr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sc.or.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sc.or.kr
sc.or.kr

Other certificates including the domain name sc.or.kr

(limited to 100 certificates)
san-15-s12.tlsprovisioning.exacttarget.com
sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
*.hullaro.com
www.inrelation.no
www.itcc.li
happykidsyoutube.sc.or.kr
*.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
*.hullaro.com
san-15-s12.tlsprovisioning.exacttarget.com
kulxtreme.ga
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
*.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
truepay.app
*.sc.or.kr
100words.sc.or.kr
*.hullaro.com
*.hullaro.com
*.sc.or.kr
vod.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
*.hullaro.com
san-15-s12.tlsprovisioning.exacttarget.com
*.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
sharenting.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
malibubrandworld.com
*.sc.or.kr
dashboard.kritsnam.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
*.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
*.hullaro.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
*.hullaro.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
4b677a73.dev
happykidsyoutube.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
100words.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
*.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com
san-15-s12.tlsprovisioning.exacttarget.com
*.hullaro.com
*.sc.or.kr
happykidsyoutube.sc.or.kr
*.sc.or.kr
*.sc.or.kr
san-15-s12.tlsprovisioning.exacttarget.com

Certificate

The complete raw certificate details for *.sc.or.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3V206dpJ0q6be3ZUfbj
//X7pBbrKaK6Z7ST9xO7ql+10oI2WHaA9ZHY0BVe1Sunj0Ai2dIAQYOipciW+83+
1TJ2iE2T2t6qKL0hCLEHAv+AnEqrLP/r2bubMylzM7f1rpVxU3gpUd5mE1IKM8TU
yQzuPl5NbkRZ6Qk++HIqGQnRstgyG8upmVY5m1o4tTfb13/H8Ja0syUmIXhEalOe
S3bd1eOaaSQFQvTQX06AQ6wkIYHn5ISXYJx03UoNw1zj6ORp338ht92S0ULF8FAe
/l+R7IXEUpI+4zxkwz9/TY3ZIP/96APV/aqT3QzPDSGapqt7DhzQVU8S/finL1RK
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20616935793113700475906949600117377521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mapo-gu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Save the Children Korea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sc.or.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23664486768288906153423163002337326697440421468162132586317784783344789896336989676444144498257375776932146634593724179922340478226515820318470049527048293998569995681813702835807261285937506558606383739440397085444122094099601321977742874179204994862544882132134695109372137167228381662896456310224805102674749062093073895777636644702070533563440761699829705229236129262514105784604201857358722889147993519859152016952399124830816697738096537913854980520825102323510737691713854925743727782398970317327441649384118968800617794857786125971482352727940763221659531910609122077538043490603521060362898681552531373705889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bec0ce84ea6aa48128dcb34e274bde785b8630d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sc.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sc.or.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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