cs.kgac.gov.kw

- The Public Warehousing Co. (K.S.C.) -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 04:d8:15:c1:54:ec:e2:95:8b:26:14:95:c0:8b:43:14 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Public Warehousing Co. (K.S.C.)

Organization: The Public Warehousing Co. (K.S.C.)
Locality: Kuwait
Country: KW

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:15:c1:54:ec:e2:95:8b:26:14:95:c0:8b:43:14
Serial Number (int): 6438889352503345529312631928946115348
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 96:91:fc:75:1b:6f:3c:e8:21:06:ae:5e:10:cf:c3:ae:cd:f7:8a:ff
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 16:1a:10:3d:26:35:42:ba:ed:73:fb:cb:cb:0e:23:15:4d:65:d0:b6
Fingerprint (sha256): 41:cf:05:7a:e0:cf:88:aa:1f:f3:2d:76:30:e2:f5:63:10:51:5b:94:33:75:d1:e1:2e:fe:e8:6d:2c:80:7c:43

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate cs.kgac.gov.kw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs.kgac.gov.kw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs.kgac.gov.kw

Other certificates including the domain name kgac.gov.kw

(limited to 100 certificates)
*.kgac.gov.kw
cspayments.kgac.gov.kw
cs.kgac.gov.kw
cspaymentstest.kgac.gov.kw
tsslm.kgac.gov.kw
cspayments.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cspayments.kgac.gov.kw
tsslm.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
ts.kgac.gov.kw
ts.kgac.gov.kw
*.kgac.gov.kw
*.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cspayments.kgac.gov.kw
*.kgac.gov.kw
tsslm.kgac.gov.kw
*.kgac.gov.kw
ts.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
tsslm.kgac.gov.kw
cs.kgac.gov.kw
ts.kgac.gov.kw
*.kgac.gov.kw
cs.kgac.gov.kw
*.kgac.gov.kw
gcspayments.kgac.gov.kw
cspayments.kgac.gov.kw
cspaymentstest.kgac.gov.kw
ts.kgac.gov.kw
cspayments.kgac.gov.kw

Certificate

The complete raw certificate details for cs.kgac.gov.kw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB50eyfTVBfqbZvdF+jO
u7nLbeQo+F0Lcy58JQF3a3sk4iNlMPwxOOVDFGnoMFYu3pPPoEJ5O8uVvrKwRUQY
39GZIg9FTfPbcHT3ke8Pu1Nvneoyp99IzehFZDEys6SFYbOUOAE6f20WJdrZkFKA
+PksF4KmXqUswvqQpQizDqJXXc8pSHqj0royKbszL3BKTBLzDCgVTVFTIVYqAdYu
urxPgZCXuUQZzB89u7BQjlQYJpfH0bvjVtQkPxJ+mxkeA4td/9EFMrXUS+7dOBmE
pDpCFslFxZdqkSIKuzvuktv8rjOVkezrpNPIdMVrBMtUG3O0gWu3NgxWEe+UqU0N
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6438889352503345529312631928946115348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuwait'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Public Warehousing Co. (K.S.C.)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs.kgac.gov.kw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22232959596325353210007621251919444841928577694875467030709145930784486978101649547774371148887831795551017031865940687858675118515998191454279620948852303780477107571413532018971011339352802855902243296020503808584929267384023001326219864642125110370239457469414397697220343492565939467760657445335583191375409328678439833347457828691755297502649137682888293421578843468591540091855054072204130325930839040664310732578697743326182772134998267631201359877834539614746864140113926627893046697532995084591915820068411177686189990587553164672787792019593810624408619079497938542618834711103612929368379777678072571825527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9691fc751b6f3ce82106ae5e10cfc3aecdf78aff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.kgac.gov.kw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000161fbc9e4d40000040300483046022100df4d1b630fa1b07835c1806cd8aa429260acc6b91e26ba24ee83c5ed4fb19c35022100dd0ad8e5078c9e5d94f3c8e0759dc59c4c25d39c9054cdc5a0f54c30d1a2cc580075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000161fbc9e61c00000403004630440220654c7a9152448229cc60f40a858bc14c9c751c0547760038dcf32ee22a696b970220102629c006ed5dd8557ec6aa5f715fdd6b803ddc6caa5adc46a1e651652550da
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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