*.cheil.com

- Cheil Worldwide Inc. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:28:a5:1d:0a:3e:96:5a:0f:11:e3:42:82:63:47:8f was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cheil Worldwide Inc.

Organization: Cheil Worldwide Inc.
State / Province: Seoul
Locality: Yongsan-gu
Country: KR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:28:a5:1d:0a:3e:96:5a:0f:11:e3:42:82:63:47:8f
Serial Number (int): 2869496764283053805529429119655430031
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 9b:6c:31:cc:da:af:2b:0b:9d:b2:a6:b7:dd:0e:86:63:e9:cb:96:ff
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 7c:ac:56:72:c3:4b:d2:85:1a:3d:1c:aa:15:83:4c:42:f4:cb:76:47
Fingerprint (sha256): 43:aa:72:9f:ec:af:31:58:58:7e:dd:9a:6e:ff:d7:23:e0:0f:54:af:68:bf:92:f2:ad:42:2f:f9:b7:21:be:99

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.cheil.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cheil.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cheil.com
cheil.com

Other certificates including the domain name cheil.com

(limited to 100 certificates)
ps-ccr.cheil.com
*.cheil.com
ideaschool.cheil.com
ideaschool.cheil.com
webhard.cheil.com
m.ecoleader.or.kr
ideaschool.cheil.com
ideaschool.cheil.com
ideaschool.cheil.com
mail.cheil.com
www.e-assembly.or.kr
maileu.cheil.com
ps.cheil.com
ps.cheil.com
www.e-assembly.or.kr
ideaschool.cheil.com
ideaschool.cheil.com
*.cheil.com
www.mypoba.or.kr
webhard.cheil.com
ideaschool.cheil.com
www.cheil.com
*.cheil.com
ideaschool.cheil.com
mail.cheil.com

webhardeu.cheil.com
mail.cheil.com
ideaschool.cheil.com
ideaschool.cheil.com
webhard.cheil.com
*.cheil.com
ideaschool.cheil.com
ideaschool.cheil.com
webhard.cheil.com
ps.cheil.com
ideaschool.cheil.com
ps-sab.cheil.com
ideaschool.cheil.com
ps-ccr.cheil.com
*.cheil.com
*.cheil.com
mail.cheil.com
mailus.cheil.com
webhard.cheil.com
m.ecoleader.or.kr
*.cheil.com
image.samsungsds.com
ideaschool.cheil.com
ps-ccr.cheil.com
webhard.cheil.com
www.mypoba.or.kr
webhard.cheil.com
mdlab.cheil.com
m.ecoleader.or.kr
ideaschool.cheil.com
maileu.cheil.com
webhardeu.cheil.com
mail.cheil.com
www.ecoleader.or.kr
*.cheil.com
image.samsungsds.com
mdlab.cheil.com
image.samsungsds.com
ideaschool.cheil.com
ideaschool.cheil.com
m.hanaseri.co.kr

webhardam.cheil.com
ps.cheil.com
ukxsw1ee11129.cheil.com
ideaschool.cheil.com
mdlab.cheil.com
ideaschool.cheil.com
ukxls2ee11129.cheil.com
maileu.cheil.com
webhard.cheil.com
image.samsungsds.com
webhardeu.cheil.com
www.ecoleader.or.kr
www.ecoleader.or.kr

ideaschool.cheil.com
cheil.com
mail.cheil.com
www.e-assembly.or.kr
ukxls2ee11129.cheil.com
image.samsungsds.com
m.ecoleader.or.kr
mail.cheil.com
maileu.cheil.com
webhard.cheil.com
ideaschool.cheil.com
image.samsungsds.com
mailus.cheil.com
ideaschool.cheil.com
ps-ccu.cheil.com
m.ecoleader.or.kr
ideaschool.cheil.com
mdlab.cheil.com

Certificate

The complete raw certificate details for *.cheil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjzZBYvh/OurAuP+3mmb
P44j8gkHjlMIC2TfKAHl0Iwg/7VVpmo5fpNIfzUcTsHrI2/9PBfrqwz2OB9/LyJH
lgT4In1pPR90TkO7+jd52dKnh23jiSxOVUqHgaaxC7N6RtUgI2cNnhC3VOvgoo5w
pjWQY7qtGSFLFjWFfkFSJd+QFzxzQ8rW/Mfo9mxwj2SUOtlNmON0lKSu9YFrsrGk
jSEZw/0LbbYDkUSvJOIreyXzPIdYMKJASEhgrND/2avhEuQf6C/5qFAKGnK2WLGo
2eDxCjrMjmRka6uP9c5f5QDWu+voLB1p4exlRt04unc71/1KP5WYBRPJAeMrWn+e
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2869496764283053805529429119655430031
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Yongsan-gu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cheil Worldwide Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cheil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18460797664380137467959960461790975379100842826977526058441240649649270553384622526604294558113975428463139283133828384041499902670946404889729926681275405850728894387525470752300964404698795115694555170037636594393151778896250427531287776047286193375455992310728404642427312590945286814611166274819296079491069448559257749609374940915683943998672120856309202702277338309987370832366879306412457518900844190067754161742202189245304136967829292688975402602195283896428618896472246697301477875635598978045907310557021441055374168954516671330975086293035337713271192916693878773204706841684391063077121655672178340765279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b6c31ccdaaf2b0b9db2a6b7dd0e8663e9cb96ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheil.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001806a003883000004030046304402200cdb17d9d95c2004a78c51e739aedbf88f2ee4a679c8081d39bdcab1b076db6902201d442aba31e1ebbedca73e248f9cc66c79754bc76645a137215a13f503b2a83800770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c000001806a0038880000040300483046022100fb4a0e00b16dc9556e76ccf4d0408b3d143ebe2625b8328441df66a93f95ceb9022100c8dbd68ce724bd89d8a93cf473fb3b2a2782c7188c26de6e5c7a01caada7bb92007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001806a0038a80000040300483046022100e3d2937176267bd2b3ee421943d5a8d4d746891aca55d6084d1caeaaa8f4161d022100bb9eb34561a46f79e0cc42a0363324c8a59810cf234c79d891987ced15f2da74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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