*.cheil.com

- Samsung SDS Co., Ltd. -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 01:47:7e:1f:06:e5:44:30:83:83:c0:34:9c:ab:3e:41 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Samsung SDS Co., Ltd.

Organization: Samsung SDS Co., Ltd.
Organization unit: IT Team
State / Province: Seoul
Locality: Songpa-gu
Country: KR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:47:7e:1f:06:e5:44:30:83:83:c0:34:9c:ab:3e:41
Serial Number (int): 1700439114558062774658355593585835585
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 12:d8:4b:bd:c5:87:75:34:c7:5e:46:2a:aa:78:76:ca:08:56:9d:b6
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 8f:79:96:ef:86:40:4d:07:ee:4b:03:34:05:12:05:9d:94:5f:b2:54
Fingerprint (sha256): 50:8c:c5:1f:c4:6d:6b:10:77:27:d7:9e:9c:08:4a:9a:e9:b7:c8:0a:68:5d:8e:69:bb:ef:7b:c1:b5:fc:51:15

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.cheil.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cheil.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cheil.com
cheil.com

Other certificates including the domain name cheil.com

(limited to 100 certificates)
ps-ccr.cheil.com
*.cheil.com
ideaschool.cheil.com
ideaschool.cheil.com
webhard.cheil.com
m.ecoleader.or.kr
ideaschool.cheil.com
ideaschool.cheil.com
ideaschool.cheil.com
mail.cheil.com
www.e-assembly.or.kr
maileu.cheil.com
ps.cheil.com
ps.cheil.com
www.e-assembly.or.kr
ideaschool.cheil.com
ideaschool.cheil.com
*.cheil.com
www.mypoba.or.kr
webhard.cheil.com
ideaschool.cheil.com
www.cheil.com
*.cheil.com
ideaschool.cheil.com
mail.cheil.com

webhardeu.cheil.com
mail.cheil.com
ideaschool.cheil.com
ideaschool.cheil.com
webhard.cheil.com
*.cheil.com
ideaschool.cheil.com
ideaschool.cheil.com
webhard.cheil.com
ps.cheil.com
ideaschool.cheil.com
ps-sab.cheil.com
ideaschool.cheil.com
ps-ccr.cheil.com
*.cheil.com
*.cheil.com
mail.cheil.com
mailus.cheil.com
webhard.cheil.com
m.ecoleader.or.kr
*.cheil.com
image.samsungsds.com
ideaschool.cheil.com
ps-ccr.cheil.com
webhard.cheil.com
www.mypoba.or.kr
webhard.cheil.com
mdlab.cheil.com
m.ecoleader.or.kr
ideaschool.cheil.com
maileu.cheil.com
webhardeu.cheil.com
mail.cheil.com
www.ecoleader.or.kr
*.cheil.com
image.samsungsds.com
mdlab.cheil.com
image.samsungsds.com
ideaschool.cheil.com
ideaschool.cheil.com
m.hanaseri.co.kr

webhardam.cheil.com
ps.cheil.com
ukxsw1ee11129.cheil.com
ideaschool.cheil.com
mdlab.cheil.com
ideaschool.cheil.com
ukxls2ee11129.cheil.com
maileu.cheil.com
webhard.cheil.com
image.samsungsds.com
webhardeu.cheil.com
www.ecoleader.or.kr
www.ecoleader.or.kr

ideaschool.cheil.com
cheil.com
mail.cheil.com
www.e-assembly.or.kr
ukxls2ee11129.cheil.com
image.samsungsds.com
m.ecoleader.or.kr
mail.cheil.com
maileu.cheil.com
webhard.cheil.com
ideaschool.cheil.com
image.samsungsds.com
mailus.cheil.com
ideaschool.cheil.com
ps-ccu.cheil.com
m.ecoleader.or.kr
ideaschool.cheil.com
mdlab.cheil.com

Certificate

The complete raw certificate details for *.cheil.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYvZz6HUQaCxp2Gzt3fE
TcSSu1VY7g8MHfJN3xWYD2pe+WbvJKo+LJqjEFyYKkbllo3bxOQHEQL8GwyUBmHe
UrYAcXA95y32k+BHcG8fmb5agLX4H2K6I1H/O3MF/lVRjyXmIGmZ1cSJuaNGh/Y2
YdT3FjoeTBuhbngAmOBCVJOPGByVyXDQvtoW01/GqLC5I4qIGjijHN1gI30043hy
btOqdGah7Vri/FLcLaFOF4OcpQ1uDHHOD07a9oY8c2K6F8TIyGbusR5H9+Tg+chb
INqnSC5hTQYjEo4qvWc6TAnP2PyQGX5iBsqeGTfdl4pynNFP37NucQqQf9CyawmB
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1700439114558062774658355593585835585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Songpa-gu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Samsung SDS Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Team'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cheil.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25947815529872410032699384628331010133677610671265906011349099641839907941825852143328164822934423112258461141782864397410473798761942293125283372323137980300264442416616384632280046378214719086452559839390825924514630515999855421468608122488484768420694447600761591208455284275381150753279686230692341371489075060652962881551054985644780197489892624312451988136502685768052389179471736211321064941588184026318310085994911695100248774295846616667082882827061894686880795639202044723094482559885327922522975260960888003414370467874463557260451985087532302917660047599957072982602495076324825282970267445044001343373687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12d84bbdc5877534c75e462aaa7876ca08569db6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cheil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheil.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000169002da908000004030047304502201297df8cc99afd7b61d24b1c7743d474665dee088e16bf5e6aaa27da41d017af022100a93a11c2d93a154f7781a631da0ce02a00d693cc52e02d1942c7bcb4af7b7e5f0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000169002da9260000040300483046022100d3e5b51dfccb3be04f65117f0f5e25c59750bac45b18a777fa94de8ac20bbfe2022100c59e5c6f62de687c905d5a6ec3661b06731f498632ba0c9179d6ea3fa409f321
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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