press.ajou.ac.kr

Issued by R3

About this certificate

This digital certificate with serial number 04:d8:45:df:de:72:da:21:97:09:98:8f:17:6e:1f:e6:d1:be was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=press.ajou.ac.kr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:45:df:de:72:da:21:97:09:98:8f:17:6e:1f:e6:d1:be
Serial Number (int): 422043014107666758033620459953888902435262
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 19:37:fc:c9:2f:b7:9d:66:fc:2d:5c:5f:1d:b7:dd:c4:c3:58:42:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:3b:cd:21:f9:5d:0d:14:0c:ab:6b:4b:4d:0c:55:ee:48:2a:9d:49
Fingerprint (sha256): 53:d9:55:21:c9:94:ea:c5:9e:4a:15:d6:4a:e9:34:67:87:3d:0f:75:d6:53:8a:2b:5b:1b:c0:65:3a:38:0f:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate press.ajou.ac.kr

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for press.ajou.ac.kr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.press.ajou.ac.kr
cms.press.ajou.ac.kr
m.press.ajou.ac.kr
press.ajou.ac.kr

Other certificates including the domain name ajou.ac.kr

(limited to 100 certificates)
startup.ajou.ac.kr
m.ecoleader.or.kr
cge.ajou.ac.kr
startup.ajou.ac.kr
spl.ajou.ac.kr
job.ajou.ac.kr
spl.ajou.ac.kr
bitlab.ajou.ac.kr
winningthedebt.com
eclass2.ajou.ac.kr
startup.ajou.ac.kr
pplajouuniv.ajou.ac.kr
portfolio.ajou.ac.kr
dcoll.ajou.ac.kr
mb.ajou.ac.kr
kwon.ajou.ac.kr
startup.ajou.ac.kr
tnrc.ajou.ac.kr
wise.ajou.ac.kr
nfml.ajou.ac.kr
nfml.ajou.ac.kr
*.ajou.ac.kr
wise.ajou.ac.kr
wise.ajou.ac.kr
lincplus.ajou.ac.kr
pplajouuniv.ajou.ac.kr
bitlab.ajou.ac.kr
comp.ajou.ac.kr
wise.ajou.ac.kr
cmcm.ajou.ac.kr
bitlab.ajou.ac.kr
softlab.ajou.ac.kr
mb.ajou.ac.kr
startup.ajou.ac.kr
wise.ajou.ac.kr
labor.ajou.ac.kr
lincplus.ajou.ac.kr
dmcr.ajou.ac.kr
*.ajoumba.ac.kr
labor.ajou.ac.kr
spl.ajou.ac.kr
bizpsych2.ajou.ac.kr
nfml.ajou.ac.kr
eirb.ajou.ac.kr
pplajouuniv.ajou.ac.kr
aeislab.ajou.ac.kr
tancvml.ajou.ac.kr
kiuri.ajou.ac.kr
mb.ajou.ac.kr
pplajouuniv.ajou.ac.kr
cmcm.ajou.ac.kr
econseminar.ajou.ac.kr
lincplus.ajou.ac.kr
mb.ajou.ac.kr
startup.ajou.ac.kr
kwon.ajou.ac.kr
winningthedebt.com
kwon.ajou.ac.kr
comp.ajou.ac.kr
comp.ajou.ac.kr
csdl.ajou.ac.kr
eirb.ajou.ac.kr
bizpsych2.ajou.ac.kr
imdp.ajou.ac.kr
pplajouuniv.ajou.ac.kr
kwon.ajou.ac.kr
pplajouuniv.ajou.ac.kr
library.ajou.ac.kr
suh.ajou.ac.kr
icas.ajou.ac.kr
pplajouuniv.ajou.ac.kr
ics.ajou.ac.kr
startup.ajou.ac.kr
bizpsych2.ajou.ac.kr
pplajouuniv.ajou.ac.kr
labor.ajou.ac.kr
comp.ajou.ac.kr
sslab.ajou.ac.kr
wise.ajou.ac.kr
dmcr.ajou.ac.kr
press.ajou.ac.kr
startup.ajou.ac.kr
medlib.ajou.ac.kr
dijkstra.ajou.ac.kr
nfml.ajou.ac.kr
econseminar.ajou.ac.kr
softlab.ajou.ac.kr
comp.ajou.ac.kr
icas.ajou.ac.kr
comp.ajou.ac.kr
eirb.ajou.ac.kr
wise.ajou.ac.kr
eclass2.ajou.ac.kr
*.ajou.ac.kr
job.ajou.ac.kr
mpp.ajou.ac.kr
pplajouuniv.ajou.ac.kr
m.ecoleader.or.kr
dmcr.ajou.ac.kr
labor.ajou.ac.kr

Certificate

The complete raw certificate details for press.ajou.ac.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422043014107666758033620459953888902435262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 05:19:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 05:19:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'press.ajou.ac.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 963386140682401934921123957420583703983259717299995302602514812665913711745969760843831035861541782378544745569589353208276871389272426718143309035063012071564470559802291816705155556951711920541112944214712650129816968665332703273834487204323085311896541583064547028664095437525057910212452466678334098581621342537228949076525025841822938285403329373115206043650568590441317890930325430068766624386467008031633134979281713255134594317226912518934965222242516553743907520434779563765315662191144192298467634128540913091338371319065117098418875474597506195553459545829873139898201954711745731309891930692649997224626116348599854675830595136333771593944778386083691484248896410482988667677324961188626340610163438466200341316799990966945477798898114379626897118940127964742802759346948209483473867783957882810901603830027179604245924978127366881416044340339471612337605006144280138060714654413356632352737383905362141263402559103957690415252421380141872743551285201873982594265672070339366246768691430118351492421304665320864993044598358890914382271817208776748660582220016924670609827138831287253520314586956102106305142283626088616088017411730567503992813875667121256999746650450937057829248774805020669012463903372471254466817022587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1937fcc92fb79d66fc2d5c5f1db7ddc4c3584266
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.press.ajou.ac.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.press.ajou.ac.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.press.ajou.ac.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.ajou.ac.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7b945995000004030046304402202720e0de7595e74b0ee7eabcc515352c93d27eedaaf8f7c338d4eb9f7686038e0220724c7cccaaa9e102a8ff0f7c68e277af071206c1d900d2cd2886b7761511d636007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c7b945b8c000004030046304402204f281931103ff2cb3dfdd39aebd88509d9fb1cca21920fe9f12955b52eb377200220675acbfde355114295d86a64dd45bf83cceac82af04636460e5d8c27c9dab323
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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