m.health.chosun.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 0f:9a:1c:a7:c9:6c:e0:fc:29:85:c6:5c:02:bb:b5:27 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=m.health.chosun.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:9a:1c:a7:c9:6c:e0:fc:29:85:c6:5c:02:bb:b5:27
Serial Number (int): 20738614853898257101539474749607621927
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:0f:f8:a2:43:e9:21:93:13:8a:57:74:66:8a:75:65:3e:7f:c8:e5
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 3e:a7:3f:7b:3a:5c:1d:84:4d:be:32:25:ba:77:4b:ed:a1:12:91:51
Fingerprint (sha256): 58:40:e9:c7:f1:3b:14:d8:e7:8c:eb:0c:9f:11:c1:94:8d:80:71:ec:c8:7e:bf:ea:97:5f:ac:3e:2c:ea:05:3a

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate m.health.chosun.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for m.health.chosun.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

m.health.chosun.com

Other certificates including the domain name chosun.com

(limited to 100 certificates)
monthly.chosun.com
bemil.chosun.com
membership.chosun.com
scoop.chosun.com
monthly.chosun.com
*.chosun.com
m.biz.chosun.com
marathon.chosun.com
intern.chosun.com
cn.chosun.com
woman.chosun.com
monthly.chosun.com
economyplus.chosun.com
*.chosun.com
m.health.chosun.com
bbs.chosun.com
woman.chosun.com
bbs.chosun.com
*.chosun.com
morningplus.chosun.com
marathon.chosun.com
*.chosun.com
tpodev.chosun.com
scoop.chosun.com
m.health.chosun.com
camp.chosun.com
weekly.chosun.com
m.health.chosun.com
m.pet.chosun.com
sso1.chosun.com
seniorins.chosun.com
marathon.chosun.com
chosun.web.arc-cdn.net
topclass.chosun.com
it.chosun.com
*.chosun.com
health.chosun.com
morningplus.chosun.com
economyplus.chosun.com
sso1.chosun.com
membership.chosun.com
economyplus.chosun.com
economy.chosun.com
mindgil.com
monthly.chosun.com
cnpm.chosun.com
m.woman.chosun.com
cnpm.chosun.com
www.schoolswillrockyou.co.uk
intern.chosun.com
intern.chosun.com
itjapan.chosun.com
weekly.chosun.com
seniorins.chosun.com
weekly.chosun.com
m.woman.chosun.com
walk.chosun.com
etest.chosun.com
chosunbiz.web.arc-cdn.net
chosunbiz.web.arc-cdn.net
economyplus.chosun.com
monthly.chosun.com
economyplus.chosun.com
topclass.chosun.com
visit.chosun.com
link.chosun.com
pub.chosun.com
golf.chosun.com
economyplus.chosun.com
weekly.chosun.com
chosunbiz.web.arc-cdn.net
chosunbiz.web.arc-cdn.net
tpodev.chosun.com
economyplus.chosun.com
archivesnews.com
cnnews.chosun.com
m.woman.chosun.com
seniorins.chosun.com
*.chosun.com
woman.chosun.com
m.health.chosun.com
m.woman.chosun.com
biz.chosun.com
billing.chosun.com
weekly.chosun.com
monthly.chosun.com
san.chosun.com
m.health.chosun.com
topclass.chosun.com
it.chosun.com
scoop.chosun.com
appxfree.com
*.chosun.com
bbs.chosun.com
etest.chosun.com
cnnews.chosun.com
tpodev.chosun.com
chosunbiz.web.arc-cdn.net
woman.chosun.com
topclass.chosun.com

Certificate

The complete raw certificate details for m.health.chosun.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i8klCdump3Z6niL6p22
0mNQQHOCNgyiYiMdx+gap7gVGNhe+2WPC/KBVcwFqDnIUpQx0OGvkPhIHJOQRVE5
voUzW4r5T7+X3OP4r6xbKRvDVKvrfDbkz9Zg3Yrx4BNxA5wppJh7MIIvTJQ7jzLF
Y67hCwclAwphEdvxbQf97genBuyFNpgW3OBd1TiVOKZsYUMW+02XxB6pgrtkxIDg
ZoG0l3N+LdRWL3TBx3YObN9BG1zGSYgRUEcMnk+UMeajyFQSD4l/7SS4X5bMhpYX
vJX0Qn1u/x6h7R5EAoPLqotnHwHEn7PRQt3luGoWjQpWeyKzv4JbIws6MVefz2wS
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20738614853898257101539474749607621927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'm.health.chosun.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28048150725808004016513718711246662797020263302634305594531283555431633758015861537026663349044298827343639018804611355938160984127286945011497490645420821300642000380769372507405919396932680422054792128665029519291465994366699309262334814339394496584114135477662393079512872698413954883981406118914709632969983455189976638920613901616626416157596985691446177414171343472836741343329353830668735760275323957981571125265633550671525555681423457983674438658309888264049138431141483325558758622727505584117165507980405482526325976161093137494091636593855367606307875051163268875429842824733587488101986415805542681023051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b90ff8a243e92193138a5774668a75653e7fc8e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.health.chosun.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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