weekly.chosun.com

Issued by R3

About this certificate

This digital certificate with serial number 04:15:23:b3:e1:6f:4e:da:70:a7:eb:14:c4:0f:3a:47:ae:51 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=weekly.chosun.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:15:23:b3:e1:6f:4e:da:70:a7:eb:14:c4:0f:3a:47:ae:51
Serial Number (int): 355642530405731734878230124459063947800145
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:ca:98:8d:51:d8:93:5b:8c:2d:93:17:f0:91:d5:78:f7:f1:28:68
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 19:ac:9c:52:6e:95:0e:33:23:29:0b:26:53:ce:80:48:2f:96:33:6b
Fingerprint (sha256): 5e:de:54:a5:04:a7:99:c5:4d:5f:36:9b:87:46:bc:af:dc:0e:d5:36:d8:aa:b2:3d:04:16:75:c8:21:20:f2:51

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate weekly.chosun.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for weekly.chosun.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.weekly.chosun.com
cms.weekly.chosun.com
m.weekly.chosun.com
slv.weekly.chosun.com
weekly.chosun.com

Other certificates including the domain name chosun.com

(limited to 100 certificates)
monthly.chosun.com
bemil.chosun.com
membership.chosun.com
scoop.chosun.com
monthly.chosun.com
*.chosun.com
m.biz.chosun.com
marathon.chosun.com
intern.chosun.com
cn.chosun.com
woman.chosun.com
monthly.chosun.com
economyplus.chosun.com
*.chosun.com
m.health.chosun.com
bbs.chosun.com
woman.chosun.com
bbs.chosun.com
*.chosun.com
morningplus.chosun.com
marathon.chosun.com
*.chosun.com
tpodev.chosun.com
scoop.chosun.com
m.health.chosun.com
camp.chosun.com
weekly.chosun.com
m.health.chosun.com
m.pet.chosun.com
sso1.chosun.com
seniorins.chosun.com
marathon.chosun.com
chosun.web.arc-cdn.net
topclass.chosun.com
it.chosun.com
*.chosun.com
health.chosun.com
morningplus.chosun.com
economyplus.chosun.com
sso1.chosun.com
membership.chosun.com
economyplus.chosun.com
economy.chosun.com
mindgil.com
monthly.chosun.com
cnpm.chosun.com
m.woman.chosun.com
cnpm.chosun.com
www.schoolswillrockyou.co.uk
intern.chosun.com
intern.chosun.com
itjapan.chosun.com
weekly.chosun.com
seniorins.chosun.com
weekly.chosun.com
m.woman.chosun.com
walk.chosun.com
etest.chosun.com
chosunbiz.web.arc-cdn.net
chosunbiz.web.arc-cdn.net
economyplus.chosun.com
monthly.chosun.com
economyplus.chosun.com
topclass.chosun.com
visit.chosun.com
link.chosun.com
pub.chosun.com
golf.chosun.com
economyplus.chosun.com
weekly.chosun.com
chosunbiz.web.arc-cdn.net
chosunbiz.web.arc-cdn.net
tpodev.chosun.com
economyplus.chosun.com
archivesnews.com
cnnews.chosun.com
m.woman.chosun.com
seniorins.chosun.com
*.chosun.com
woman.chosun.com
m.health.chosun.com
m.woman.chosun.com
biz.chosun.com
billing.chosun.com
weekly.chosun.com
monthly.chosun.com
san.chosun.com
m.health.chosun.com
topclass.chosun.com
it.chosun.com
scoop.chosun.com
appxfree.com
*.chosun.com
bbs.chosun.com
etest.chosun.com
cnnews.chosun.com
tpodev.chosun.com
chosunbiz.web.arc-cdn.net
woman.chosun.com
topclass.chosun.com

Certificate

The complete raw certificate details for weekly.chosun.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 355642530405731734878230124459063947800145
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-24 18:06:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 18:06:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'weekly.chosun.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820414814502620742169184460981992875901624281270302125147590366884534287809381847936572898795008602283798476829512268286324143292128537420504867664558696067949418140201069969981727722866540988180893243942202916207426063016077387844505209956971072235253294158487965795500677329468279669785578041391110498366660563661242628154591833103804831782742486934946839446736337321189670177892503645241609747154812898824155486393458869382614586304285944969915489121221883774346548579861839165658950864312193110701375493891656496236009735907606247605114535468102510309289005879743690864046441022509529981186151033992617494556368592945561964796270719371644852107678958296139000565535271246648059047914106007685700867733520692458392005386841512619151797682066971266338167526318622056188033830433414006325853322161793974059074963315970241340926881076098065195574759081346188786841876243193126334878319813087036597552258867818860857411554505531592219383402309639934656839745747710326974511907471874057150038506825137335443594997802590757813600182376031737732428331354789273633087937317120240259147939810543213418803586733861935005149280675122652474110218212572676252477564407879872215151460295864362754862197326038551322227379320292016532916523304577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13ca988d51d8935b8c2d9317f091d578f7f12868
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.weekly.chosun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.weekly.chosun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.weekly.chosun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slv.weekly.chosun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekly.chosun.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001854587325f0000040300473045022100a366ace6ec01c1d6258a3095eb1d4e17e2f2365a0f8ef3371d7eaf9d9a1ffefd0220375ebd044ef9013e1b98c6b20cc3338083f4c2f763c2c8d8661d3de405f313c5007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018545873272000004030046304402203cf140faca6a5825de6359ee4c035ad525d963fe6a427e11fec1187626ed3b1b0220392c165ab289377edf0198ed3356a32da976069b38dd9d70d16058cd6f91cd03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b830ea588d047f39d3fff33f42b5a813d2352da50ef091fd55b65d0732ea7ced716e9bc73fc807992af7ecf925f08057d2e618aae231926feaf20f7cda6c812dced17d22af20700d8c71d30b843659a6e603c99bd18e7e7cb5ad4eb0091df18e7d801e815fba8b44395bab426fd2c6a979b54a4b5f07f04bea4d0823a6dfe5cbd049f441fd8a9d7f424cca0b6f8dbbe4c87125ce5e44a5cecf0d05cd2762416494b0483c55dcca7237e660e666fb22863c5ffa6b93f9f3767d1919629eaa10781cf7d7e6bb3ad4f678492de050708c20ed75bfa515d41bcf6a5da4b3ba2f71c20018b0ea0e2dbc22d54f25247ae04749b30c857ce4bd7f091e66ad17462ff3d