ssudorm.ssu.ac.kr

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 50:7e:2a:95:dd:c8:cd:22:79:df:4a:62 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssudorm.ssu.ac.kr

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 50:7e:2a:95:dd:c8:cd:22:79:df:4a:62
Serial Number (int): 24911326542917445107499092578
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8f:2d:7a:7f:8a:6c:34:e3:6f:d2:bf:46:da:f1:0b:98:c1:42:40:33
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 86:45:c6:f6:bd:1c:54:64:0c:07:fa:c9:26:44:e0:5d:cb:93:8f:b1
Fingerprint (sha256): 83:fa:50:e7:2f:d7:8e:7e:22:10:32:27:da:c8:d4:49:8a:fc:cc:29:87:eb:c6:4b:94:14:ea:a6:27:d3:20:7b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate ssudorm.ssu.ac.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssudorm.ssu.ac.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssudorm.ssu.ac.kr

Other certificates including the domain name ssu.ac.kr

(limited to 100 certificates)
oslab.ssu.ac.kr
ssl-i.nurimedia.net
bksit.ssu.ac.kr
research.ssu.ac.kr
robotics.ssu.ac.kr
ssl-i.nurimedia.net
*.ssu.ac.kr
oasis.ssu.ac.kr
csec.ssu.ac.kr
erclab.kr
oslab.ssu.ac.kr
oasis.ssu.ac.kr
myclass.ssu.ac.kr
oslab.ssu.ac.kr
iphak.ssu.ac.kr
ssl-i.nurimedia.net
*.ssu.ac.kr
anda.ssu.ac.kr
*.ssu.ac.kr
msec.ssu.ac.kr
ss.ssu.ac.kr
sw.ssu.ac.kr
oasis.ssu.ac.kr
tls.automattic.com
oslab.ssu.ac.kr
oslab.ssu.ac.kr
oslab.ssu.ac.kr
tls.automattic.com
ssl-i.nurimedia.net
ssl-i.nurimedia.net
ssudorm.ssu.ac.kr
lleoffice.ssu.ac.kr
robotics.ssu.ac.kr
*.ssu.ac.kr
ssl-i.nurimedia.net
tls.automattic.com
sw.ssu.ac.kr
anda.ssu.ac.kr
sso.ssu.ac.kr
ssl-i.nurimedia.net
ssl-i.nurimedia.net
anda.ssu.ac.kr
*.ssu.ac.kr
*.ssu.ac.kr
tls.automattic.com
lleoffice.ssu.ac.kr
ss.ssu.ac.kr
anda.ssu.ac.kr
ssl-i.nurimedia.net
robotics.ssu.ac.kr
lleoffice.ssu.ac.kr
anda.ssu.ac.kr
oslab.ssu.ac.kr
tls.automattic.com
soc.ssu.ac.kr
ssl-i.nurimedia.net
anda.ssu.ac.kr
anda.ssu.ac.kr
*.ssu.ac.kr
lleoffice.ssu.ac.kr
lleoffice.ssu.ac.kr
soc.ssu.ac.kr
bmil.ssu.ac.kr
oasis.ssu.ac.kr
anda.ssu.ac.kr
oasis.ssu.ac.kr
lle.ssu.ac.kr
anda.ssu.ac.kr
anda.ssu.ac.kr
anda.ssu.ac.kr
job.ssu.ac.kr
*.ssu.ac.kr
oasis.ssu.ac.kr
camp.ssu.ac.kr
ssudorm.ssu.ac.kr
*.ssu.ac.kr
anda.ssu.ac.kr
ssl-i.nurimedia.co.kr
anda.ssu.ac.kr
robotics.ssu.ac.kr
ssl-i.nurimedia.net
camp.ssu.ac.kr
robotics.ssu.ac.kr
anda.ssu.ac.kr
robotics.ssu.ac.kr
educamp.ssu.ac.kr
*.ssu.ac.kr
soc.ssu.ac.kr
robotics.ssu.ac.kr
ssl-i.nurimedia.net
robotics.ssu.ac.kr
sw.ssu.ac.kr
lleoffice.ssu.ac.kr
*.ssu.ac.kr
tls.automattic.com
lleoffice.ssu.ac.kr
oasis.ssu.ac.kr
*.openlink.ssu.ac.kr
bksit.ssu.ac.kr
educamp.ssu.ac.kr

Certificate

The complete raw certificate details for ssudorm.ssu.ac.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxOuAEnUkearJ8ti6a/0
gJCZzVeT92oKwFqpZhdB7WlXZKtF8Fy3Vjfpz28f6K+4D1RIlQQqij/7D2MwBAYZ
12wKJbK94qZhFQyGejgv1DHw45TTq+YSG73JOg1BFAgkdCYe8r8w39pRSod4MBUk
wgvyeim71yHbKMVvgvDove+z7/9U23RnL6f7+9jXpAcuzPm0xd7NTR8cdySCCud0
KaykXmu4/X/2ccuiiQf6kcYIEZkRharTzuAeYMf9BFqHDZZze/LyoUPZT3U2RwuF
9BSQCHOc0I5LWGE7Z4QL55qFTHKQGjL0T4goet8SiwjDdfDSA7yhpzKI8mVFRhx2
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24911326542917445107499092578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-18 09:06:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 09:06:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssudorm.ssu.ac.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25131127106010470670249906503142481822902630823974526478397912265487571737029730466811267750437903858764988693856831050550347271485737731738537377620913224958433899542685246750651502621042196078021990761350327932209386100821677161018109586884285708663911991288630141313758718886232268994373169648641360291253830792019586648914126023758045068950123716651204174327357049935786794794067888657181550557188624004917600909738800942153931358188363322044105935964538150515336998893120752923472353643960653479204205700845125137962325963207836423831341262776330410859312710035353251959091330104465733190627513196324615354087029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssudorm.ssu.ac.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f2d7a7f8a6c34e36fd2bf46daf10b98c1424033
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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