hubd.gdoc.go.kr

- Ministry of the Interior and safety -

Issued by CA131100001

About this certificate

This digital certificate with serial number 21:75:82:bf:16:63:6a:07:0b:9c:8c:a7:d4:a3:e8:3f:cd:35:ab:55 was issued on by Government of Korea.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment DataEncipherment DigitalSignature ContentCommitment] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministry of the Interior and safety

Organization: Ministry of the Interior and safety
State / Province: Sejong
Locality: Sejong-si
Country: KR

Government of Korea

Organization: Government of Korea
Organization unit: GPKI
Country: KR

This certificate has expire since

Certificate Details

Serial Number (hex): 21:75:82:bf:16:63:6a:07:0b:9c:8c:a7:d4:a3:e8:3f:cd:35:ab:55
Serial Number (int): 191017272246277201728435823195873026723752029013
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: e5:ac:92:c4:02:3c:96:ae:f3:42:71:b2:a6:f4:8a:8e:ab:6e:a3:82
AuthorityKeyId: 92:a4:78:17:b1:aa:2f:19:d8:2b:3f:b9:b3:2b:23:15:83:d5:97:35

Fingerprint (sha1): 54:fa:99:0d:62:b1:e9:93:73:22:17:4f:29:05:ef:92:fd:4c:c9:42
Fingerprint (sha256): 87:f9:4d:01:a6:07:de:3a:f5:72:b9:c1:4c:76:48:f7:ac:8c:5a:38:7e:7a:a5:e6:55:49:8c:f4:5d:4e:49:5e

Issuing Certificate URL: http://ssl-crl.gpki.go.kr/CA131100001.cer

Revocation information

OCSP Server: http://ssl-ocsp-gov.gpki.go.kr:8100
CRL Distribution Point: ldap://cen.dir.go.kr:389/cn=crl3p1dp9,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary
CRL Distribution Point: http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp9.crl

Check the revocation status for certificate hubd.gdoc.go.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hubd.gdoc.go.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hubd.gdoc.go.kr

Other certificates including the domain name gdoc.go.kr

(limited to 100 certificates)

Certificate

The complete raw certificate details for hubd.gdoc.go.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3mK9w7YGcHJb6/DD0MG
oPkP1BK6EPKVqFln0HKfuxQSxTx1jU1MaCDMTDPJ17Rrt/Es0Sf6y/iD4/YZgJH3
QcHAqa3zmOtiv2/SWKPig80Pl9i9bscmtseNlCx8LZoH/3eD3Dadih7i/AHd/+mP
gqfnDuLRwXlVpFTufv8pdEtsnrV4ixmr2u/0+7ZY4n3ccBmkZ27VVMmsAwNqNXkM
LQ0Oo7QlcgXcnsAhd7XhbkmKbuGcJUH20iF9JWKj75qMrsCnPYTGt4IMY9ADFMH7
owEbQwj3KXm0hIiUskbVhq+nbFPhaxnkc/jADVKjS476mFopOO+FjD75Y3sDjGZe
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 191017272246277201728435823195873026723752029013
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government of Korea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GPKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA131100001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 06:04:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sejong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sejong-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ministry of the Interior and safety'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'hubd.gdoc.go.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17102106174836049711117344884262716047935770784742161957483332820513309732785383504557136935055710280466879606546636745204863406703622680896480198706526528385386608917751093137227439476172784242355469879895285563150532071575180757692084954846646293955259976701376063635240956588192598659897865345323343422089854330778110025471331314860053418117643897530538650576266037713011523821448129449359118258144830491597606421092265498473319980736022814297645251627976862570735928182518292047531917337473107643608405159724332227913961750341189925810719553275492084847613253167145834079663733659201676062505948055628741333114589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92a47817b1aa2f19d82b3fb9b32b231583d59735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5ac92c4023c96aef34271b2a6f48a8eab6ea382
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.410.100001.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.gpki.go.kr/cps.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hubd.gdoc.go.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://cen.dir.go.kr:389/cn=crl3p1dp9,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp9.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-ocsp-gov.gpki.go.kr:8100'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/CA131100001.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f1d70429affd0d599813c3769f23ae5712b49186d10959a44bf30a9053ecea289915ea9169d5c5503013881f76e9bf568dec53127e51cd13b0a6e7bbd287ac443ee920a85a825f6eecc74c0591eccc54697ff1a4abbaa34c45fcea45b133f927b16cb86d33e8369529a015974bcec367f2a0ce0c9c03cab4b6be41343b87eba239074eb88bfe3dc719935c210723f50f8a319e00ff4259cda5b221ea8c591829cc006fd8f5c6f8f30c786e1638535781953a3e4572f0f806f86653fc0c22b7df71cc417e4b7136af503914e2a5bfbb473aac04ff51339089571033bc0e4201f0d3462bb4c75f05aa63d607fea61daa003d61fb2a725bf8ca2477a268955c8bb