res.gdoc.go.kr

- Ministry of the Interior and safety -

Issued by CA131100001

About this certificate

This digital certificate with serial number 21:73:26:8f:05:fd:fb:ae:3b:c2:0c:fe:5c:69:28:9b:9d:d6:70:5f was issued on by Government of Korea.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment ContentCommitment DataEncipherment DigitalSignature] (00001111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ministry of the Interior and safety

Organization: Ministry of the Interior and safety
State / Province: Sejong
Locality: Sejong-si
Country: KR

Government of Korea

Organization: Government of Korea
Organization unit: GPKI
Country: KR

This certificate has expire since

Certificate Details

Serial Number (hex): 21:73:26:8f:05:fd:fb:ae:3b:c2:0c:fe:5c:69:28:9b:9d:d6:70:5f
Serial Number (int): 190964640070226498317682095894240565914641002591
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 11:77:db:a4:09:ff:4c:23:9c:92:4f:97:9b:ea:33:0d:51:17:7c:9f
AuthorityKeyId: 92:a4:78:17:b1:aa:2f:19:d8:2b:3f:b9:b3:2b:23:15:83:d5:97:35

Fingerprint (sha1): 6d:dd:f0:59:d9:41:e4:8c:bc:98:6e:dc:f4:a9:81:6d:e1:7a:b3:54
Fingerprint (sha256): 8b:27:57:c2:78:3a:fc:98:d6:00:85:8e:02:da:e3:3e:7c:55:6d:8a:96:23:65:b2:16:c4:10:4a:0a:1b:8d:c6

Issuing Certificate URL: http://ssl-crl.gpki.go.kr/CA131100001.cer

Revocation information

OCSP Server: http://ssl-ocsp-gov.gpki.go.kr:8100
CRL Distribution Point: ldap://cen.dir.go.kr:389/cn=crl3p1dp9,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary
CRL Distribution Point: http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp9.crl

Check the revocation status for certificate res.gdoc.go.kr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for res.gdoc.go.kr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

res.gdoc.go.kr

Other certificates including the domain name gdoc.go.kr

(limited to 100 certificates)

Certificate

The complete raw certificate details for res.gdoc.go.kr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooGxv7sxmJU+NxbeuGZR
jzkjxXsBP0XIqCWVyRbbM4aUdCrfZ/6YCVSI/09ExIHH8icElRYwuzn0cLhx14a9
HTdLIGKMGbcRiOl6fU+2979bPyqSxB/7PRMfSnKu4NmUT2O3CSuicVUmxAIv9SYW
Gp1TQbmS+M/2E6nxKtMCKzj/n2bk2GMXdyBN4rujcqKWjpCucaJU3SnQuScDEcw6
CaiWOb7LUz5ArgcWbXq/S7IUSguyNiOjS+GJ2YihnsXDKX+4OpaEIlq4ueIvINW4
VabgSlJVoOuDD6eOYIX3+mkw9TrbxHpYPWIy/XEAQ7E8HlCfUE/9c5EzZh92Rkpk
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190964640070226498317682095894240565914641002591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government of Korea'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GPKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA131100001'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 05:59:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sejong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Sejong-si'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ministry of the Interior and safety'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'res.gdoc.go.kr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20514560063152760290930519564962790045401059004430495152980951335512155013925768055452778595368498951917186412111847554128173758253367450176607456135585086072903058043773001693354760451284570500644116733154431207044432707236417206661378277140360398548090977829492271425650802714569828772936984624510726879666657858829034201760802272108512737286024908764015046396236588504052792808115301099740860427666286771880305754107704308993909280014080081250003499236007701372031565078304192981688412009780495980758552912690166120423211457105584356018580066070717518478794285942942746615812656355987791204187542840587636123001989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92a47817b1aa2f19d82b3fb9b32b231583d59735
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1177dba409ff4c239c924f979bea330d51177c9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.410.100001.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.gpki.go.kr/cps.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.gdoc.go.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://cen.dir.go.kr:389/cn=crl3p1dp9,cn=CA131100001,ou=GPKI,o=Government of Korea,c=KR?certificateRevocationList;binary'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/crl/CA131100001/crl3p1dp9.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-ocsp-gov.gpki.go.kr:8100'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ssl-crl.gpki.go.kr/CA131100001.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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