cs.kgac.gov.kw

- PWC TECHNOLOGY FOR COMPUTERS CO. WLL -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 09:9c:cf:ac:db:2d:65:c7:06:fb:12:06:98:37:21:80 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PWC TECHNOLOGY FOR COMPUTERS CO. WLL

Organization: PWC TECHNOLOGY FOR COMPUTERS CO. WLL
Locality: KUWAIT
Country: KW

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:9c:cf:ac:db:2d:65:c7:06:fb:12:06:98:37:21:80
Serial Number (int): 12777262425859683758605928609328079232
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 67:0d:7b:a3:b1:f9:dd:71:8a:bf:85:a0:47:e5:ef:81:49:64:53:22
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 5a:70:5c:82:ea:c9:bd:47:01:cb:0d:ed:9b:65:81:c7:47:8c:dc:05
Fingerprint (sha256): d0:75:ce:31:bb:91:f0:19:12:34:0b:47:13:2c:74:4b:86:c6:bd:e8:31:5d:58:fd:2a:0b:23:ec:6c:d2:89:44

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate cs.kgac.gov.kw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cs.kgac.gov.kw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cs.kgac.gov.kw

Other certificates including the domain name kgac.gov.kw

(limited to 100 certificates)
*.kgac.gov.kw
cspayments.kgac.gov.kw
cs.kgac.gov.kw
cspaymentstest.kgac.gov.kw
tsslm.kgac.gov.kw
cspayments.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cspayments.kgac.gov.kw
tsslm.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
ts.kgac.gov.kw
ts.kgac.gov.kw
*.kgac.gov.kw
*.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cspayments.kgac.gov.kw
*.kgac.gov.kw
tsslm.kgac.gov.kw
*.kgac.gov.kw
ts.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
tsslm.kgac.gov.kw
cs.kgac.gov.kw
ts.kgac.gov.kw
*.kgac.gov.kw
cs.kgac.gov.kw
*.kgac.gov.kw
gcspayments.kgac.gov.kw
cspayments.kgac.gov.kw
cspaymentstest.kgac.gov.kw
ts.kgac.gov.kw
cspayments.kgac.gov.kw

Certificate

The complete raw certificate details for cs.kgac.gov.kw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v+9PFpBxz994fdFd40/
mxA7NqT0T7GIIlNpwSId3IMXjX7ddR6nsEPD9gNQYnLcGR4/dS1U+/3tCuxQQ/CM
nAm/GAE2n1gtV7v2C+6bfLncUFbdTmB7Z4pZGIvuelm9c2AgCqabDdRrn+2LNyFC
7d8jDOs5S1zgOPF6xwm6KiHgaqrLNzgSRDWLZDGrbx0UpsIpm0HGscVTPUZd9QgA
/1Hopmeg4R7ybdIi8iFY4eFgAZ9ArNaNvBoZvM2UF8QkRiBakfgFD0ZIbRwuWqv6
xWRodoDsiKkJyRCzN38dbM1v9rwIVuKonjxKEj6kHLCkHxcKa+t5awT3Wn8mObDH
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12777262425859683758605928609328079232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KUWAIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PWC TECHNOLOGY FOR COMPUTERS CO. WLL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cs.kgac.gov.kw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26636153743628879432954705048121682680452315576909766623081537139656127640673643881367027511779558585601033188023231834467928704138688108728886505404408214946931106689255048418402944448774395033219829184541198287894783895202322899007927273627735008502223117674933959124279875897121761251200422785244109159440194771426987376805207816192732281451117347926451565774250510520384733135756777027051522756844321779218255874113667321889128141695246591905288384542384405305652239351949363803557083689510710890136992526712648507825511682995202611872924310032400370273314549839878858436613204618582007441267922688379800270194667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							670d7ba3b1f9dd718abf85a047e5ef8149645322
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cs.kgac.gov.kw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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