ts.kgac.gov.kw

- PWC TECHNOLOGY FOR COMPUTERS CO. WLL -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 03:95:82:c7:4a:5c:85:13:20:f4:90:1a:81:8a:70:ec was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

PWC TECHNOLOGY FOR COMPUTERS CO. WLL

Organization: PWC TECHNOLOGY FOR COMPUTERS CO. WLL
Locality: Kuwait City
Country: KW

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:82:c7:4a:5c:85:13:20:f4:90:1a:81:8a:70:ec
Serial Number (int): 4763988721942992320909880771857772780
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 08:13:10:42:56:f0:24:98:83:aa:81:fb:c2:c3:df:ef:64:ca:40:c0
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 2f:a7:75:49:83:3e:58:6f:52:ac:4a:5b:75:d9:66:ab:15:49:d3:e4
Fingerprint (sha256): e7:cc:75:10:10:26:3c:4f:55:c5:23:5c:5f:83:c4:02:02:23:3c:7a:f6:fc:a4:2a:b4:7d:15:6f:91:92:82:49

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate ts.kgac.gov.kw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ts.kgac.gov.kw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ts.kgac.gov.kw

Other certificates including the domain name kgac.gov.kw

(limited to 100 certificates)
*.kgac.gov.kw
cspayments.kgac.gov.kw
cs.kgac.gov.kw
cspaymentstest.kgac.gov.kw
tsslm.kgac.gov.kw
cspayments.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cspayments.kgac.gov.kw
tsslm.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
ts.kgac.gov.kw
ts.kgac.gov.kw
*.kgac.gov.kw
*.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cspayments.kgac.gov.kw
*.kgac.gov.kw
tsslm.kgac.gov.kw
*.kgac.gov.kw
ts.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
cs.kgac.gov.kw
tsslm.kgac.gov.kw
cs.kgac.gov.kw
ts.kgac.gov.kw
*.kgac.gov.kw
cs.kgac.gov.kw
*.kgac.gov.kw
gcspayments.kgac.gov.kw
cspayments.kgac.gov.kw
cspaymentstest.kgac.gov.kw
ts.kgac.gov.kw
cspayments.kgac.gov.kw

Certificate

The complete raw certificate details for ts.kgac.gov.kw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh+VkxEQKydRMPKh61lY
9owLzgaujdJjHX9/AvIzjnww1One/wPTk/BJiJGzg5mqX2RvOJzBWH9v1o874f9D
wXNFLzKOOafOsslYkSeMMzHLECZDJcggl/Q4/Wv4i3o5M4kIOm8jO3jvy0LTPcDx
s3aHILMokWy+rvMF2L570ts9XMAyMoRpxi3S1X1gE0JoquS4ryaaygTAG0E6s5lC
qo4dmVoqtcNo4yyrwrbkcBEE5E/uDz2j5LHg+p1fV9NwR8RssaHjgGT3P7IpcvCq
va59cAksxLA4RKbaLhSPyHdEHLCLK2YE4yfa7rkRH/Oe03YKBUtHOVpqFXilgk8c
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4763988721942992320909880771857772780
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuwait City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PWC TECHNOLOGY FOR COMPUTERS CO. WLL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ts.kgac.gov.kw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26020665609643209009499181711567175988395149169570804580149961640837229191677452421178865939510412326936578835671960862918567957227434817810439294810977028730497879187677789391991838325086375926955462535141765637456265593144408729380804694899792786349166829121250804867347809893763321713421657706065541419393464844708504133948650190089210951341350041654301834394059135982048009116078298683284867904089272362874241419705293192301165664129654698958829087156147894286540884178439761381270870618689183656809783731321210386085195854057039973477090725008383754288631690869213970503054311723560854264933281508403149093674203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0813104256f0249883aa81fbc2c3dfef64ca40c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ts.kgac.gov.kw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001854eb873790000040300473045022100dd55312bb03848965de850d52b47c58203610ad26f9cb6eae9b012216a5d8e0502206690a5e40b755c8c9291ebd4a75ff1bf0498c18d9a52399c4753b1fbf3abdc21007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001854eb873f80000040300473045022100f3a9bb3bc57a7a487e905bf93ef1d0bfbe728516b56c6b699f2fce7d6d6a4c9302202c5a8449371f9f0caf86fa22de359aa12419dff2a949d36febd95d5031e3f09a007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001854eb873b6000004030046304402204b7f8c868e3a08490f93a3598fc51d8a9841b344b0d51cc6fdef532a80658f5d0220549ddcbfb0dc99231000abb3036a29c3db711b2bc4dcb2c00bc85f1f64da9fca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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