HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
P3P: CP="CAO DSP LAW CUR ADM DEV TAI PSA IVAo CONo HISo OTP OUR DEL LEG SAMo UNI COM PUR NAV INT STA"
X-AspNetMvc-Version: 5.2
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Origin-Agent-Cluster: ?0
X-Powered-By: ARR/3.0
X-Powered-By: ASP.NET
P3P: CP="CAO DSP LAW CUR ADM DEV TAI PSA IVAo CONo HISo OTP OUR DEL LEG SAMo UNI COM PUR NAV INT STA"
Set-Cookie: charset=enUS; domain=gmarket.co.kr; path=/
Set-Cookie: shipnation=KR; domain=gmarket.co.kr; path=/
X-Frame-Options: SAMEORIGIN
Date: Sun, 20 Apr 2025 10:29:09 GMT
Content-Length: 270
SSL Certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:6c:88:26:63:d9:a4:6b:33:5f:1b:d7:f8:f3:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Validity
Not Before: Apr 24 00:00:00 2024 GMT
Not After : May 25 23:59:59 2025 GMT
Subject: C=KR, ST=Seoul, L=Gangnam-gu, O=Gmarket Inc., CN=*.gmarket.co.kr
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b6:a3:e7:85:29:9e:26:01:67:cc:88:df:2d:a8:
45:59:4c:68:a9:39:0e:f1:61:4d:ab:b9:70:39:9c:
2b:df:d8:8e:bd:71:a1:29:16:8b:52:28:e3:0e:06:
f2:88:16:79:b9:8b:7d:92:1f:c9:f7:79:55:b4:b9:
48:bd:45:f0:b8:6b:d8:54:27:6d:89:69:c0:50:a8:
82:30:e5:7f:22:9a:89:97:11:3b:56:00:b6:f5:20:
c9:61:3d:4f:b8:ca:d5:50:3f:9c:75:b6:fe:39:d8:
02:b4:4b:ef:62:d9:a3:90:fa:12:dc:b8:9c:da:3a:
7f:5f:50:24:99:71:ac:96:93:6d:13:91:fa:63:0e:
86:3f:e4:15:ec:29:9e:de:fb:f2:e4:e6:f3:e1:2a:
1c:46:ee:5c:a0:45:2a:ca:d9:d6:f9:7b:7e:23:4d:
88:d5:99:25:50:47:24:9f:b9:6c:46:e4:76:97:af:
ed:3d:86:f9:c9:10:b9:d7:60:d6:84:32:a2:a2:1a:
ee:ad:79:36:1a:f2:b3:53:d4:02:93:3a:01:f6:56:
5b:7b:2b:59:a4:7f:f5:98:ea:1a:d6:66:b1:0a:84:
46:db:ad:64:60:56:09:1a:33:21:d8:36:db:32:66:
c8:0e:31:9e:a3:f4:83:9c:d2:4d:85:20:77:f7:41:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Authority Key Identifier:
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
X509v3 Subject Key Identifier:
1B:AA:25:65:61:88:E0:5C:9D:A2:44:46:54:DB:87:33:46:C7:E7:CA
X509v3 Subject Alternative Name:
DNS:*.gmarket.co.kr, DNS:gmarket.co.kr
X509v3 Certificate Policies:
Policy: 2.23.140.1.2.2
CPS: http://www.digicert.com/CPS
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 CRL Distribution Points:
Full Name:
URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Full Name:
URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
Authority Information Access:
OCSP - URI:http://ocsp.digicert.com
CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
X509v3 Basic Constraints: critical
CA:FALSE
CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
Timestamp : Apr 24 04:12:56.914 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:C8:C3:D0:80:1C:91:96:23:51:12:1A:
AE:0D:09:79:37:10:75:10:3D:72:79:F8:AE:18:40:C8:
51:A1:85:C6:7F:02:21:00:A4:D3:F4:4A:66:70:0E:DB:
47:45:D9:83:52:A6:B5:F3:C2:3E:42:7F:91:B4:7C:4C:
DB:32:55:5E:5A:A9:D3:4F
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
Timestamp : Apr 24 04:12:56.908 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:B6:0A:2B:D3:8B:51:9E:F4:FA:B7:6B:
13:DE:59:90:83:19:E6:25:C2:F7:03:AB:15:45:DB:1D:
5B:4D:FA:7D:A2:02:21:00:C3:CA:79:82:E2:E9:F4:3A:
2F:C0:7B:9D:5E:68:80:CA:5E:F5:F3:46:92:C1:C3:46:
7E:A9:7E:71:CF:C3:9E:05
Signed Certificate Timestamp:
Version : v1 (0x0)
Log ID : E6:D2:31:63:40:77:8C:C1:10:41:06:D7:71:B9:CE:C1:
D2:40:F6:96:84:86:FB:BA:87:32:1D:FD:1E:37:8E:50
Timestamp : Apr 24 04:12:56.923 2024 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:20:66:F5:F3:4D:73:17:3F:2B:16:82:46:AF:
BA:59:F0:5F:36:7D:DA:B9:E5:41:74:2D:5A:46:DC:02:
B4:78:DC:B9:02:21:00:CE:FC:FC:94:53:48:18:47:C1:
4D:BB:C0:2E:DA:CA:23:00:87:54:EF:55:F3:B4:66:2D:
6E:20:26:89:24:5A:34
Signature Algorithm: sha256WithRSAEncryption
Signature Value:
94:33:88:35:3e:fc:67:cf:e3:86:af:97:cf:e7:0d:4a:b6:a4:
5b:21:d4:4d:34:2e:2f:d3:f2:43:91:51:b5:9e:dd:fc:a7:da:
99:a2:7d:8a:d6:86:c2:d3:55:78:4d:20:5b:b4:8a:2b:63:3a:
80:fb:4a:79:8f:48:cd:dd:0f:ca:39:d2:89:6e:99:a1:ad:c6:
1b:29:54:64:3c:f7:02:9f:db:c6:87:f9:92:b8:51:90:23:50:
7e:d9:8e:1a:80:72:3f:95:52:86:9d:4c:a4:eb:e9:79:5c:eb:
07:ea:e8:91:01:a5:a3:d0:9f:59:03:e9:54:15:3d:82:2f:1d:
83:52:c2:ab:b6:73:bd:bd:83:19:57:74:74:fa:b6:c1:e9:15:
de:ae:ad:0c:ae:9a:d0:78:34:e9:08:e4:f6:ae:6b:74:92:88:
4e:1a:7f:c9:89:93:6c:39:18:c1:64:41:b9:d5:29:c7:4f:0f:
f0:bf:45:48:ea:87:2b:76:97:6b:3f:d6:ce:39:64:45:89:df:
d1:4e:d7:77:a0:96:84:54:4a:44:51:2d:a6:ed:8f:9e:04:b3:
81:29:b5:60:61:1a:57:32:40:19:1e:dc:4d:e9:5a:9b:4b:ed:
37:b2:3a:61:b3:9b:98:83:e8:e3:95:83:87:24:f2:e7:98:fe:
40:24:f1:34
5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."