ereport.uob.co.th

- United Overseas Bank (Thai) Public Company Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 39:69:5d:80:3b:d1:aa:2e:60:07:e9:c7 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United Overseas Bank (Thai) Public Company Limited

Organization: United Overseas Bank (Thai) Public Company Limited
State / Province: Bangkok
Locality: Sathon
Country: TH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 39:69:5d:80:3b:d1:aa:2e:60:07:e9:c7
Serial Number (int): 17768024316452766727010773447
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: be:5b:f7:71:c0:b0:96:9f:ff:21:25:b3:c7:de:92:18:d5:f8:cc:dc
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): e8:c1:01:2c:08:75:7e:a2:41:10:ad:b8:23:bf:4a:06:36:e6:cb:98
Fingerprint (sha256): 03:4c:d3:2a:94:1a:aa:c1:91:2a:e7:f5:62:6b:4a:b0:3a:20:c3:28:9c:75:49:ac:2a:5b:ea:e0:0e:e3:3f:44

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate ereport.uob.co.th

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ereport.uob.co.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ereport.uob.co.th

Other certificates including the domain name uob.co.th

(limited to 100 certificates)
ebill.uob.co.th
ereport.uob.co.th
u-www.uobgroup.com
ebill.uob.co.th
www.uobgroup.com
UOBgroup.com
bib.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
online.uob.co.th
UOBgroup.com
epay.uob.co.th
ebill.uob.co.th
www.uobgroup.com
online.uob.co.th
www.uobgroup.com
www.uobgroup.com
www.uobgroup.com
www2.uob.co.th
uob.co.th
www.uobgroup.com
ipp.uob.co.th
authenpoint.uob.co.th
uob.co.th
ereport.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
epay.uob.co.th
ereport.uob.co.th
epay.uob.co.th
epay.uob.co.th
www2.uob.co.th
www.uobgroup.com
ereport.uob.co.th
u-www.uobgroup.com
ereport.uob.co.th
uatcms.uob.co.th
u-www.uobgroup.com
UOBgroup.com
www.uobgroup.com
www.uobgroup.com
www2.uob.co.th
www2.uob.co.th
u-www.uobgroup.com
u-www.uobgroup.com
www.uobgroup.com
u-www.uobgroup.com
bib.uob.co.th
www2.uob.co.th
www.uobgroup.com
UOBgroup.com
ebill.uob.co.th
bib.uob.co.th
www2.uob.co.th
www2.uob.co.th
bib.uob.co.th
mail.uob.co.th
bib.uob.co.th
www.uobgroup.com
www.uobgroup.com
cms.uob.co.th
epay.uob.co.th
www.uobgroup.com
www2.uob.co.th
u-www.uobgroup.com
ebill.uob.co.th
ereport.uob.co.th
emm01.edm.uob.co.th
www.uobgroup.com
ebill.uob.co.th
www.uobgroup.com
mail.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
app.uob.co.th
info.uob.co.th
www2.uob.co.th
u-www.uobgroup.com
www2.uob.co.th
www.uobgroup.com
uatbib.uob.co.th
www.uobgroup.com
bib.uob.co.th
epayrd.uob.co.th
ereport.uob.co.th
ebill.uob.co.th
ereport.uob.co.th
bib.uob.co.th
bib.uob.co.th
ebill.uob.co.th
UOBgroup.com
www2.uob.co.th
uatcms.uob.co.th
uob.co.th
epay.uob.co.th
www2.uob.co.th
epay.uob.co.th
uatcms.uob.co.th
www2.uob.co.th
www.uobgroup.com

Certificate

The complete raw certificate details for ereport.uob.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tf5O3Q+OAq3Vlvj5Um6
VOb30uTuIGNbn8WhTOlzCp2Y7GSpYECrWR8oVP21K2E9gmedRV0JPZX1cjVg5YkA
rm2KuyDbNeyebEGiXyMZ9MtVnnshZ2NQ9s92zq9voTi7NqTJpZr5bpNwE8aGyu4/
abF6gQ0wMdTXLL6jLQWkEzg3SIeUN7vz1GWPAJI9Z7LrhXn31UW/Xz1fYlmqWxYZ
n2UybQGxnlz3ZMv0HbMZJz8bERm7wycs19zxv2Josdl4Ymn+0+a3AT4TdyuaYKwq
gGofgtCCVsFmMEqaG93bjp9SsMiHu5V7UPqbjnpRP6SO7sI7eM63cRI4dVdaAqiB
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17768024316452766727010773447
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 02:41:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 02:41:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sathon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Overseas Bank (Thai) Public Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ereport.uob.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29141310675658528097373556565835482380367752012190459766229150250066640199927127253295804409415704783868523847046646492281070577559689531409875344942926051483529089864897499989138412978405987722406235873631361679899059465992316484025458012143058069475729500480027618922726761456540581672135678969941553381736273983326977314374244992830619944452711617622222494445255841873775236412838246586668469839789866009592126580087532485924817270294836137074082090073549189049993634248201010697974686164173382237446559205083123053744763853004389803997350657455101300639609632493574490529364360320348020584624170681916517973000651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereport.uob.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be5bf771c0b0969fff2125b3c7de9218d5f8ccdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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