*.te.psu.ac.th

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 07:f5:81:23:e9:3e:f4:6c:85:1e:d8:5d was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.te.psu.ac.th,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f5:81:23:e9:3e:f4:6c:85:1e:d8:5d
Serial Number (int): 2463191742274471999263660125
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 7d:8e:30:a3:0c:19:a2:3b:a3:c7:ea:44:db:72:72:7b:0a:ee:76:0c
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 9b:ae:59:7b:4d:ab:76:5e:2e:8f:0f:c6:01:77:3f:fd:9a:59:25:54
Fingerprint (sha256): 0c:cc:74:a8:40:ed:8c:79:62:be:2c:a6:41:0f:d4:3b:37:ad:5e:fc:23:ac:1b:ba:c9:94:3d:9d:7c:0c:ab:14

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.te.psu.ac.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.te.psu.ac.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.te.psu.ac.th
te.psu.ac.th

Other certificates including the domain name psu.ac.th

(limited to 100 certificates)
soreda.oas.psu.ac.th
stiinfras.com
ipsu.pn.psu.ac.th
soreda.oas.psu.ac.th
x.coe.phuket.psu.ac.th
www.nhm.psu.ac.th
alaminamdar.tech
seniorproject.ict.sci.psu.ac.th
lc-equipments.phuket.psu.ac.th
fivedots.coe.psu.ac.th
jfk.oas.psu.ac.th
cc-server-admin.psu.ac.th
clib.psu.ac.th
pulinet.oas.psu.ac.th
*.ee.psu.ac.th
www.premium.psu.ac.th
download.clib.psu.ac.th
royalsong.oas.psu.ac.th
dev.clib.psu.ac.th
gc-lamp.phuket.psu.ac.th
www.danieldoral.xyz
sercoop.psu.ac.th
*.cc.psu.ac.th
elegantcreation.in
www.near.in.th
ai-tasi.phuket.psu.ac.th
cc-server-admin.psu.ac.th
www2.coe.phuket.psu.ac.th
lbs.pn.psu.ac.th
www.oas.psu.ac.th
www.coe.phuket.psu.ac.th
isys.coe.psu.ac.th
*.sci.psu.ac.th
x.coe.phuket.psu.ac.th
gafe.in.psu.ac.th
*.trang.psu.ac.th
sercoop.psu.ac.th
lbs.pn.psu.ac.th
evaluation.oas.psu.ac.th
dev.clib.psu.ac.th
*.te.psu.ac.th
www.devfestvenice.com
x.coe.phuket.psu.ac.th
ipsu.pn.psu.ac.th
cloud.coe.phuket.psu.ac.th
fivedots.coe.psu.ac.th
*.sci.psu.ac.th
medtax.medicine.psu.ac.th
fivedots.coe.psu.ac.th
studyroom-api.clib.psu.ac.th
*.fis.psu.ac.th
radius.coe.psu.ac.th
somchai.coe.psu.ac.th
*.mcs.psu.ac.th
cc-server-admin.psu.ac.th
mms.psu.ac.th
summarise.wbns.oas.psu.ac.th
ossf.in.psu.ac.th
dev.clib.psu.ac.th
mms.psu.ac.th
lbs.pn.psu.ac.th
fivedots.coe.psu.ac.th
www2.fis.psu.ac.th
ipsu.pn.psu.ac.th
archive.clib.psu.ac.th
freshsnow.app
pumbaa.coe.psu.ac.th
jsobms2019.medicine.psu.ac.th
cc-server-admin.psu.ac.th
www.senate.psu.ac.th
www.coe.phuket.psu.ac.th
fivedots.coe.psu.ac.th
gafe.psu.ac.th
www.phuket.psu.ac.th
halveningcountdown.com
ossf.in.psu.ac.th
tqf.oas.psu.ac.th
download.clib.psu.ac.th
crm.oas.psu.ac.th
wbns.oas.psu.ac.th
*.medicine.psu.ac.th
www.senate.psu.ac.th
clib.psu.ac.th
mis.pn.psu.ac.th
ict.sci.psu.ac.th
sub.phuket.psu.ac.th
cnr.psu.ac.th
secret.oas.psu.ac.th
www.uic.psu.ac.th
download.clib.psu.ac.th
ai-tasi.phuket.psu.ac.th
journal.oas.psu.ac.th
download.clib.psu.ac.th
somchai.in.psu.ac.th
www.nhm.psu.ac.th
training.in.psu.ac.th
somchai.in.psu.ac.th
www.clib.psu.ac.th
gafe.psu.ac.th
x.coe.phuket.psu.ac.th

Certificate

The complete raw certificate details for *.te.psu.ac.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dAbekuygDNiKNHc4AXP
N2eckePorolDgySxC5tqFNuj+Xf0SDo/O32t9gRTuCc7Vuglh7M+kfop4OXJWuni
mLptgDVrbJHIHkW1ZzMSfoGqwyAyT6VxfRM9PZ0dl2AtqJrzZ7YYwaBqDAGKIkPp
VGchK/LJEBRWV5G5xydhHUag4fh5Zy4as3DN8MTOiOWcmEm1RYZl2pS+eTX46n8q
3jBIVvQmixT44nWUQF68tGDM7FfMX0ecladb8PbKh5BwdxCBoIiBD/UnBKp25cLA
6Wj4PP3HlldqRA5PTbKXAHqMtrw3+M0bEGQtmdqXCRlR0Tl+G0h7oD/6xOGheO99
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2463191742274471999263660125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-26 02:27:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-26 02:27:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.te.psu.ac.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27496333729199057700855171936364965555331459651818903793170396253737961180512421002888794169994210458619902719320654704267938402442391610532543057644762557693881372239770300822087211996902218511846398604382859534981097109989662459594294606932397852997185146015758523311499671759775326317104669947828470008226550209104104975585576839280429555460703070597542783469143244677709739034976653509793809459383800284812771370186669069391437197094389090336748891349804151037029401788853604854203520093808189032873671071586731878749820426248102967517866643358143654512230448609557851171036974446527578022425204564851576357748061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.te.psu.ac.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.psu.ac.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d8e30a30c19a23ba3c7ea44db72727b0aee760c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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