*.tngdigital.com.my

- TNG Digital Sdn. Bhd. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 19:bc:df:0c:05:75:a2:d3:43:93:45:e4 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

TNG Digital Sdn. Bhd.

Organization: TNG Digital Sdn. Bhd.
State / Province: Kuala Lumpur
Locality: Kuala Lumpur
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 19:bc:df:0c:05:75:a2:d3:43:93:45:e4
Serial Number (int): 7965456609101185389081871844
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 85:47:2d:42:87:79:59:f6:f4:6f:42:6e:d5:44:f3:65:c5:3d:b3:c3
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 61:fc:45:01:76:1e:13:8c:57:9d:7e:53:a0:05:d9:21:3b:a3:aa:2b
Fingerprint (sha256): 17:84:24:92:7b:7d:b6:1e:13:79:3d:92:68:ba:77:58:3c:c8:d5:66:fa:82:ac:8c:7b:1b:9b:be:c3:81:5d:98

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.tngdigital.com.my

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tngdigital.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tngdigital.com.my
tngdigital.com.my

Other certificates including the domain name tngdigital.com.my

(limited to 100 certificates)
*.tngdigital.com.my
dev.dobbymail.com
staging-opentable.thelevel.ai
sni.cloudflaressl.com
johannfeser.de
sni.cloudflaressl.com
staging.painel.appjusto.com.br
app.radanalyzer.com
*.tngdigital.com.my
www.uniquestoes.com.br
testbrand-auth.ibep-staging.com
www.clicket.bo
ingrey.dev
*.tngdigital.com.my
*.tngdigital.com.my
sni.cloudflaressl.com
trainer.spbeu.ru
app-staging.postredi.com
www.ttly.co
sni.cloudflaressl.com
*.tngdigital.com.my
buildnow.dev
linkh.in
support.tngdigital.com.my
aarkaycelebrations.com
www.admin.minilemon.com.au
playgo.vonder.co.th
histovery.com
bilen.mobi
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
www.softwarelc.com
sni.cloudflaressl.com
computingteacher.org
sni.cloudflaressl.com
lisamaccarrigan.com
support.tngdigital.com.my
support.tngdigital.com.my
sni.cloudflaressl.com
sni.cloudflaressl.com
*.tngdigital.com.my
ingrey.dev
helix-lab.org
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
*.tngdigital.com.my
sni.cloudflaressl.com
sni.cloudflaressl.com
100hillsclub.com
sni.cloudflaressl.com
omnicom.freestand.in
johannfeser.de
sni.cloudflaressl.com
*.tngdigital.com.my
exerciciosresolvidos.com.br
sni.cloudflaressl.com
*.tngdigital.com.my
sni.cloudflaressl.com
app.econochef.ca
www.londonukrainiancentre.ca
app.connfair.com
sni.cloudflaressl.com
vindico.bookourspace.com
wayit.co.kr
app.triplings.com
doramayer.edu.pe
sni.cloudflaressl.com
recognizely.gaplabs.ph
sni.cloudflaressl.com
umfrage-test.innofind.ch
ozzyaytekin.com
support.tngdigital.com.my
www.admin.studnchill.fr
corp.true-seekers.co.jp
epiphanyinsight.mom
www.nordisch.ch
support.tngdigital.com.my
login-secure.com.br
sni.cloudflaressl.com
www.pizzeriacapra.com
sni.cloudflaressl.com
www.bapagames.com
support.tngdigital.com.my
yu.software
link-sbx.tngdigital.com.my
cms.andrewswebdev.com
sni.cloudflaressl.com
app.sort.dog
wayit.co.kr
penekli.com
fcaint.mu
*.tngdigital.com.my
support.tngdigital.com.my
sni.cloudflaressl.com
sni.cloudflaressl.com
blockcommunications.madhive.com
*.tngdigital.com.my
sni.cloudflaressl.com

Certificate

The complete raw certificate details for *.tngdigital.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Z3qTlxPKc3mHAwAlp3
RxEcSb0oH+5JY1wc41euBrZoTNLGxrtwOZVLIFP0DanY6oljtp0WmWv7DvN/zawk
y1enBtargfccWkaeeIzFcIV6y/9KT1FzrS1K3uXA6c3LCU7Sdey/WHpQJaabCJg1
EG08aMvkAosrQl2dPWZw79DfcztVKZtakeE7WLKaL9KGByPx554QcMjfB5hUR8Si
MDpIHbYHXRdxfVjRyq0XFE6VM4GEsFKsN2ZbmRTe7x0bXDFI071M23rhuCoqgPI9
Y2iUl4FD/qcrZpeNAYnB6MpUl1V8/B4y624ylhpgcqeP+Qa4mdWr1g67tym9wYCC
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7965456609101185389081871844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 01:08:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-12 01:07:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TNG Digital Sdn. Bhd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tngdigital.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18086826392967071948948215995838210169448859606211512847870161490123739144675641888290702565298060911656595662036643887140787574840881338348442527794184882266555891373744840343489655453670478515901147254825819145028568678316938238156534119195403632977973901978513758274960314750716527659202387769124351282506827679867723987804525424094653859298799251125465328574342119883320227488608122962561602750224481102659832196190945697253932515865847721034619528781456763895195997706812346419303909525053536148627858591169872503250164775511988829835410549714856024323764093253024605812247872918040496194859359115937249813889659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tngdigital.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tngdigital.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85472d42877959f6f46f426ed544f365c53db3c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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