www2.uob.co.th

- United Overseas Bank (Thai) Public Company Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 04:9c:b0:c6:40:34:28:4c:39:ca:3c:68 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

United Overseas Bank (Thai) Public Company Limited

Organization: United Overseas Bank (Thai) Public Company Limited
State / Province: Bangkok
Locality: Sathon
Country: TH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:b0:c6:40:34:28:4c:39:ca:3c:68
Serial Number (int): 1427367260727941103270640744
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 61:62:76:71:b9:1d:8e:f0:e1:37:22:65:8c:57:5b:7a:08:c4:07:cf
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 08:fd:ad:fa:9a:e5:3e:e6:55:15:34:c7:0c:94:ff:cf:a8:05:87:5e
Fingerprint (sha256): 1d:dd:c4:52:fd:9d:1c:65:fb:e9:2f:4f:c8:66:39:67:0f:18:5b:b7:6f:5b:1a:de:d4:8d:84:87:6e:a7:30:4f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate www2.uob.co.th

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.uob.co.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.uob.co.th

Other certificates including the domain name uob.co.th

(limited to 100 certificates)
ebill.uob.co.th
ereport.uob.co.th
u-www.uobgroup.com
ebill.uob.co.th
www.uobgroup.com
UOBgroup.com
bib.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
online.uob.co.th
UOBgroup.com
epay.uob.co.th
www.uobgroup.com
online.uob.co.th
www.uobgroup.com
www.uobgroup.com
www.uobgroup.com
www2.uob.co.th
uob.co.th
www.uobgroup.com
ipp.uob.co.th
authenpoint.uob.co.th
uob.co.th
ereport.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
ereport.uob.co.th
epay.uob.co.th
epay.uob.co.th
www2.uob.co.th
www.uobgroup.com
ereport.uob.co.th
u-www.uobgroup.com
ereport.uob.co.th
u-www.uobgroup.com
UOBgroup.com
www.uobgroup.com
www.uobgroup.com
www2.uob.co.th
www2.uob.co.th
u-www.uobgroup.com
u-www.uobgroup.com
www.uobgroup.com
u-www.uobgroup.com
bib.uob.co.th
www2.uob.co.th
www.uobgroup.com
UOBgroup.com
ebill.uob.co.th
bib.uob.co.th
www2.uob.co.th
www2.uob.co.th
bib.uob.co.th
mail.uob.co.th
bib.uob.co.th
www.uobgroup.com
www.uobgroup.com
cms.uob.co.th
epay.uob.co.th
www.uobgroup.com
www2.uob.co.th
u-www.uobgroup.com
ebill.uob.co.th
ereport.uob.co.th
emm01.edm.uob.co.th
www.uobgroup.com
ebill.uob.co.th
www.uobgroup.com
mail.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
info.uob.co.th
www2.uob.co.th
u-www.uobgroup.com
www2.uob.co.th
www.uobgroup.com
uatbib.uob.co.th
www.uobgroup.com
bib.uob.co.th
ereport.uob.co.th
ebill.uob.co.th
ereport.uob.co.th
bib.uob.co.th
bib.uob.co.th
ebill.uob.co.th
UOBgroup.com
www2.uob.co.th
uatcms.uob.co.th
uob.co.th
epay.uob.co.th
www2.uob.co.th
epay.uob.co.th
uatcms.uob.co.th
www2.uob.co.th
www.uobgroup.com
uob.co.th
www.uobgroup.com
emm01.edm.uob.co.th
www.uobgroup.com
bib.uob.co.th

Certificate

The complete raw certificate details for www2.uob.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBhcpm9bKAGfAAx6Xl4+
1kG9JXMR3T5OkPt29aOnHAXmm04eYGoNMzYbip5/79C7u1wi+M3utc43Ujf4NO1i
HFfEEWGWRIJikEOG541HlvZucrEzdF133PIYPcQdWCNevCmn99keepDMgTMQfec7
5t1guwTbWvCNsES5vAtUJNjI9XzGqU4evmAfgrFQ9Jlm3PlL9YE8Znjk69ZqD94r
KOgJivkL4XXkeh2EbqAoRNQRkKUJAsbqauq9hFCoWG5ZcDir1TqdWM6Lc/LL7exv
B/JtR3d9RdOvYY+87vFXLb74uGWmvHZxmj8cTvYTtKmC3tjvRoBbSPqU1qZBkyl8
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1427367260727941103270640744
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-27 04:41:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 09:56:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sathon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Overseas Bank (Thai) Public Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.uob.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23239861421584348270215767259729535527478251193878793720062405615925589500961592441405675954974686412873881239903301571247599972926246700021796330216475507355304167208909939410362858008775291795318083629414346049544997222998111552293343367851003057084797618030337568507902382206496702992411470156678233030514393020075057923065733727193250826430118267086032084028811753159087161658403173365698003463212782547048782666845321319928210818843365588487990247762599197987782792001131932263529811481574835121713945615206661437823074180643031614760672819555160984677485774024735788606369366324111026584912808600027064137514059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.uob.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61627671b91d8ef0e13722658c575b7a08c407cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001742e3829520000040300483046022100c8556bbe3a39315f3a8a8efdc0349b884573e11dc4f75c05b68b5a7c4881a56d0221008e8bf18452ed07ffbd55c7055e0224f6a4eec9b7985870f09416509b164223120075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001742e38298f000004030046304402201481e5407f3bae9bc3d120dceda665d001500fa36ca1182d93f8e36e88fe466102203540447433c04ebf14b1c39248fc638d3f73c16d55b4294d1bb8ebf8f1801bfc00770051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e5000001742e3829980000040300483046022100db52b420bc2fb814a9ed1be31f8d2db91daf777ed97fe334e377f2d0a1239595022100f7d47a33b55c24c587120960ebe903fd0704a73a3d809b9b9d6aa2dcef32cbe5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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