*.mea.or.th

- Metropolitan Electricity Authority -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 39:61:90:0c:12:77:a0:2a:b2:2d:97:90 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Metropolitan Electricity Authority

Organization: Metropolitan Electricity Authority
State / Province: Bangkok
Locality: Pathum Wan
Country: TH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 39:61:90:0c:12:77:a0:2a:b2:2d:97:90
Serial Number (int): 17758591607784458380834084752
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 30:64:bb:ea:3d:ae:6c:b4:74:c6:6e:cc:00:0f:99:e6:ac:a7:32:ac
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 9b:4b:fd:d5:73:d1:2b:53:7a:c6:10:19:a6:a3:e1:eb:3b:47:c5:2e
Fingerprint (sha256): 2a:81:97:6f:6e:5d:d3:9c:14:1a:5d:c2:ca:25:14:37:dc:4d:fb:45:5c:01:f1:2e:10:9b:b5:f8:a0:2a:d1:a7

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.mea.or.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mea.or.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mea.or.th
mea.or.th

Other certificates including the domain name mea.or.th

(limited to 100 certificates)
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
eservice.mea.or.th
*.mea.or.th
*.mea.or.th
meastore.mea.or.th
eservice.mea.or.th
meawebmail.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
meastore.mea.or.th
*.mea.or.th
eservice.mea.or.th
www.safesync.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
meastore.mea.or.th
www.safesync.mea.or.th
*.mea.or.th
*.mea.or.th
meastore.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
eservice.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
meastore.mea.or.th
eservice.mea.or.th
*.mea.or.th
eservice.mea.or.th
meastore.mea.or.th
*.mea.or.th
*.mea.or.th
www.safesync.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
gisportal.mea.or.th
*.mea.or.th
*.meanet.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
www.safesync.mea.or.th
meawebmail.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.mea.or.th
*.meanet.mea.or.th
*.mea.or.th
*.mea.or.th
meamailrb02.mea.or.th
*.mea.or.th
*.mea.or.th
www.safesync.mea.or.th
*.mea.or.th
eservice.mea.or.th

Certificate

The complete raw certificate details for *.mea.or.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ3tVKjHOpqwrj1+Di7V
lNXXaNaK/SIO8OtUa4o/DeX51YLZEoDA5EJL8GEhHWDcOXUS2mqaXOXrYHKlqQJO
GVEpUyUnXytuDKXaZsZSiv3hCZT5uinXy8ci0moNszi6JQHcdCnySHr2k0jwwxcm
kNacX6WNA5D99LTHeZRepf2oK8oAUTAIAb3L1SKPTNhKsOxA1/9vd9OPsIhfFt3V
74SIaQcZcPynIqTWqmBkJD27Y1dFiZWtY5IBHDScJEhkdNZbnu5S7kIVnhQw2tCn
E5EoBjKkKvw1Sxnmt+qVfvUy141VFIA2a1Z1QzdyXdYV4m4alptaI+k0NHJ6dLhz
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17758591607784458380834084752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-08 02:47:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 08:28:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pathum Wan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Metropolitan Electricity Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mea.or.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24315631295709278013963701595289166872599247359674233224268808844320808872784079926947663888051568080556874924219411190557956699023608665858728487860907364555058212201902941192308610557669523011046555142318002053975419120340751573702906667856544454178426907181986108556658770646239421250279379237925521665772616456781661277163549872328698011483917025666263852859812824153951742410111542332019206152834339728175101282272817292683548648232161673935638561759135700752420246386382030410927582416848154627156340469409827055640423784454421666701839820234176055250552591999335595819265279675312905522457413902996758685316013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mea.or.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mea.or.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3064bbea3dae6cb474c66ecc000f99e6aca732ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009382912fe8478e6d62139638cded42de9c2271d9393af19cf906d66b59b30a682735a4bcd606e8efe4cc37c25f38a7659d1d171ec45d41da4b9b6c96e7f39336401dabc092ef2960502c855e9c2aada3a3ab8c712f34e75a35c9aaf8326536cf674aa484c3ff99413bf462dbbb26443ea603e18e592534c4ce2d6259c66c6b0e7eac5f95f9dc97f268e60bcdd08100960c653fb78bf6aab103f10de92f4009160d460ca4e0824ae9aa1ba7cd0e2e5f7c684e912e5549a4ca61ebcf652f283294d78415208895fdbd9c3bdf0c6ba10ae3b1665a27e76db0729aaaa5280635a1be6d0856772a7ad600df137fcac733405dd2ec9a0848b688f3e15736bbd9243011