trading.cgsec.co.th

- Country Group Securities Public Company Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:3e:76:5f:a4:21:92:e1:38:13:82:06:30:79:71:bd was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Country Group Securities Public Company Limited

Organization: Country Group Securities Public Company Limited
Organization unit: Information Technology
State / Province: Bangkok
Locality: Patumwan
Country: TH

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:3e:76:5f:a4:21:92:e1:38:13:82:06:30:79:71:bd
Serial Number (int): 12287375269098201704137757317517636029
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:9f:ba:39:d0:3a:07:8d:67:5f:95:28:32:1f:2d:8c:56:98:9e:d7
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 90:dc:95:f1:40:56:06:e3:d4:8b:55:7c:41:03:2d:a2:8a:05:e1:8c
Fingerprint (sha256): 37:57:5e:94:39:2e:a5:c1:69:d0:1a:9c:ad:63:2e:d8:b7:70:72:fc:e6:61:71:7f:80:34:30:7c:fb:cf:6e:8e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate trading.cgsec.co.th

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trading.cgsec.co.th

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trading.cgsec.co.th

Other certificates including the domain name cgsec.co.th

(limited to 100 certificates)
trading.cgsec.co.th
www.cgsec.co.th
sbl.cgsec.co.th
trading.cgsec.co.th
www.cgsec.co.th
trading.cgsec.co.th
*.cgsec.co.th
trading.cgsec.co.th
qatrading.cgsec.co.th
trading.cgsec.co.th
foreign.cgsec.co.th
*.cgsec.co.th
sbl.cgsec.co.th
bcast.cgsec.co.th
www.cgsec.co.th
www.cgsec.co.th
bcast.cgsec.co.th
foreign.cgsec.co.th
www.cgsec.co.th
mforeign.cgsec.co.th
foreign.cgsec.co.th
mforeign.cgsec.co.th
www.cgsec.co.th
foreign.cgsec.co.th
trading.cgsec.co.th
qatrading.cgsec.co.th
trading2.cgsec.co.th
*.cgsec.co.th
www.cgsec.co.th
trading2.cgsec.co.th
trading.cgsec.co.th
bcast.cgsec.co.th
mforeign.cgsec.co.th
www.cgsec.co.th
mforeign.cgsec.co.th
trading.cgsec.co.th
bcast.cgsec.co.th
dlcgs.cgsec.co.th
trading.cgsec.co.th

Certificate

The complete raw certificate details for trading.cgsec.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwYaiMRtaKsT8/p6OWkPI
Yb4ZB3oAjU+QAT36qb1EYonOEDqs8kh/8lnfJc7LYZT3yr7LfrXdtQdZff4uYixf
bIks3cFGHOcx7NMonBHgiX5Wv9LOyfCoAfqWFSPx4RrqD+ajlfLNTIUhxZNW9dXT
Ks9AzTLG+ENSmOGOLUCNIIsq/41GDYDXiOg6yRey7QmEpyyv6RPuGHB+wtDLVfoN
GcnocLEVcQhlKKUx9Z4leGGkYmvR9d57qoO5qEEvje27j+e/WtzwhNDZN36fC6mk
aAsBPAgLQggFf2cEgr1v5g0cz0rUdXg864TZVKovZEdPdthWp7MvE0IroiJWrNTQ
AqeT3ggZ7a9AlFo8HoVjD1vqlUWIiGkPqi0X42xvxwU+uyr/LTzbxToMdyZbbPSv
hrSqPoaQ2Xepuub0ofm4TuL+q65XpZBMjYU1/PaSR8HEXeozbjN/s6I6Pcov7XgZ
B/A3RM+4DEybkRpeD6eDgsICzE2abgY3b4yTUFjYG41WZ5oY2tTsON0wGC/Nm7S/
BVJOEmYcmDjfOIAkMBgPXz/BkvKVSelv2mvb03zacR5uxh33YZev9WPRHbamGxnQ
m88ihavJcd8PZ7r+/7RDBSTo8wkElEFWrMQG0r7qSpfgjUvMgAB2iP8eO/W6CKB9
LmMmakEDz16nS2NBMFz0Y50CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12287375269098201704137757317517636029
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Patumwan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Country Group Securities Public Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trading.cgsec.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789516840330222782084946348106469018247710346500903095643542456736424451915758516478534307930659483844670147899460976305910388823085507380541775401545693590412353400240641768520020936805138919630331933693118799341127109722351384896075935806469111732663317649918138929488257940175214668231924086728537657780096891214803747848349975252946657325714501016525257475908359053444075333720652970065784563171034662227537105875734058282346611707303862909871540477271678579547492727427541802398584014863593593744304857942098580107053669388965278218383305249483590259032259653545878162661786521895209358133043565839548642149457521149219608348711543209958135188707374007301404035742638297262981519359672927211793272222356679517104446183692704903744297090512704077975664170888815179674206506476764528125657454240967107360683039713822338508720715770211551821467808729368986845393297535699799978905892171984296021229756252262069623177312916395947634212512156081995380706587852739750232749675746317304866761640353838669606352084584901310713544818731451735859454856227056238155932198362709168730551264027698557054492782220498752147048127224605015553055570878976842637304128438130871880820236808390538684098369959895763645733425814443430757654708118429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a9fba39d03a078d675f9528321f2d8c56989ed7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trading.cgsec.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016228a761cf0000040300483046022100f7b4b15ba6ef36ee20552d42074849b6e5b90295a21aef4f02c0bcf2c5e53c85022100f07ee6f2eadfce1473bfcd236c2e8fa7ed36d31662cd5a2620c478fe51376a980077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016228a763280000040300483046022100bc5b287f78115aee44f2486585d1db7d61b5f1fd4c80bf2abc8169a4fa76825f02210084a15e9606e94474a0f2d86e2a4b53d247dba50bb3ec2f0332e2ad32ddaf3791
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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