*.thaipbs.or.th

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 02:fb:a3:28:e6:32:24:a7:0c:05:56:ba:70:d6:cc:1a was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.thaipbs.or.th

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:fb:a3:28:e6:32:24:a7:0c:05:56:ba:70:d6:cc:1a
Serial Number (int): 3965031776196140909977310587166051354
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 15:7c:9b:ff:4e:ad:68:a1:0f:42:67:6e:a9:3b:8b:3f:d1:69:6f:1e
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): d1:5b:8a:9a:99:ff:06:87:63:a1:6d:92:7a:54:6c:7f:75:e7:96:95
Fingerprint (sha256): 3c:4f:5e:b2:3e:22:f5:89:58:9a:be:36:a6:89:17:17:2f:2d:e1:75:e7:02:c1:80:30:30:a9:d0:d2:8c:f5:95

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.thaipbs.or.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.thaipbs.or.th

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.thaipbs.or.th
thaipbs.or.th

Other certificates including the domain name thaipbs.or.th

(limited to 100 certificates)
data.thaipbs.or.th
program.beta.thaipbs.or.th
newsletter.thaipbs.or.th
program.beta.thaipbs.or.th
www.tricapmgmt.com
play.moneyprep.com
catchup.thaipbs.or.th
bwbrody.com
*.thaipbs.or.th
training.thaipbs.or.th
erpnext.thaipbs.or.th
myfootxladmin.estore.business
*.thaipbs.or.th
bshefa.com
www.thaipbs.or.th
training.thaipbs.or.th
program.beta.thaipbs.or.th
bangkokgreenspace.thaipbs.or.th
admin.bot.thaipbs.or.th
agnee.app
program.beta.thaipbs.or.th
vod.thaipbs.or.th
vod.thaipbs.or.th
staging.controle.elemedigital.com
photostory.thaipbs.or.th
program.beta.thaipbs.or.th
vod.thaipbs.or.th
program.beta.thaipbs.or.th
covid19.thaipbs.or.th
dmservice.thaipbs.or.th
acaimaissabor.lupi.delivery
*.thaipbs.or.th
vod.thaipbs.or.th
*.thaipbs.or.th
vod.thaipbs.or.th
training.thaipbs.or.th
thaipbs.or.th
thaipbs.or.th
effectivepython.com
homologacao.quitapay.com.br
training.thaipbs.or.th
reeffactorgames.com
*.thaipbs.or.th
vod.thaipbs.or.th
catchup.thaipbs.or.th
www.juicypopbop.com
bkkelection65.thaipbs.or.th
newvintage.studio
vod.thaipbs.or.th
thaipbs.or.th
*.thaipbs.or.th
*.thaipbs.or.th
backoffice.sawasdee.thaipbs.or.th
program.beta.thaipbs.or.th
media.streamomedia.com
webmail.thaipbs.or.th
thaipbs.or.th
catchup.thaipbs.or.th
console-tts.thaipbs.or.th
vod.thaipbs.or.th
vod.thaipbs.or.th
admin.bot.thaipbs.or.th
www.bestofeden.com
training.thaipbs.or.th
program.beta.thaipbs.or.th
vod.thaipbs.or.th
thaipbs.or.th
training.thaipbs.or.th
admin.bot.thaipbs.or.th
program.beta.thaipbs.or.th
webmail.thaipbs.or.th
vod.thaipbs.or.th
saviastaff.com
*.thaipbs.or.th
catchup.thaipbs.or.th
admin.bot.thaipbs.or.th
training.thaipbs.or.th
*.thaipbs.or.th
vod.thaipbs.or.th
program.beta.thaipbs.or.th
admin.bot.thaipbs.or.th
program.beta.thaipbs.or.th
vod.thaipbs.or.th
vod.thaipbs.or.th
reform.thaipbs.or.th
vod.thaipbs.or.th
*.thaipbs.or.th
online-festa.l-ma.co.jp
briks.technology
www.knewkirk.com
vod.thaipbs.or.th
webmail.thaipbs.or.th
thaipbs.or.th
uat.smartseal.co.za
vod.thaipbs.or.th
program.beta.thaipbs.or.th
program.beta.thaipbs.or.th
program.beta.thaipbs.or.th
boapizza.lupi.delivery
policywatch.thaipbs.or.th

Certificate

The complete raw certificate details for *.thaipbs.or.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3965031776196140909977310587166051354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.thaipbs.or.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 580853884250939610682344601212851798845171055848981235957607392291936453244752078894791182396804075318495326958835014739644610760473501193101433923472887421997453538553015125821206769340582970674615449215419438416492617740842241444545207226570889718959796641666299129670626416939748477550035322179512795264130830503545851999262358724265895556787354506218151297874067582071471515307505818020793757021699610137774470117478686535594643145006740339533837883198457118247391681253602883876290343724977125548788938793266294894194999741256692404803333403764160499126866265966693840417165050675418279145377855098690967024077312960248000611187319169196912174691168303570921463863100277603187775262060173158790876694139548440019972267482581386042484253775250524544805311705212770238466403852889299931582109739310252642539496179264026787851372205666995884545914506850402611719924594234695221605796815325511103772435070727421275805350851879718744312993317694349064826496175638233451475434739728943309347913732142333983866737899230342948090374065501605284059593681265422145369002502924931472988484998383014948259593857756784171546627295627265109361568151265973403964850050135758293628640148205030891836469716535806843274458789929106069146206495571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							157c9bff4ead68a10f42676ea93b8b3fd1696f1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thaipbs.or.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaipbs.or.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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