www.tinyunit.co.th

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 43:9a:d7:1f:66:8d:db:f2:d1:b7:35:b4 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tinyunit.co.th,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 43:9a:d7:1f:66:8d:db:f2:d1:b7:35:b4
Serial Number (int): 20922686122283460155713992116
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 11:e7:99:c3:72:12:3d:1b:fd:bb:81:e4:c0:5e:61:c3:7f:17:97:1b
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): cc:5b:74:61:ba:92:ae:76:44:fc:e3:d8:c0:2a:e4:a6:34:da:27:12
Fingerprint (sha256): 42:84:ac:ea:45:19:cc:aa:85:b7:7b:f6:1f:f9:aa:ae:3b:38:91:ec:b0:5b:4b:28:77:7d:20:fb:05:0b:b4:56

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.tinyunit.co.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tinyunit.co.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tinyunit.co.th
tinyunit.co.th

Other certificates including the domain name tinyunit.co.th

(limited to 100 certificates)
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.getsumup.xyz
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
urli.to
strengthcorp.app
www.factory.tinyunit.co.th
exactfetching.com
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.greystreetsystems.com
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.darshans.me
sni.cloudflaressl.com
uxagents.com
www.profile.tinyunit.co.th
www.cloud.tinyunit.co.th
frdm.news
www.tinyunit.co.th
www.tinyunit.co.th
links.staging.sakenomy.jp
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.spartanjs.org
www.tinyunit.co.th
dial.dialect.to
www.cloud.tinyunit.co.th
www.factory.tinyunit.co.th
sni.cloudflaressl.com
www.tinyunit.co.th
grzempowska.pl
www.tinyunit.co.th
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
nazuna-kyoto-gosho.b.hotekan.com
www.cloud.tinyunit.co.th
finca.finance
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
tinyunit.co.th
www.cloud.tinyunit.co.th
goiko.overview.one
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
snacmate.com
www.tinyunit.co.th
www.tinyunit.co.th
grzempowska.pl
www.tinyunit.co.th
www.reinforce.me
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th

Certificate

The complete raw certificate details for www.tinyunit.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NuAdeIe6rF+pQybSVib
Iwh/ibToynCW/FLyNZBuMo4V9PX8eQrpTSnc00my9nxf3p+JoRVOi45JXuM3Qk+Z
aZ+7qBZDfW2C02og8CVMqBigLM77kKb+vTJhfBgr30AJDlU/dsAEXMuhAUPpkpzO
Uk6RjqPO3byWEJht42/mMSU9F533v5j67e1Ft7hyCsRRu5fAngfloCuIVk1dKc4L
PY5RUIRtcjA0P/bpaSATPRlEdyLDuJJK6e103vbbLgFjqsxiBVjxR/PbkKlRnDHS
uMYZCInbPmsukYJVPIdeXXV/11nkDxPeh0Sd7vs3eLi23XgUZTqzhMuk7qMFajQm
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20922686122283460155713992116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-19 00:56:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-22 11:16:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tinyunit.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27880667463673442266532003737048069586369406451003887970926711069632989620089020988927885705595367673371475155816449731901657776195675258048907780790163748700092760766136499453876974442909470984680712254839505561820062600178904032698022408301742712732831516172914342361933343627372604215493887410096982616789189471678581729757871645669584894905501189305948736607876270809036104129420273770255370267154502154005565287825115136046481731788798853992706347698601551374937551202064609300218820623588450727828382967510392235894266136255947936228253650972919465485415895378585424428745631088591861162421659900450289518650897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tinyunit.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyunit.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11e799c372123d1bfdbb81e4c05e61c37f17971b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167c3f685610000040300483046022100bf6b4388468c9ffce6eb411d8e991bdcd40cbad26d366c8bc637c81bd290271b0221009f260660753079430c1c19fc0a415d882622c0999793e7df4d5297b60ad697b3007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167c3f6827d0000040300473045022049cb4908c06cbd4990e355c4d2f8d20393113aad2746a1fe9cd168242a4af0c9022100f84f396389477401ed9e9006167ab172e98f3ffe18566d1808a8056313f8f6a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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