www.tinyunit.co.th

Issued by GlobalSign Domain Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4e:46:2f:70:1f:ec:5d:95:03:4e:24:02 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tinyunit.co.th,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:46:2f:70:1f:ec:5d:95:03:4e:24:02
Serial Number (int): 24224679592998286935823623170
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: fb:5e:41:89:6b:92:5f:32:1b:84:7c:dc:1c:64:88:79:2c:76:9a:95
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f

Fingerprint (sha1): 8b:5a:01:9e:97:4c:1e:c7:95:70:e6:ec:a6:a6:a4:77:c6:97:33:89
Fingerprint (sha256): 48:3f:f7:f6:2a:6f:6c:08:3c:a2:ce:82:b8:83:c3:d9:00:3e:ec:7b:68:34:fc:4f:6a:8f:eb:70:4c:bd:dc:40

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl

Check the revocation status for certificate www.tinyunit.co.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tinyunit.co.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tinyunit.co.th
tinyunit.co.th

Other certificates including the domain name tinyunit.co.th

(limited to 100 certificates)
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.getsumup.xyz
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
urli.to
strengthcorp.app
www.factory.tinyunit.co.th
exactfetching.com
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.greystreetsystems.com
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.darshans.me
sni.cloudflaressl.com
uxagents.com
www.profile.tinyunit.co.th
www.cloud.tinyunit.co.th
frdm.news
www.tinyunit.co.th
www.tinyunit.co.th
links.staging.sakenomy.jp
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.spartanjs.org
www.tinyunit.co.th
dial.dialect.to
www.cloud.tinyunit.co.th
www.factory.tinyunit.co.th
sni.cloudflaressl.com
www.tinyunit.co.th
grzempowska.pl
www.tinyunit.co.th
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
nazuna-kyoto-gosho.b.hotekan.com
www.cloud.tinyunit.co.th
finca.finance
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
tinyunit.co.th
www.cloud.tinyunit.co.th
goiko.overview.one
www.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
snacmate.com
www.tinyunit.co.th
www.tinyunit.co.th
grzempowska.pl
www.tinyunit.co.th
www.reinforce.me
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.factory.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.cloud.tinyunit.co.th
www.tinyunit.co.th
www.tinyunit.co.th

Certificate

The complete raw certificate details for www.tinyunit.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSPaYgX6iJX4HLXz1d7s
twDGsJwMS2zTIbNAunm7jD3yRyy5Wof7OCnklwly3sWsdjHkgCh3wJoirH9IZRny
zazvaNxNM8EsdVzEQM2uAtD1GnIAqXlSy50ySkAt+0mRSb2H7io4zTJoRFAfSFpy
sfGdo9z7TQVhNtb92/fYGko4hY6lz3rzow3za54TkXvj1GETPpt36YhUoUC3RT6u
eWWs0faKTv2ydSMxh+D/8DNamPpVopbJuqXmEcmfwDFHaFGO1VuWdX4HOdI9RTIc
xrU2G5W+mXZyGPAGyFGj7uozHQiY1yJHUIEfq8A0mCnW984631zbUeacIqSCLTXM
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 24224679592998286935823623170
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-21 03:34:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-24 15:15:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tinyunit.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24381672660391695934830146769874310624783901891081289312633509308232733903865587969228077490279222552754898797112657120206912308299410228320603065666219983025387345691975801832830490610158498913216053580419553705444161936867262516474713546023623524711088009402785135240387320117210789182254587499925088393721972210901107400393452759009557713637485148092783991439667984631005331921243255959870605544591216389786163219956842772695573353628537030443294036020831633330863924757259866596774410239513437213083446890071505214256384787844553517915414056041653706579050072730497744765826423694455306294002752527218723618409657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tinyunit.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tinyunit.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb5e41896b925f321b847cdc1c6488792c769a95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164206889f60000040300483046022100e21557fdfe9ce5e52d870a2a294ce887c4042b5c67adc6375d6870042a43850c022100dea6fc4a0d1bb1d81995e4525149b156d00d9200d9e536dcee8d999fae310ce10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000164206889490000040300483046022100e97d30ee33d16ad88bd5852b9ef9ac3fabfa02f938e44bfb2ca148120b663b9c022100cb00ee71d2ccce7ea17dcc1bb0af98058305e98650e85252fdef5c3922a4916f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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