*.jubileediamond.co.th

- Jubilee Enterprise Public Company Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 22:00:61:40:0f:9c:43:55:42:8a:2b:8d was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jubilee Enterprise Public Company Limited

Organization: Jubilee Enterprise Public Company Limited
State / Province: Bangkok
Locality: Sathorn
Country: TH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 22:00:61:40:0f:9c:43:55:42:8a:2b:8d
Serial Number (int): 10522949585191039450043001741
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 8e:81:ab:39:ad:d8:ca:06:16:d7:02:ed:c0:4f:50:19:0c:f4:99:78
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 09:14:80:ec:66:c3:8f:17:c3:a9:ce:10:89:56:e5:11:75:b3:35:c8
Fingerprint (sha256): 53:d1:42:05:81:bb:fe:42:1e:c2:f8:b2:36:29:2f:89:69:64:d9:54:7c:45:8b:4c:f4:b8:99:62:d7:71:c0:a3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.jubileediamond.co.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jubileediamond.co.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jubileediamond.co.th
jubileediamond.co.th

Other certificates including the domain name jubileediamond.co.th

(limited to 100 certificates)
*.jubileediamond.co.th
azcuit.com
www.bbpt.ro
www.jubileediamond.co.th
angular-on-fire.petriproductions.com
*.jubileediamond.co.th
payee-link.likid.co.jp
dev.digiqc.com
www.higieneconsciencial.com.br
*.jubileediamond.co.th
partner-portal.goama.com
app.tokenate.dev
auth.jubileediamond.co.th
www.ilgmdei.com
www.bbpt.ro
kanzlei-stoetzer-rosenkranz.fastdocs.de
*.jubileediamond.co.th
*.jubileediamond.co.th
dev.digiqc.com
projetoeestilo.com.br
www.jubileediamond.co.th
www.jubileediamond.co.th
www.jubileediamond.co.th
partner-portal.goama.com
speeltuin.boekjekapper.be
bolsa.etraderex.com
projetoeestilo.com.br
www.vendlive.us
ch-caporal.elinmejorable.com
*.jubileediamond.co.th
dev.digiqc.com
css.banked.com
www.jubileediamond.co.th
bolsa.etraderex.com
admin.loyals.club
admin.loyals.club
baylingo.com
kanzlei-stoetzer-rosenkranz.fastdocs.de
octavian.ai
auth.jubileediamond.co.th
dev.digiqc.com
*.jubileediamond.co.th

Certificate

The complete raw certificate details for *.jubileediamond.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUOIwrNGdlCnKfgHvIC0
HLgNJLK//xPqdPGJXBkeEDxIj2skSq5p7Z/gTdnNLmVGiaAlYTsONX9whIhdLy7i
wrGO3YuzLyVEXu3RL0RInKW9ZYgraJoycuBuFLLlaNPmNBoK7rblzVxceZ53m/t/
cu0U+ddgNIuyO0ARfTGVytkJ1CM2QtrIWj1rivL7FRNcaBMrDA5r43nzxXLBmTDK
+r5yuJp3cpiRh83G4ZPJ7thyjnsRon5OzwN9Mv/ZBDzHdQPtlBvOOx6MchMjJpX3
7/UvcQbQuFVnyD0IS8NMdC61gX0gOxZ1ZRAicQZQRRjNg28YQ0vqcev0gYv3yQpO
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10522949585191039450043001741
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-20 06:32:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 06:32:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sathorn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jubilee Enterprise Public Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jubileediamond.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21367575904781279367146202821174541943075929968147037095693448723972086531993764666569135459755493943441624799956182267513525263159228744617517417249377354019063287089690403939506851411527904298625287827355479735215773429121509050101528932530681365280677032765538498812873352451424401345173666720555063122867632422301508337774705318034762466221601679800050711347197158642277507385126489484590341331561041340768498599758928577954094763895403641500461776864078791472136795442931009351292868344558868441587568780483846598250498979526219798033607574769623083864544886742896085007027390137611846288151776530732894806232667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jubileediamond.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jubileediamond.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e81ab39add8ca0616d702edc04f50190cf49978
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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