bib.uob.co.th

- United Overseas Bank (Thai) Public Company Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 54:33:e8:cd:00:9e:3e:41:61:a2:8b:1a was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

United Overseas Bank (Thai) Public Company Limited

Organization: United Overseas Bank (Thai) Public Company Limited
State / Province: Bangkok
Locality: Khlong Toei
Country: TH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 54:33:e8:cd:00:9e:3e:41:61:a2:8b:1a
Serial Number (int): 26059495412444434225791404826
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 80:40:60:0e:c0:1c:d5:82:53:0d:c1:63:42:b1:a2:6e:39:e5:b4:8c
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 13:c1:3d:1f:bf:69:cc:61:0f:3c:1a:8d:4f:43:88:86:18:87:67:05
Fingerprint (sha256): 55:cc:19:4a:83:9f:c6:c0:e5:7c:f8:c6:8c:67:98:98:2d:e5:79:f8:8a:f7:db:d3:c3:b7:97:23:e1:90:14:f0

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate bib.uob.co.th

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bib.uob.co.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bib.uob.co.th

Other certificates including the domain name uob.co.th

(limited to 100 certificates)
ebill.uob.co.th
ereport.uob.co.th
u-www.uobgroup.com
ebill.uob.co.th
www.uobgroup.com
UOBgroup.com
bib.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
online.uob.co.th
UOBgroup.com
epay.uob.co.th
ebill.uob.co.th
www.uobgroup.com
online.uob.co.th
www.uobgroup.com
www.uobgroup.com
www.uobgroup.com
www2.uob.co.th
uob.co.th
www.uobgroup.com
ipp.uob.co.th
authenpoint.uob.co.th
uob.co.th
ereport.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
epay.uob.co.th
ereport.uob.co.th
epay.uob.co.th
epay.uob.co.th
www2.uob.co.th
www.uobgroup.com
ereport.uob.co.th
u-www.uobgroup.com
ereport.uob.co.th
uatcms.uob.co.th
u-www.uobgroup.com
UOBgroup.com
www.uobgroup.com
www.uobgroup.com
www2.uob.co.th
www2.uob.co.th
u-www.uobgroup.com
u-www.uobgroup.com
www.uobgroup.com
u-www.uobgroup.com
bib.uob.co.th
www2.uob.co.th
www.uobgroup.com
UOBgroup.com
ebill.uob.co.th
bib.uob.co.th
www2.uob.co.th
www2.uob.co.th
bib.uob.co.th
mail.uob.co.th
bib.uob.co.th
www.uobgroup.com
www.uobgroup.com
cms.uob.co.th
epay.uob.co.th
www.uobgroup.com
www2.uob.co.th
u-www.uobgroup.com
ebill.uob.co.th
ereport.uob.co.th
emm01.edm.uob.co.th
www.uobgroup.com
ebill.uob.co.th
www.uobgroup.com
mail.uob.co.th
www.uobgroup.com
u-www.uobgroup.com
app.uob.co.th
info.uob.co.th
www2.uob.co.th
u-www.uobgroup.com
www2.uob.co.th
www.uobgroup.com
uatbib.uob.co.th
www.uobgroup.com
bib.uob.co.th
epayrd.uob.co.th
ereport.uob.co.th
ebill.uob.co.th
ereport.uob.co.th
bib.uob.co.th
bib.uob.co.th
ebill.uob.co.th
UOBgroup.com
www2.uob.co.th
uatcms.uob.co.th
uob.co.th
epay.uob.co.th
www2.uob.co.th
epay.uob.co.th
uatcms.uob.co.th
www2.uob.co.th
www.uobgroup.com

Certificate

The complete raw certificate details for bib.uob.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z6GYOgUcGrMNXsy+T2d
nFL7ZbBYWLRh6kCGiPjZiodx0QWXporxQtjgb7ZOkrnfQvemOJA4AeHys1PEYEC2
BlLtHTzDxQ26akwH1SjzDbdwRbPq/wkJk5GworxGZ9PbO5/w6D24SUs04KaR0dif
hNcQLa/HvlODr9bpclGSb7jtYLR+6Z1xJn2fL3XuWDvp1XvbizmTHO7BK4oeiKeZ
Wb00U07GS+4wT5Tm3bXSZnxQ/lW/DfzsXrjZkRYCEg6tFsIo83O2Zf8TDOsgj62y
px6cME1v5JfkKgS2h1wKo9AO/uLpPXapagpXDR1OGuZyCAHEYVulTvDC4kcU+nx+
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26059495412444434225791404826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 08:46:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-30 08:46:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Khlong Toei'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Overseas Bank (Thai) Public Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bib.uob.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28986743386887752807773066192203740438249272266586284047429181623721524617148709785356490164497229017711503917312212881450515221981801205971515732908428084456412283713285938336478601823374009180443218333969300077759386221491635761997065900934970109352344110237159325663966740325493460354321526715227091810418791427555630184001094546566904924352411828349355519793436411620348980256821673675891394060271242337375815288988777221575967579219113007298892551131725153712392777316163166409692182528284919567606541307239537755706425090480148668305335496993070122854349730350921419018180644086061430314844057233283967585386079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bib.uob.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8040600ec01cd582530dc16342b1a26e39e5b48c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085af4af00af9679dbc58bc79ddb44c0dd51062a89649a39c80d4e75190bba41a7f1d07c8b6bb2e402605c1cbc525861d3d7dca952c537011e432bd430c097da188f6e1ce1cd8c0d040aa4cc1278c6d7af9fc16f549d8518f54c4a1772f9e511dfccb3516d8051b6b91163dc310793edd00898bf5e0489c0a647f7a03a78f787741027bed8a592cfe6fa8093d94de8f4cbbb89a1765623a4ec037cc66402a290118b7acac820febcb351d2affea75c78daceebf73cb8839aeafe345bd9ea6a700871c652a1c3d0353b6df1c185488f582ad3e0f851a3d7b43cb4c005893891be88b150fec3ccf267e17a2ba47b268e81e9fa9f46a562e491279632e2397e53c86