sbl.cgsec.co.th

- Country Group Securities Public Company Limited -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0e:86:ee:22:e2:f3:fe:a2:4d:1c:33:35:9c:db:1b:c3 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Country Group Securities Public Company Limited

Organization: Country Group Securities Public Company Limited
Organization unit: Country Group Securities
State / Province: Bangkok
Locality: Patumwan
Country: TH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:86:ee:22:e2:f3:fe:a2:4d:1c:33:35:9c:db:1b:c3
Serial Number (int): 19309789697514267374230664576052698051
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 44:38:71:df:af:c3:2a:bc:eb:ff:31:cf:78:ab:59:01:ae:3e:6e:de
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): ff:66:59:84:48:7d:46:e6:eb:48:36:26:7b:a4:b8:e8:4d:23:b7:7c
Fingerprint (sha256): 66:2c:e9:cb:77:9a:55:79:34:c9:f4:36:26:b4:0f:83:ec:0b:a6:f4:2e:92:42:96:a5:da:30:38:3c:08:14:51

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate sbl.cgsec.co.th

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sbl.cgsec.co.th

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sbl.cgsec.co.th

Other certificates including the domain name cgsec.co.th

(limited to 100 certificates)
trading.cgsec.co.th
www.cgsec.co.th
sbl.cgsec.co.th
trading.cgsec.co.th
www.cgsec.co.th
trading.cgsec.co.th
*.cgsec.co.th
trading.cgsec.co.th
qatrading.cgsec.co.th
trading.cgsec.co.th
foreign.cgsec.co.th
*.cgsec.co.th
sbl.cgsec.co.th
bcast.cgsec.co.th
www.cgsec.co.th
www.cgsec.co.th
bcast.cgsec.co.th
foreign.cgsec.co.th
www.cgsec.co.th
mforeign.cgsec.co.th
foreign.cgsec.co.th
mforeign.cgsec.co.th
www.cgsec.co.th
foreign.cgsec.co.th
trading.cgsec.co.th
qatrading.cgsec.co.th
trading2.cgsec.co.th
*.cgsec.co.th
www.cgsec.co.th
trading2.cgsec.co.th
trading.cgsec.co.th
bcast.cgsec.co.th
mforeign.cgsec.co.th
www.cgsec.co.th
mforeign.cgsec.co.th
trading.cgsec.co.th
bcast.cgsec.co.th
dlcgs.cgsec.co.th
trading.cgsec.co.th

Certificate

The complete raw certificate details for sbl.cgsec.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuK9eG6jM1evaBzZ0KAa
orm542PZnWwvbfx6wwp6qSwieR6gp745uuUv1IbFW6HmkjGRG1Xa7dHRBqwRsQK1
FMfLI5dLecWyxPPlxmZapI6glYF/hZyd6ZHCBpU8Xm+CSB5SwKnZxOoa42PiaNig
1nLvzdE7EEhLo6EdPQNjQIC7iDZqaatysR9IgstJceuDsKwGFZaDipKuJoriVEbn
eGyL4FaPQoqPQ6LJaArxmbvkEyvi85PcdIcHzwbEdg4i4baDJK4yfilCFXyqBXPk
MMtpp030Ag3iCroWYsVP+WO52qIL842Fh5xvLjMT6eNk1nnPJkJCSQ951UzmkgN0
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19309789697514267374230664576052698051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Patumwan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Country Group Securities Public Company Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Country Group Securities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sbl.cgsec.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23087181223657189416969437770626655947561525370365340187895474516343508032038590816477726048807751107656711416897842932823660191778618479528028451617273697125666641509134960227963046838959538002341856297283959309797044415749990034651732793698183979344476532753359805028049961526287115748469305321661287582625744382472986080061644437743285553701848855456135317606067244095719682461565588899314172395827902246875959181224484295091214520590610788306666139344918556664448401595600411527736603685741280045801393687330751586670249027205349561988596549545730076204333995362962768320034517786431014504103975381480507357492313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							443871dfafc32abcebff31cf78ab5901ae3e6ede
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbl.cgsec.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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