aportal.snoc.co.th

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0b:c4:d2:d6:6a:20:81:d2:50:0a:72:f3:34:94:2a:ea was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aportal.snoc.co.th

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:c4:d2:d6:6a:20:81:d2:50:0a:72:f3:34:94:2a:ea
Serial Number (int): 15643474431595155452641468628128246506
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a3:45:89:8c:d4:0d:bb:d6:ed:a2:09:48:43:ee:f6:db:53:8e:6d:78
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): a6:07:31:68:82:56:85:88:48:6f:10:39:3a:f6:c8:08:a9:cd:8a:b1
Fingerprint (sha256): 90:13:d4:aa:f6:df:ed:f2:83:22:cd:bc:4e:e1:ce:cf:53:69:65:7e:87:43:9a:6a:ae:c8:ad:63:00:5d:4a:f1

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate aportal.snoc.co.th

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aportal.snoc.co.th

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aportal.snoc.co.th

Other certificates including the domain name snoc.co.th

(limited to 100 certificates)
status.msp.conguide.com
status.msp.conguide.com
status.msp.conguide.com
site24x7.cluster2go.com.br
site24x7.cluster2go.com.br
maas.cherrylabs.in
www.snoc.co.th
groupazura.consultantinfonuagique.com
aportal.snoc.co.th
look.snoc.co.th
www.snoc.co.th
look.snoc.co.th
*.snoc.co.th
*.snoc.co.th
azura.mngfromcin.com
www.snoc.co.th
monitoring-tool.tho.mx
sni.cloudflaressl.com
site24x7.cluster2go.com.br
status.msp.conguide.com
status.msp.conguide.com
status.msp.conguide.com
www.snoc.co.th
site24x7.cluster2go.com.br
occ.glcortex.com.br
look.snoc.co.th
site24x7.cluster2go.com.br
www.snoc.co.th
status.msp.conguide.com
24x7.iscorp.com
status.msp.conguide.com
cloudworks.tamiser.in
www.snoc.co.th
monitoring.vigt.com
status.msp.conguide.com
site24x7.cluster2go.com.br
status.msp.conguide.com
maas.cherrylabs.in
sni.cloudflaressl.com
status.msp.conguide.com
*.snoc.co.th
eagle.snoc.co.th
site24x7.crownpeak.com
www.snoc.co.th
aportal.snoc.co.th
status.msp.conguide.com
status.msp.conguide.com
status.msp.conguide.com
status.msp.conguide.com
groupazura.consultantinfonuagique.com
status.msp.conguide.com
status.msp.conguide.com
24x7.iscorp.com
site24x7.cluster2go.com.br
*.snoc.co.th
www.snoc.co.th
site24x7.crownpeak.com
status.msp.conguide.com
status.msp.conguide.com
site24x7.cluster2go.com.br
status.msp.conguide.com
24x7.iscorp.com
status.msp.conguide.com
status.msp.conguide.com
aportal.snoc.co.th
cloudworks.tamiser.in
azura.mngfromcin.com
status.msp.conguide.com
monitoring-tool.tho.mx
monitoring-tool.tho.mx
status.msp.conguide.com
www.snoc.co.th
site24x7.cluster2go.com.br
status.msp.conguide.com
www.snoc.co.th
maas.cherrylabs.in
status.afgtechnology.com
www.snoc.co.th
status.msp.conguide.com
monitoring-tool.tho.mx
*.snoc.co.th
status.msp.conguide.com
status.msp.conguide.com
24x7.iscorp.com
mysystems.inteliwaves.com
site24x7.cluster2go.com.br
*.snoc.co.th
aportal.snoc.co.th
www.snoc.co.th
status.msp.conguide.com
status.msp.conguide.com
status.msp.conguide.com
www.snoc.co.th
*.snoc.co.th
occ.glcortex.com.br
occ.glcortex.com.br
status.msp.conguide.com
status.msp.conguide.com
aportal.snoc.co.th
look.snoc.co.th

Certificate

The complete raw certificate details for aportal.snoc.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqsr/f6XejGQMCc5Vto3X
4NgNDVz3iXGFXcACezPeprOKS4gnanjWshiG5TPtjRvtccykkDaKV/rRE+sQBvoh
gmEUPlHleZQsbqHw/QCU5xGVmUwtRY0dmE/RZFoSNu4pB86GsZX8UPEFDUShQlx0
U7M2adDnElfBsFBW1GEkhLglAaZ/jvxoqYYylsSnoE7VUgE5HhWcQr96O19wlAHJ
KKiffEw/btZw1O5oXWtdEhYjJNe/lbf9UuJMT2aXyfr83Y7soUPioS+9pqEpCKkG
rCqpWh+1xR6J0cgXK8Vx9CwDVGRGv6VnmuYORaidnjxokpPXoFNmTjmrWHJV7EzX
qZujsMPvFJWeqLvH7Xgj8rNrEPOos4IOr1XEsw5KS1RWQU19heDmwtRdDpjOrTp5
dG4C3BR2RXncH7b2sGeSC+FgTCiRRLDYQlYFkpbBmm5BsgAb8ZUv6hBo/B8Op5sP
Z9nObXnOhR1OKThWgmpMBLGQH6LcAuvyK5IevL9zjLR4UHRcoCc8uOUIOfERwsYw
mdcyk+fIjflyw0GvduDA1r9vd60sITmwnrwE0/EBSgXNYskvebHkO5ikBzKNGHE/
XhAURwFEk3bED25FsPKMGVEnoj1r4z22GbG8wgPflGyiTOsTURMSQTKAHANL89AQ
YH/9AHF+EfUHzGXop54IhZECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15643474431595155452641468628128246506
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aportal.snoc.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696774490609658206358813769582453434269445431152117909716282672424464125687509178017217403514080782478842048934477217409294384706393854427168470274427999198937639191754516508005441640619607930412663208604414358010506154631791102893695841183735294404638062134056010981315250977664202206294181030748383371497156359700231266505641046467004784975114077461289907003270294687586683727635254507096908100427295452073522524697618679733418938756446560291591812549364757211265496906327284936829308496886742906418530788537473777492650568005568590149485630037135791585455001296906367931175499883629127266874407156540887805221561404248959851045895933765842008644293301331092699885133855910530893899287440772835780210686388273418593631665821161330144597192556278588180990833098342426716290852425960787766018882654886347226283243650172138199811870829603696498865775599413253837158392959495910148590475791145144689923809933355605473957234706953690573443651726021628258852381311293078320884809844094914497205397021757212530830514883091870446506852704236393007992045276047651136663177974228601103433106549790971706227376106868716218697045867553454546816844128936082928132764622343196244457210327377549378150689392274872316883899403277636365300135396753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a345898cd40dbbd6eda2094843eef6db538e6d78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aportal.snoc.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000161bd49c02200000403004730450220328277d90471028f4a930e06bd27223b9cbb5e412279ac587c685735503066dd0221008c395b1fad6b9bdf1b6db653665d6aef93034aa9ceb76b1d71cc7e1b86115a0a0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000161bd49c00100000403004630440220605a46e992b08e1e0f94a4ea41d17f690a51a913514af106502ac676069ba4820220146281cdec5eb8057c1c9e5dbac902852a63992c08f0c133cd2210596ef0a2f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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