www.vespa.co.th

- VESPIARIO (THAILAND) COMPANY LIMITED -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3a:e5:a8:ef:9c:6e:4a:f8:e7:5c:53:22 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VESPIARIO (THAILAND) COMPANY LIMITED

Organization: VESPIARIO (THAILAND) COMPANY LIMITED
Organization unit: ITD
State / Province: Bangkok
Locality: Huai Khwang
Country: TH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:e5:a8:ef:9c:6e:4a:f8:e7:5c:53:22
Serial Number (int): 18227772359942749134272615202
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: da:f3:e1:20:aa:ef:81:cd:7f:23:ac:8b:1c:76:80:a8:ca:b8:70:60
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): c4:a7:6a:61:62:24:fa:7a:5d:2d:42:92:ac:b9:d9:09:b1:fb:4e:27
Fingerprint (sha256): 9d:12:d0:5b:65:0c:ec:9e:14:82:77:31:da:08:3d:e4:cc:fa:16:cf:be:f6:2d:28:62:68:86:ec:28:7a:1a:86

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.vespa.co.th

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vespa.co.th

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vespa.co.th
vespa.co.th

Other certificates including the domain name vespa.co.th

(limited to 100 certificates)
inventronic.com
pay.emma.to
www.vespa.co.th
builder.itclub.ro
vespa.co.th
vespa.co.th
vespa.co.th
www.vespa.co.th
vespa.co.th
www.baristhename.com
vespa.co.th
pass.kitomer.app
auction.vespa.co.th
www.vespa.co.th
vespa.co.th
vespa.co.th
gujaratartcorner.showitmax.com
vespa.co.th
vespa.co.th
vespa.co.th
vespa.co.th
builder.itclub.ro
events.ceyentra.lk
api.otomate.co
employees.ummnh.com

Certificate

The complete raw certificate details for www.vespa.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18227772359942749134272615202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 03:02:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-01 09:08:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bangkok'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Huai Khwang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ITD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VESPIARIO (THAILAND) COMPANY LIMITED'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vespa.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813556551382101903484425319752082840694888132721615546644656320487227059585337308990771665005381440045731168585228192296013396732788029237327381325296245988270497910550142218175929521839991857334188755862000888447160920868863271167044063975803851455886772022689816002684179139841434033758010904970341650561478498085839021090442600017333591593201073267930255315740844776377160586937688269426615618368248491210109753546821192997931661667453572030383696300863495222839738203330737284384143674948470807759925719088382276258971777929903676389855326978445829227496283849419027029664478246731697318454153178265071420242416834892028457437388916187165886986207667657134152285404692627594297759571968957001685674471048845731127346182893530478028965823019338529932556810646306562206901037243227007603420224233620036670477259011386254560688897971585034520782114569035544100855717236161851091331207279975707398343287600548545320853787288809850061762825427927012489466226306990008505771625038669239265399523889531864817810132088072720735077195702366342497492685897485507947613518290266352875143469058500429507573535305555066651994274641935961668673373000483772312254208359977544122608792515998622447820800286114836874492464695385000517851402404957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vespa.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vespa.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							daf3e120aaef81cd7f23ac8b1c7680a8cab87060
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a5e56901653933f45517a2dd0fc03cd622d3909177535c8852123379cd0909620ad7cc4a8896244bc84de288855a07b7b9ac0c92b48dfe8123a009c621022f19296748c992fbf6295734a2b4e443d5f1e5d0e60634fcfa34589bd347eb4579423cd9dcf5db0a112e9a96f004d807b79658232d8ff8e3cfc279a50a3c602d100dc800fa7bc5966cf736fd33e5b3748dccc8dc998fc1500fb26652a63b6ff97cebcce834c403cb988db6256ed5d28f8f38b45f983aaa4df9dbd524c533806475c256ac1404b5c4c41aea36c33eeebd3e2e28f03c6abac1e71746e21652a6f09c099f2238c00191612cda938975bdca9ed9a4754fd2c3af202794c9f3c4a96e59a0