DV SSL/TLS Certificate for kanda.co.th

Certificate is witin its validity period

Issued by DigiCert Inc (RapidSSL TLS RSA CA G1)

About the kanda.co.th DV SSL/TLS Certificate

This certificate with serial number 0a:fd:49:40:50:f3:e3:bd:cb:36:12:ca:01:49:a4:e8 for kanda.co.th was issued on by DigiCert Inc.

This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for kanda.co.th provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Organizational unit: www.digicert.com
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0a:fd:49:40:50:f3:e3:bd:cb:36:12:ca:01:49:a4:e8
Serial Number (int): 14607416774615582842057953935513724136
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: bd:f9:db:cd:13:82:09:3e:dc:88:28:44:29:bb:c1:1d:2c:2d:00:4a
Authority Key Identifier: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (SHA-1): 81:ab:4e:77:39:e1:5d:b4:ba:0b:7b:b7:99:46:b2:bf:6a:9d:d1:bf
Fingerprint (SHA-256): 22:b0:0e:54:35:ed:b9:5a:64:20:72:01:eb:e6:1f:90:43:1c:7b:a6:1f:29:51:ce:36:1d:10:f6:ed:43:11:04

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation Information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate kanda.co.th
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for kanda.co.th

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

kanda.co.th

X.509 Certificate

The complete raw X.509 certificate details for kanda.co.th in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpRxV6A3pP85Rge13Ek6
MBGpzf0waWELCUXIEtY7xhZQP0ezI47GiFI7yyVRWNEFX48lJ6EMCEUP2Mcf80at
ketzYqTWCV+zGdQhJTCpNxICxk4Yjp/z3RKK/rKt2JkvilkZprEnVBNo7F69IyD8
Mb1wAj8G8KaQAO1AQSl/y5JAxDUWZmVIafiqHm5kmKe50TN9KD1Fs+3jMMv5fbbe
2viAJhEa9XetCW1Sb/VpdIB+wZNullFXSUeyygWoHBXc50oYqJkt/wFJE9THAXFQ
UJVssxRjCHQh5lq+T9CSIYNmEXCKhz6Olkn6oI8RNZ/ci+zC7bfu5he85WgKGAVA
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14607416774615582842057953935513724136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-06-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kanda.co.th'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16989132710375741870404850005240081239492389399872440893925140319188903177564987194038409561983532391784566380434541531933316348585220471580958828953944450039961672409242840388722630321101751779053075009667879824212997146819387199959956209045565100908806964270297379839807061328619736362356125604788732586484835001509961690038779592943550934063289609511669960585500282450869594948037442141386540677752780075934345593766711072173452797404389489416822849979936755190599388441786605971252458499884566167992686855687573388176699993851517700340856050922929751234107482996381016153492351434567197294923272906023150920482911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdf9dbcd1382093edc88284429bbc11d2c2d004a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanda.co.th'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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