DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

mof.go.th · 45.60.34.44:443

Verified

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
CN=www.mof.go.th
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Atlas R46 DV TLS CA 2026 Q3
Valid from
2026-08-13T11:40:52+00:00
Expires
2026-11-11T11:40:52+00:00
Days remaining
38
Serial (hex)
01DBF19127DCED5FB55D3F3A36FD6576
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:www.mof.go.th, DNS:mof.go.th

SHA-256 fingerprint

84:23:4E:7C:41:76:DC:D3:43:97:AC:5B:F2:F7:B4:FC:42:32:12:FA:FA:AC:C9:2E:08:85:45:46:14:33:73:E4
Certificate extensions & PEM
subjectAltName
DNS:www.mof.go.th, DNS:mof.go.th
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication
subjectKeyIdentifier
63:3F:8F:7A:B1:29:2E:57:61:40:BD:5C:42:59:18:CB:3E:89:CB:7D
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3 CPS: https://www.globalsign.com/repository/
basicConstraints
CA:FALSE
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/ca/gsatlasr46dvtlsca2026q3 CA Issuers - URI:http://secure.globalsign.com/cacert/gsatlasr46dvtlsca2026q3.crt
authorityKeyIdentifier
DC:52:7D:D4:10:17:BE:E5:FB:01:44:B0:FB:19:CA:C7:EE:D0:28:EB
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/ca/gsatlasr46dvtlsca2026q3.crl
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Aug 13 11:40:56.920 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:73:CB:A2:23:AD:75:49:76:41:0E:16:F2: C7:2A:E3:14:7E:FE:D0:32:4A:03:67:DB:26:CC:13:57: 20:7E:4A:90:02:21:00:A9:A1:E4:AC:B7:BB:85:27:2C: BE:D2:D6:6C:D8:A1:F6:5B:7B:5A:50:E9:5F:E3:A8:39: DC:C9:96:E7:6A:00:02 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D: E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A Timestamp : Aug 13 11:40:57.074 2026 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:8F:86:FE:78:82:A0:06:24:75:B3:FE: 1E:DA:70:70:6A:86:05:BB:DA:AC:D4:12:77:C1:79:DB: F9:A2:DF:76:1F:02:20:20:EF:99:68:E0:B9:77:40:75: 22:54:D6:76:CF:86:31:2B:DE:8A:27:72:16:33:90:2F: 20:92:2C:29:4C:67:2C
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-04T00:03:02+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign Atlas R46 DV TLS CA 2026 Q3
Issuer
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Valid from
2026-04-22T03:00:05+00:00
Expires
2028-04-22T00:00:00+00:00
Days remaining
565
Serial (hex)
85AC708351E68DF704248BFDF17E4272
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

99:AE:C9:2E:EA:8F:B5:36:F7:4D:FB:FB:82:44:E4:C8:F5:AC:3B:65:8F:7A:98:86:19:79:7A:4D:04:AC:10:36
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication
basicConstraints
CA:TRUE, pathlen:0
subjectKeyIdentifier
DC:52:7D:D4:10:17:BE:E5:FB:01:44:B0:FB:19:CA:C7:EE:D0:28:EB
authorityKeyIdentifier
03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
authorityInfoAccess
OCSP - URI:http://ocsp.globalsign.com/rootr46 CA Issuers - URI:http://secure.globalsign.com/cacert/rootr46.crt
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/rootr46.crl
certificatePolicies
Policy: 2.23.140.1.2.1 Policy: 1.3.6.1.4.1.4146.10.1.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=BE O=GlobalSign nv-sa CN=GlobalSign Root R46
Issuer
OU=GlobalSign Root CA - R3 O=GlobalSign CN=GlobalSign
Valid from
2019-11-20T00:00:00+00:00
Expires
2029-03-18T00:00:00+00:00
Days remaining
895
Serial (hex)
75A8BAD878F8AF305F72DD1C1140DF3A
Signature
RSA-SHA384
Public key
RSA 4096

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

A6:3C:13:98:B5:F8:DD:2D:43:2F:BE:4C:2C:19:14:2B:EA:6D:5D:02:21:FA:E7:94:71:8A:E7:59:7A:CC:A9:6D
Certificate extensions & PEM
keyUsage
Digital Signature, Certificate Sign, CRL Sign
basicConstraints
CA:TRUE
subjectKeyIdentifier
03:5C:AB:73:81:87:A8:CC:B0:A6:D5:94:E2:36:96:49:FF:05:99:2C
authorityKeyIdentifier
8F:F0:4B:7F:A8:2E:45:24:AE:4D:50:FA:63:9A:8B:DE:E2:DD:1B:BC
authorityInfoAccess
OCSP - URI:http://ocsp2.globalsign.com/rootr3
crlDistributionPoints
Full Name: URI:http://crl.globalsign.com/root-r3.crl
certificatePolicies
Policy: X509v3 Any Policy CPS: https://www.globalsign.com/repository/
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIQdai62Hj4rzBfct0cEUDfOjANBgkqhkiG9w0BAQwFADBM
MSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEGA1UEChMKR2xv
YmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xOTExMjAwMDAwMDBaFw0y
OTAzMTgwMDAwMDBaMEYxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWdu
IG52LXNhMRwwGgYDVQQDExNHbG9iYWxTaWduIFJvb3QgUjQ2MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEArKx0MuizZeW67UMmHaaJDUW6KYiypB1j3dPB
LAlXiTmhVelnNHcMbuRVHVIl0hNrXuEdqbd9iTJfDZ6fLHpjYEAfprC2eI+ZVJYI
WK7kBrxiBQIWv6+oIwO2lA+8bmzCy9Wmuwzp9sEC+yHeZt0Xq3RC7/B0LyX06mtV
W5Dbnd9ehwpA+60Za/v3ymCI3trBj9au1X/UPIPu1xZMg0UzayfQhtAcLWvzq33x
han1KNKt7/OESxyH/BOjOnKiWhEr1idxJ+2BLW1mgZKHtBtYesw/CvpGT014XPgr
SOMEhMtd9rRqs2X8Qp5RJiMgyz0U+YHtZRYATxpkl2YIz4x74yvAnfkU8hvxVmoW
vyyFhc14OJrrQmoCNBiDF06UVvi2grXzlt09875/IHc+exkjayzUcnNDV33g+Ndp
Txc2BPnAkGA3Rd7mDNh0ja6com10XUK+BvXZZG4CEKyJsEw7B01AfiTFipiCeY6k
p4IgjSP6J3HJ38ZBdKBN9pEW3EaMXyljMVlxDNhvwrYyffvmXVOmfhX8u3V8Xez4
9hcc7MdrGcvze/ArB6XZbHlUdmydHKZuDul5DKgjaqPfGzAxn7FUe/5qy2aq3GXQ
op5Kmgcha4GP28RZ+t4iwASc46pbNpPoPb16oZ0LdrELx539z5ioBsL4KqOhg6C3
JXKlAuMCAwEAAaOCASYwggEiMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8EBTAD
AQH/MB0GA1UdDgQWBBQDXKtzgYeozLCm1ZTiNpZJ/wWZLDAfBgNVHSMEGDAWgBSP
8Et/qC5FJK5NUPpjmove4t0bvDA+BggrBgEFBQcBAQQyMDAwLgYIKwYBBQUHMAGG
Imh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9yb290cjMwNgYDVR0fBC8wLTAr
oCmgJ4YlaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9yb290LXIzLmNybDBHBgNV
HSAEQDA+MDwGBFUdIAAwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFs
c2lnbi5jb20vcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQEMBQADggEBAGBD9cJLVP2v
gPSlomstHU38guKTe4ELEFOnM9OnuzK2HlzmgVSPdf4Go7r8FZt4+d8lVs7JPt2z
THYK/cA1f/DYT56clWZO972GbvjOwmHop4LqAe902mRBxEo966EFsaBqwk8zzexW
nPZ29CXHc3doU0wXhIPzch5d18Mp4y1RRjybOODc89QJSBataMU9rIHNTF6rePxw
gL4/k/zrGiCRCRJ+iblTL/WIhm0ENfNJMTxlbMHxPYH4aiHarVBXpXPkiZ/85knD
XNcnTUTZKEtY6xJExiC+5IHDjdnWz/V2d8MkQx+o7TPbwgF/SVcYcp0GPJG6RkLD
rkNz7Wn9gck=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →