DNS
THE CERTIFICATE BEHIND THE CONNECTION

TLS certificate checker.

Inspect SSL/TLS certificates for any public domain or subdomain.

Checks HTTPS on port 443, including subject alternative names, validity dates and the presented chain.

SSL certificate

TLSv1.3

workd.go.th · 104.18.25.135:443

Verified
The certificate expires within 30 days.

Certificate chain, hostname and dates verified using this server’s CA store.

Subject
C=TH ST=Bangkok L=Ratchathewi O=Digital Government Development Agency (Public Organization) CN=*.workd.go.th
Issuer
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Valid from
2025-09-10T00:00:00+00:00
Expires
2026-10-11T23:59:59+00:00
Days remaining
9
Serial (hex)
0DBBE238BBB9E6DE5F4FAEA134077BAB
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

DNS:*.workd.go.th, DNS:workd.go.th

SHA-256 fingerprint

D4:6C:C2:18:9E:EE:A6:D7:70:7E:B2:55:F0:8C:38:83:D8:C4:EF:B5:D8:EF:B6:F7:9F:9A:6A:20:6A:2A:FE:A6
Certificate extensions & PEM
authorityKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
subjectKeyIdentifier
74:B0:DA:56:DB:B8:33:E4:F5:3F:EC:7A:FA:72:55:D5:38:8E:82:49
subjectAltName
DNS:*.workd.go.th, DNS:workd.go.th
certificatePolicies
Policy: 2.23.140.1.2.2 CPS: http://www.digicert.com/CPS
keyUsage
Digital Signature, Key Encipherment
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt
basicConstraints
CA:FALSE
ct_precert_scts
Signed Certificate Timestamp: Version : v1 (0x0) Log ID : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9: 82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77 Timestamp : Sep 10 01:52:15.507 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:46:02:21:00:B8:D2:3B:C4:D4:4C:AB:DD:2F:9A:E5: 56:2D:B8:23:0E:60:EC:5A:F4:84:4F:15:E4:84:19:4A: 39:0D:FD:36:F1:02:21:00:CB:D5:F7:32:6F:32:99:DD: 62:91:8D:59:00:FF:EF:28:48:59:74:D5:E6:F4:9D:95: 47:AF:03:BB:38:26:69:7B Signed Certificate Timestamp: Version : v1 (0x0) Log ID : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB: C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD Timestamp : Sep 10 01:52:15.568 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2E:31:82:AD:FF:2F:51:EB:CA:E9:C8:BF: 1C:56:7C:1F:DB:77:DA:23:12:A4:A1:3E:BD:46:AB:2F: 11:5F:EB:92:02:21:00:C5:1C:DE:1B:75:45:BB:A4:53: 40:15:CD:B9:45:68:CD:CE:61:8C:08:16:04:33:70:AA: 01:C2:A8:19:F0:5C:85 Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65: 01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8 Timestamp : Sep 10 01:52:15.584 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:58:4A:9E:2D:F2:FB:95:39:C4:2C:CA:9B: C6:0F:44:0C:6E:BC:9C:80:D7:25:EC:0D:26:F4:8A:17: C1:12:35:95:02:20:30:8B:DC:55:95:AE:43:6A:33:DD: EB:A5:6C:70:80:62:16:70:37:ED:6B:3B:E8:A4:9F:5D: BC:45:40:84:9C:B6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cipher: TLS_AES_128_GCM_SHA256 · Checked 2026-10-02T12:48:22+00:00

Server-presented chain · 2 additional certificates

Chain certificate 1

Subject
C=US O=DigiCert Inc CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Valid from
2020-09-24T00:00:00+00:00
Expires
2030-09-23T23:59:59+00:00
Days remaining
1452
Serial (hex)
085F94C02D857BE8CC14FF53EDA23E2A
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

1F:8E:B9:E9:A8:E0:66:CC:5B:38:33:E0:6B:31:29:76:4B:62:26:39:D5:B1:63:F6:00:E1:C7:91:20:BF:3E:ED
Certificate extensions & PEM
subjectKeyIdentifier
74:85:80:C0:66:C7:DF:37:DE:CF:BD:29:37:AA:03:1D:BE:ED:CD:17
authorityKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
keyUsage
Digital Signature, Certificate Sign, CRL Sign
extendedKeyUsage
TLS Web Server Authentication, TLS Web Client Authentication
basicConstraints
CA:TRUE, pathlen:0
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.com CA Issuers - URI:http://cacerts.digicert.com/DigiCertGlobalRootG2.crt
crlDistributionPoints
Full Name: URI:http://crl3.digicert.com/DigiCertGlobalRootG2.crl Full Name: URI:http://crl4.digicert.com/DigiCertGlobalRootG2.crl
certificatePolicies
Policy: 2.23.140.1.1 Policy: 2.23.140.1.2.1 Policy: 2.23.140.1.2.2 Policy: 2.23.140.1.2.3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Chain certificate 2

Subject
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root G2
Issuer
C=US O=DigiCert Inc OU=www.digicert.com CN=DigiCert Global Root CA
Valid from
2024-01-18T00:00:00+00:00
Expires
2031-11-09T23:59:59+00:00
Days remaining
1864
Serial (hex)
0FE032AB844D033106C50C8E13C8B068
Signature
RSA-SHA256
Public key
RSA 2048

Subject alternative names (SAN)

No SAN extension was presented.

SHA-256 fingerprint

79:D5:7B:15:DF:A6:5C:28:70:EA:FE:11:B6:37:76:59:09:CF:E9:37:B4:9C:15:CE:7F:19:40:30:CA:B3:95:AD
Certificate extensions & PEM
basicConstraints
CA:TRUE
subjectKeyIdentifier
4E:22:54:20:18:95:E6:E3:6E:E6:0F:FA:FA:B9:12:ED:06:17:8F:39
authorityKeyIdentifier
03:DE:50:35:56:D1:4C:BB:66:F0:A3:E2:1B:1B:C3:97:B2:3D:D1:55
keyUsage
Digital Signature, Certificate Sign, CRL Sign
authorityInfoAccess
OCSP - URI:http://ocsp.digicert.cn CA Issuers - URI:http://cacerts.digicert.cn/DigiCertGlobalRootCA.crt
crlDistributionPoints
Full Name: URI:http://crl.digicert.cn/DigiCertGlobalRootCA.crl
certificatePolicies
Policy: X509v3 Any Policy
-----BEGIN CERTIFICATE-----
MIIEfjCCA2agAwIBAgIQD+Ayq4RNAzEGxQyOE8iwaDANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
QTAeFw0yNDAxMTgwMDAwMDBaFw0zMTExMDkyMzU5NTlaMGExCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI
2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx
1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ
q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz
tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ
vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo4IBMDCC
ASwwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUTiJUIBiV5uNu5g/6+rkS7QYX
jzkwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUwDgYDVR0PAQH/BAQD
AgGGMHQGCCsGAQUFBwEBBGgwZjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZGln
aWNlcnQuY24wPwYIKwYBBQUHMAKGM2h0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNu
L0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNydDBABgNVHR8EOTA3MDWgM6Axhi9odHRw
Oi8vY3JsLmRpZ2ljZXJ0LmNuL0RpZ2lDZXJ0R2xvYmFsUm9vdENBLmNybDARBgNV
HSAECjAIMAYGBFUdIAAwDQYJKoZIhvcNAQELBQADggEBAHRBl3jN7+XHBUK0dZnu
hMdoNwD1nCROU3BTIh1TNzRI0bQ0m5+C/dCRzzlqoSAFHUlOi+OiDltWkXTzmQn6
Z8bH5PFBy5sYpc/8cNPoSzhyqcpvvEZvv/Ivc0Up+dzma7vBDJC9WrMRUUlSFSQp
kdXSmphDNkXJsgARmxzc18IN6LYMRiOWlY7RE2F900pPW60BvJHHNCX0bbSRj/Ql
bmVq8wuftBD++D+RS8K++ujpMjFBROyWfBX+woQDGsMazkmgulQdnZrdj476elOL
axRvrSgEorju1kJM7M65z2RUZrfzQYW/1rs8mRUXin6iEtad/Rv1ZI1WGYmWPyBm
pbo=
-----END CERTIFICATE-----

One endpoint on port 443. Server-presented chain; no revocation, OCSP, CT or full TLS security scan.

View certificate JSON

Registration / WHOIS →DNS records →