www.amdigroup.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:c3:6d:2d:8d:5b:22:e4:7a:9a:5f:8c:59:1f:d5:0e:cf:ac was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.amdigroup.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:c3:6d:2d:8d:5b:22:e4:7a:9a:5f:8c:59:1f:d5:0e:cf:ac
Serial Number (int): 327837041716803245820700322637433149509548
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5b:d6:d9:ad:73:99:2c:8b:41:2d:f2:ee:4b:16:06:37:b1:6e:c7:a5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f1:b3:73:4c:36:cf:76:d9:b9:04:ba:91:bf:b9:3e:af:0a:57:ad:fb
Fingerprint (sha256): 01:3a:02:26:e0:37:dd:dd:16:fd:5d:77:6b:b2:10:29:df:d8:3d:a2:6e:d6:3d:f2:cc:37:b3:cc:b8:48:02:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.amdigroup.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.amdigroup.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amdigroup.vn
amdigroup.vn.duy6.name.vn
chongchay.org
chongchay.org.duy6.name.vn
cpanel.amdigroup.vn
cpcalendars.amdigroup.vn
cpcontacts.amdigroup.vn
en.amdigroup.vn
mail.vietphong.com.vn
mail.xuongkhopnibifa.vn
vietphong.com.vn
vietphong.com.vn.duy6.name.vn
webdisk.amdigroup.vn
webmail.amdigroup.vn
www.amdigroup.vn
www.amdigroup.vn.duy6.name.vn
www.chongchay.org
www.chongchay.org.duy6.name.vn
www.vietphong.com.vn
www.vietphong.com.vn.duy6.name.vn
www.xuongkhopnibifa.vn
www.xuongkhopnibifa.vn.duy6.name.vn
xuongkhopnibifa.vn
xuongkhopnibifa.vn.duy6.name.vn

Other certificates including the domain name amdigroup.vn

(limited to 100 certificates)
www.amdigroup.vn
weaponpaint.duy3.name.vn
www.chongchay.org
www.xuongkhopnibifa.duy6.name.vn
www.thienhouse.com
board.colormedia.vn
mayindatehc.com
vietphong.com.vn.duy6.name.vn

Certificate

The complete raw certificate details for www.amdigroup.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMSKcpLJL0al9QTO3wjC
4dr8OJLemmznAIpjnW7Gr+S4SMwu0dEpdq15DcrA9qSDcUqcK0klTe8bF+i5HoCO
9GjuCedeEa4yMWNnE9waeLEgW/bs1dEIl127YA4gu1jT/Z5cx1VeSVu7BxmVoKeF
d/5Z1BKroPFhQCasfIbxSRoOmFm94hCk9MmUHDE4sYvYqvzRxMws1dCPW1hN01Xm
BmQrvNpN8jK3/paV/7AdheMS7IEWFdRV9/UASyfduHcMow6nejhJ3Nefi/qX48FH
BH8LykrOI3AC3v+ovuuQzFPTQFH40m+xFbu3nFHBSsPk48v5/oon59R3evqxh9F7
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327837041716803245820700322637433149509548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 11:58:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-26 11:58:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.amdigroup.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24839625659307921191867849942525223414121612407519682097930939702776381422097783300783955703836341227833206125687227978707723836673645025898732823566920475619834852781229552795461144178456610936033528870795333370637267586522861580111503024570166826817729066828001216058028504889277133182248184430541940671897493468160300779809273980325552305291818350816938871609830969728344112653042763603703790843354200418830487597901237616566353514078408646090110794718059104187136814086938883548855176391871388134862016473586649099518584817358615631128475438133307761816498494066968276264128800216333327144778372938458117602114551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bd6d9ad73992c8b412df2ee4b160637b16ec7a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (589 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdigroup.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chongchay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chongchay.org.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'en.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vietphong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.xuongkhopnibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietphong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietphong.com.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdigroup.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chongchay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chongchay.org.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietphong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietphong.com.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xuongkhopnibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xuongkhopnibifa.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuongkhopnibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuongkhopnibifa.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fbf47a98c0000040300473045022037647d10e2c57ac33e82c1cc031f87205d0b178fab7b2796adc983f80a61949602210083d99eda1e1da586abcc29f5ef9001e4cec83d4ee66ec47691a632751633fdf800760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fbf47a98600000403004730450220017993b6349432a709a7ba1c4b016a5f13144a62b0bb0fa1951080c8c1e8c1b3022100d8e655b967275b517561820786bde44d3ac9330ffdc8dbd6fdd091f32c3ce004
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009bd75c16a91c9dcc720ab3fc4d00f1bd60990c858f65996b951a2a5e58762d58d8d581f113cb5302af519d5cc44f43e87f07083296a9c12bed015372dcb97863473309a0fbd960544c61f2f2f8804b6b2df6b8c2e7208857cf59391b28f0a3458ffe69084f18db63690daf30bae237fedf597810844a17ae5f21b60784b549d872bb04338210e58b760cd40a079614b935f4681442b4340e64af0674917fd73158b36a1cc03b82f497c0aca67e4a4e557b34800ec2e6a47a9f2b9e363b18a5ef91b6db91b2e71d452bf0cc0ef5a9a3a3dc4d719ad77e078d9227d58869078f0c61d3865441b94a59facb012056358e82d539ac6fd41711172466f47e83f154d9