3b2.ou.edu.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a7:d6:2b:a1:c3:2e:ca:a6:c1:47:b3:6a:16:7e:fe:2f:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=3b2.ou.edu.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a7:d6:2b:a1:c3:2e:ca:a6:c1:47:b3:6a:16:7e:fe:2f:da
Serial Number (int): 405560980343632518158414651440410673426394
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fe:16:7d:3d:ef:5a:cb:7b:39:bc:03:0a:8c:9f:df:63:19:d7:d3:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:19:16:27:b7:0b:37:e1:b2:85:73:8f:1e:ef:08:e0:c8:5e:64:09
Fingerprint (sha256): 01:89:b6:ad:70:e8:68:01:06:b2:c3:69:30:cd:f7:5d:1d:5a:f0:ad:48:f9:5b:9c:21:83:36:fc:1e:ae:01:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 3b2.ou.edu.vn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 3b2.ou.edu.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3b2.ou.edu.vn

Other certificates including the domain name ou.edu.vn

(limited to 100 certificates)
3b2.ou.edu.vn
kqtkden.ou.edu.vn
support.alephys.com
id.ou.edu.vn
journalofscience.ou.edu.vn
help.webspecia.in
id.ou.edu.vn
support.okra.ng
id.ou.edu.vn
www.patolo.jp
support.zea-iot.com
id.ou.edu.vn
kqtkden.ou.edu.vn
kqtkden.ou.edu.vn
id.ou.edu.vn
id.ou.edu.vn
help.epic36.com
support.epigrid.com
id.ou.edu.vn
id.ou.edu.vn
id.ou.edu.vn
elosupport.ou.edu.vn
id.ou.edu.vn
id.ou.edu.vn
thi.ou.edu.vn
devlms.ou.edu.vn
id.ou.edu.vn
kqtkden.ou.edu.vn
id.ou.edu.vn
kqtkden.ou.edu.vn
id.ou.edu.vn
id.ou.edu.vn
pm.ou.edu.vn
id.ou.edu.vn
sg.support.te-cloud.advantest.com
journalofscience.ou.edu.vn
sg.support.te-cloud.advantest.com
id.ou.edu.vn
id.ou.edu.vn
id.ou.edu.vn
kqtkd.ou.edu.vn
www.patolo.jp
help.webspecia.in
support.1rink.com
id.ou.edu.vn
support.sisoy.id
ceats.ou.edu.vn
kqtkden.ou.edu.vn
id.ou.edu.vn
id.ou.edu.vn
support.vicoimaging.com
devlms.ou.edu.vn
devlms.ou.edu.vn
devlms.ou.edu.vn
id.ou.edu.vn
kqtkden.ou.edu.vn
id.ou.edu.vn
kqtkden.ou.edu.vn
id.ou.edu.vn
lms.ou.edu.vn
help.webspecia.in
pm.ou.edu.vn
devlms.ou.edu.vn
id.ou.edu.vn
help.webspecia.in
id.ou.edu.vn
dichvu.ou.edu.vn
id.ou.edu.vn
id.ou.edu.vn
support.epigrid.com
pm.ou.edu.vn
support.namastepay.com
id.ou.edu.vn
id.ou.edu.vn
id.ou.edu.vn
devlms.ou.edu.vn
support.okra.ng
tienichsv.ou.edu.vn
id.ou.edu.vn
lms.ou.edu.vn
www.patolo.jp
id.ou.edu.vn
kqtkden.ou.edu.vn
id.ou.edu.vn
support.namastepay.com
id.ou.edu.vn
support.zea-iot.com
zoa.ou.edu.vn
help.webspecia.in
devlms.ou.edu.vn
id.ou.edu.vn
support.alephys.com
support.okra.ng
id.ou.edu.vn
elosupport.ou.edu.vn
devlms.ou.edu.vn
kqtkden.ou.edu.vn
kqtkden.ou.edu.vn
id.ou.edu.vn
support.epigrid.com

Certificate

The complete raw certificate details for 3b2.ou.edu.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr6cxDBEZrtOuDIMPWvqa
EXFTiYI2xq2Ftj6lIfdR2mVVpBhiJQh6Bwnvu5j1hLhDt9uazKxVX0A/BDg8BUYN
wBLwOc42MlkN9aNUI4ltqx/05WPOpUcLYEHkPgM0wcpZD5UIoOO5V3d498dPaGY5
OCf0CPnuXuM3cZjnvWyEOws0chdS+xcnXaLDtjMdoh5aSnNeDSdrN5FuWDGgZ/6a
jjOPq4fAfVmaKfb//6r9c2oKSu4Ru/55/YCZmO87BWcwEHyoXQOGha/dGBz7XXZV
hvu7IDyauYxozSK85n+/4Bu5WE8TiBJR8jQHqqwzCyltUHVzefiHTuQlbqg6G/n+
YFmKLONaCyLT6NSPlv7o2deJ0RdrREY7PzrC1647/fsR/1ud6KjY0BwG8+7PfkgR
PdkvS442I6PkdlAaI+5GO48ySJZNx6sj7x5mP1vk7LJRvJmi0TBaOR9+RA1qj6NQ
71YjWsaYT29fRGoIaZOhutikjSmL9z23IQlNuiD0nyNdsVuYe7m1bZSV3qyPup+o
isiCRk5NbO2DiQuwOVI0N8gwOfP/iK50eMZ53pR8q+Qg8Xeq+Wm3lOa9t7Ar6ByT
/HqNg2x3UlbDwNZ+gXLXXlxFWYOix1lK2k7VsysgJXklTIFDH0lF4nXvK+yDTtHU
Vec+evg1huPCZdNQXPi36dkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405560980343632518158414651440410673426394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 08:48:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-08 08:48:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3b2.ou.edu.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 716602095418737486715996193251916267880231490956817392622187483958756611604229174227245776005418837507672589200056289811162913722065297411182256247925513889621587308312465968150752723612210607055587146304325997772301033913157298490400967355851097707940906092243857052332718930748578766587486035868560152032161810034741649425509094766055428799626396942991704073881946474256875509441940294665909010930151028644136607474546956889695633887883265018807453939592856263192100712058806777383443454940863989904705861736359888572167218639405393583172979630857283664852610064515027626502616185377837393382012576007084200396089319576591849965017233099762939793122294158647000754293201842739763405532920312262506470813263422173194193860735619377277590315552933241782452228330145607286135886965838759902549575003124429805693260006199379800374875543136111800778714186179542194515864735359651909274248219237501484299466187675211446759975627133087356130124778038058744307105946490066993505496619811947998200158236292998237106277079793008577146376591674236141434140579500023738317029889837687360337324470355692587589414264684414660438598359360725756511179950636146330391250684663567766352457158153572955903698967396855757687807577511117772988412848601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe167d3def5acb7b39bc030a8c9fdf6319d7d3dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3b2.ou.edu.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170c3d8f20b0000040300483046022100a357c8dae46c6eab02c56b2a8a34a69e920feae55c4ad5394183a15c929a6235022100a2a4f105937a8194b0fdf659d1757f0131235967c755142fb50ee795c99ae90400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170c3d8f20f0000040300473045022100f4d87f83cb4873469f7aa56162c97aaae0dc845ea00b2e6e4726f76900e671e90220113c7e9d63a2aa3176b1b67203acbfc87dace7e8ecba008a65b6dd9694982ff9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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