www.legiagroup.duy8.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:2f:11:9c:f8:8b:61:5e:82:0d:a5:5b:9b:72:24:b3:88:60 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.legiagroup.duy8.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:11:9c:f8:8b:61:5e:82:0d:a5:5b:9b:72:24:b3:88:60
Serial Number (int): 277353540955883553319835808579738655754336
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:a7:78:e3:e9:45:75:8b:fa:b4:76:c8:95:91:29:a0:b0:e5:f5:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 65:ab:dd:94:61:7d:b1:19:04:3d:4b:9d:c5:ea:9d:b8:d1:f1:3d:ef
Fingerprint (sha256): 03:16:f8:aa:7a:e0:e6:aa:7f:5a:0f:ea:a4:0f:32:5d:ec:0d:56:38:9b:12:f4:a3:06:d2:49:e7:86:35:6d:67

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.legiagroup.duy8.name.vn

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.legiagroup.duy8.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catechvn.duy8.name.vn
catechvn.vn
jvcc.duy8.name.vn
legiagroup.duy8.name.vn
mail.safure.vn
safure.duy8.name.vn
safure.vn
sanxuatbongnhua.duy8.name.vn
tuyetdungcolor.duy8.name.vn
videoforbeauty.duy8.name.vn
vinako.duy8.name.vn
vinako.edu.vn
www.catechvn.duy8.name.vn
www.catechvn.vn
www.jvcc.duy8.name.vn
www.legiagroup.duy8.name.vn
www.safure.duy8.name.vn
www.safure.vn
www.sanxuatbongnhua.duy8.name.vn
www.tuyetdungcolor.duy8.name.vn
www.videoforbeauty.duy8.name.vn
www.vinako.duy8.name.vn
www.vinako.edu.vn

Other certificates including the domain name duy8.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.legiagroup.duy8.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqo69PRcnUWZMUylth3o
ypPdcNcK8wUnwNNof+95r+00AxGGYtm5SZHhy7qvCVHIHiiLg3qkdPCCB7JVwhAg
qyV3qE9NFUn/MCVfZls1nEWBTNeAGHocR3NhvsLRbmnSCez941cy74mHTJ39IUYR
TnV9WdC5l5kcqBK3b0XBHYNTEPjkVG4Va9+FgTMSMz1FTCKxAQZusGuRw/JzPUuU
7iD8pzIjIqxWPJPutWYu3gb1rN1WdXehc3EAahEXyFGx6T5zIXItsUqB5BUmE5EX
I8TM91Uk5oE4GWQrHs+POeU9ZPWwmoruovnlbqu2fLu3NubeGfZOPwfnZTbmk/Py
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277353540955883553319835808579738655754336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 22:23:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 22:23:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.legiagroup.duy8.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22554361973615961078476253128991492852595930076998763819689747957504735470549937209739989393728669134173285292559131798936471853801734176024053659403276817696544884291056549229846933475228843255331999079271932568391575747834652329464769406931165033574644261327659827663975302141412157694668045974569285453612314772439806532667267844518026655360441394183207110252894488047139390081466486230121711436107464520491369432513862215221313501769039844679047517943808886620440155084279042511654822437706842501065808123266510861160840942387865543712712788733365484426747390411973409731137207960563938306707680377168690010125047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1a778e3e945758bfab476c8959129a0b0e5f5aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (536 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catechvn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catechvn.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jvcc.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legiagroup.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.safure.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safure.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safure.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanxuatbongnhua.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuyetdungcolor.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoforbeauty.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinako.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinako.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catechvn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catechvn.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jvcc.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legiagroup.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safure.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safure.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanxuatbongnhua.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuyetdungcolor.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.videoforbeauty.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinako.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinako.edu.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d3dc8e0f30000040300473045022100fe5a551f7a44da08128a56a9a09b58024035b1c7ea35806a18b42aa10a4e4605022038a78961c111e31e36969a0f14e4f5f4524ecf2ba3fb40f39b1f49bf43c17f490076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3dc8e0f80000040300473045022100fe7dbf5eefd2e1a8b84b07d5b43ebe4717b96fb06ed8f479a51c78e3e9d8ab350220606ad4739142fc403ea2219a9b9b6534ddd468ad7642f2bd8e4b64409cb7bbc9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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