kientrucndt.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:6d:d8:e2:35:c9:ed:91:40:82:ac:77:94:e8:e5:d1:99:01 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kientrucndt.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:d8:e2:35:c9:ed:91:40:82:ac:77:94:e8:e5:d1:99:01
Serial Number (int): 385828209518568943008713826864073396033793
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 33:5a:69:02:27:62:dc:2f:02:bc:f5:80:9a:f6:9e:48:13:b1:bb:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f4:3c:cb:4f:81:3e:51:82:39:9f:fc:80:32:f9:a7:32:ee:18:4a:39
Fingerprint (sha256): 06:57:9e:3c:9c:f4:59:cb:58:9f:f5:df:dc:14:d9:5c:5a:27:f3:a3:49:62:20:f6:67:04:1f:cc:86:c4:29:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kientrucndt.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kientrucndt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chungcuthelegacy.ihappy.org.vn
cpanel.kientrucamita.com
cpanel.kientrucndt.com
daynghebachkhoa.ihappy.org.vn
kientrucamita.com
kientrucamitacom.ihappy.org.vn
kientrucndt.com
kientrucndt.ihappy.org.vn
mail.kientrucamita.com
mail.kientrucndt.com
webdisk.kientrucamita.com
webdisk.kientrucndt.com
webmail.kientrucamita.com
webmail.kientrucndt.com
www.chungcuthelegacy.ihappy.org.vn
www.daynghebachkhoa.ihappy.org.vn
www.kientrucamita.com
www.kientrucamitacom.ihappy.org.vn
www.kientrucndt.com
www.kientrucndt.ihappy.org.vn

Other certificates including the domain name kientrucndt.com

(limited to 100 certificates)
kientrucndt.com
www.covatec.vn
chungcuthelegacy.ihappy.org.vn
kientrucndt.com
www.aeonmallblackfriday.duy8.name.vn
kientrucndt.duy8.name.vn
www.covatec.duy8.name.vn
kientrucndt.com
nhakhoabacninh.com

Certificate

The complete raw certificate details for kientrucndt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHNqts/Do3WcHmcJBsxO
8+fqyzjHFBRO5gDVMqIQOaTR7TuQLl5nCiymAUSh3LQ7gBW1zOFY2H44Ll3UeKID
jbmNcx7XFTmwKgtfInZ+2ikVEZy+d4c2fE7aS5onC0ZdlZ0bq1qURzwsClnkHszH
Nrh8vbb79m9BFsIhE+J6bHAN5X042aH5juO26Oafuy9/ZUbE6LQx6BrXrM2fv+KI
ORrPsg/oFRKRQ4vhxUm3zJn4gl97CkJQ7xFPnDseA/HqpMYb7TWjEyMTbl+m/Iyy
l/mpfI/vCSMiyNT4uZA4FMkcYBdm99a97KHRjnjfX0mPJ+s9qCIhsajo0MCwA9DT
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 385828209518568943008713826864073396033793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 08:21:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 08:21:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kientrucndt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22779809064823727732933110301161395117080988719809672852638549086674766509067638972221098628981914200080382326189437664496300330999739705089962328978399166122337342648154553531134141032273360060207649210623659391949958197879390612636432735635699757795761606613169193634503628938494812480785355364012561864544346935694858471186199466921182549025478617379452872218047285142734988402479238912251685905508366053130489526622638401992999243885164014626798168862170111033113433176224460500813061302518731278287815556993941323016913092135973310597919581863569706054260727526633014161909691772957592302249439212390946366870351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							335a69022762dc2f02bcf5809af69e4813b1bb84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chungcuthelegacy.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kientrucamita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.kientrucndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daynghebachkhoa.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kientrucamita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kientrucamitacom.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kientrucndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kientrucndt.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kientrucamita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kientrucndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kientrucamita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.kientrucndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kientrucamita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.kientrucndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chungcuthelegacy.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daynghebachkhoa.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kientrucamita.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kientrucamitacom.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kientrucndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kientrucndt.ihappy.org.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b4afdb56c0000040300483046022100bcc825a0889ca611428c7e13eb60f456dd16d346d8b8b1cf146142dd91df7cc1022100fbfcfca5a3e761ff3fe08d431b1d45132b71e1b99f9ab57c6505a0874e700560007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b4afdb72c000004030047304502210096afbfc453db168ba340167cb4bb6a6c6127c486a4c09947358a68509a0d8c7a02203a307a7ab45e861bc7c228789dcc86e245bc350a0fa140a1d88befe238906b08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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