www.weaponpaint.duy6.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:66:c3:96:d8:1d:00:49:76:4a:dc:51:c1:29:a4:63:58:c0 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.weaponpaint.duy6.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:c3:96:d8:1d:00:49:76:4a:dc:51:c1:29:a4:63:58:c0
Serial Number (int): 296305641908221481944375919370209895602368
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:f5:83:e8:33:a2:a6:5f:76:06:d5:f1:76:1c:ca:7b:95:9b:44:fe
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4a:45:51:d7:c8:35:d3:80:5a:15:ed:c7:4c:8b:ad:81:bd:0b:3d:3d
Fingerprint (sha256): 07:3e:37:12:2c:09:de:0f:8f:da:00:fc:a4:c2:97:77:9c:6e:42:d9:65:2c:d6:73:1d:47:ae:10:63:9b:43:ff

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.weaponpaint.duy6.name.vn

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.weaponpaint.duy6.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brosis.com.vn
brosis.com.vn.duy6.name.vn
digimindgroup.duy6.name.vn
dxmmoldbase.com
dxmmoldbase.duy6.name.vn
haehair.com
haehair.duy6.name.vn
kanwayaudio.com
kanwayaudio.duy6.name.vn
nhasang.top
nhasang.top.duy6.name.vn
weaponpaint.com
weaponpaint.duy6.name.vn
www.brosis.com.vn
www.brosis.com.vn.duy6.name.vn
www.digimindgroup.duy6.name.vn
www.dxmmoldbase.duy6.name.vn
www.haehair.duy6.name.vn
www.kanwayaudio.com
www.kanwayaudio.duy6.name.vn
www.nhasang.top
www.nhasang.top.duy6.name.vn
www.weaponpaint.duy6.name.vn

Other certificates including the domain name duy6.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.weaponpaint.duy6.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyalhgKrqHHlsto7G2dXQ
KR/ypEmAilFgit4jdn5Nm8c4aorrhUyL+FomuYBIDlKj5Us0PZbWSv79mhBxyfAH
zdQCIXoiN/6MTNKIaZ5KEEOg9LiVCLSOsr0nA4iU8T9f9odo+EaGesOpNuQb9km0
5kEdqSVk4CiAmhLQNijWmbzGCC9++VXMI9SwEySp/jzBRUte4TPWp2l7DLySUGVw
CAwIGemQdpgyszW4N9NQy1nhlLfo47cD817W6KGEf9k+xCf1e9CLygdflseaTHN5
JtdfM+dUQZ7rrjiBy7nqbLBLjFfXRp5zucTTOEeLAUgLt/xbqr98mH1z2EK7zf2Z
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296305641908221481944375919370209895602368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 17:43:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 17:43:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.weaponpaint.duy6.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25457424117971617279703209043614700897249601878436322651194868602354682634444244120652178708677139928684754397177754570643182825146775610951229694824822377100925525329478088075373451903390632862672677301490522171057109754572178962771956905384767584434011206946438281206740375788227574091437755144002577157833509111828431399667246242015282221549548292934110446577417105018567215573894562685327530512483864220757201198957441808182242180580296447957320525085307556991557441808563512667065303082003085842855247447549496576080270376915538176633958787026125955011890742358769904633213915367941354022467123147560771315931571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70f583e833a2a65f7606d5f1761cca7b959b44fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (545 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brosis.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brosis.com.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimindgroup.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxmmoldbase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxmmoldbase.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haehair.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanwayaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanwayaudio.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhasang.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhasang.top.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weaponpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weaponpaint.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brosis.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brosis.com.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimindgroup.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxmmoldbase.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haehair.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanwayaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanwayaudio.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhasang.top'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhasang.top.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weaponpaint.duy6.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e76ed31470000040300473045022100ae0ceccefe32afaffebe1ceea7402fc4a03199e6cfeac9a633c16ab7d242feae02204adfb3fb1249364ec9dde323141b56c11208d2146eca233f8595d8d547a79769007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e76ed31540000040300473045022100fd12ad20d0816a9bd3a5f90b11b1945f93aca46366e3fa51c1e6a312a7512f6002203a649b86e3f025169a92556ee8747da70f5001802d264716e0c256f20b78785b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009a1744f9b1173fe7716e495b32635a04d45080be7ace0d026ae70100d57b28833745878c6f3271302f0cfe847f19a2c849aaa5019ad09f604290665d399f32ee236a1fa6066c9f746a57d786b94ff66f801c0c2dd43823177d83335ebe622fa7c14d0bf85fe842468eb6f6ff0abe41ccd654da0a39442e52d9fd41a5cb8e781a3b196b54c936f0dfaf435b323c8868978a170af409516d06d77ae29a495e74615a2f9236df74a0482e0c1f268adef39f7562119c502750734e4486cf86117896b1958c1b7414ed3001ffdac851aa6a3533f3d617c5b610afe1fea276cc2ada4db2d7bff723dec0d98c1e1f4b009335398cd58ee1bdff2472b2bfa3f7e278b720