tonmat.duy9.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:d8:60:ed:a2:39:eb:f9:e2:e5:af:4a:19:0e:c2:ba:62:cb was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tonmat.duy9.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:d8:60:ed:a2:39:eb:f9:e2:e5:af:4a:19:0e:c2:ba:62:cb
Serial Number (int): 422078974734253911498743776933986466161355
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 32:2c:be:8b:f6:a4:bd:ec:5e:9a:05:43:6d:9d:66:d2:2a:48:9c:fc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:61:11:b8:60:87:89:c6:77:6a:20:4f:02:9b:45:b6:e2:fc:2f:29
Fingerprint (sha256): 12:2b:6f:18:c2:bb:ec:fa:0b:bb:da:03:05:c1:c0:f7:d7:15:2d:24:c3:e0:ff:ac:36:44:4c:bb:b8:4d:1c:77

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tonmat.duy9.name.vn

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tonmat.duy9.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.digimindgroup.vn
cpcalendars.digimindgroup.vn
cpcontacts.digimindgroup.vn
digimindgroup.vn
digimindgroup.vn.duy9.name.vn
ibcwines.com
ibcwines.duy9.name.vn
otochuyendunghanoi.com
otochuyendunghanoi.duy9.name.vn
tonmat.com.vn
tonmat.duy9.name.vn
vinhomes.duy9.name.vn
webdisk.digimindgroup.vn
webmail.digimindgroup.vn
www.digimindgroup.vn
www.digimindgroup.vn.duy9.name.vn
www.ibcwines.com
www.ibcwines.duy9.name.vn
www.otochuyendunghanoi.com
www.otochuyendunghanoi.duy9.name.vn
www.tonmat.com.vn
www.tonmat.duy9.name.vn
www.vinhomes.duy9.name.vn

Other certificates including the domain name duy9.name.vn

(limited to 100 certificates)
hondaotobacgiang.com.vn
nhahanghoaphuong.com
www.hondaotobacgiang2.duy9.name.vn
tonmat.duy9.name.vn
caobanlong.duy9.name.vn
vietgianguyen.duy9.name.vn
cpcalendars.ankhangxanh.com
cpanel.nhomdonga.vn
www.nissinelectric-vietnam.duy9.name.vn
hezhi188.duy9.name.vn
nissinelectric-vietnam.vn
*.vnmmoringa.com
nhahanghoaphuong.com
cpcontacts.nhomdonga.vn
vimaccos.vn
www.view360x.duy9.name.vn
www.giadungducmag.duy9.name.vn
www.cardino.duy9.name.vn
www.saovangholdings.duy9.name.vn
www.duan-vinhomes.duy9.name.vn
www.hmlgroups.com
doidoanhnhan.digimindgroup.vn
cpcontacts.duy9.name.vn
www.ko.hetiantester.com
www.vnmmoringa.com
cardino.duy9.name.vn
cpcontacts.giza.com.vn
tonmatgroup.com.vn
duan-vinhomes.duy9.name.vn
cpcalendars.digimindgroup.vn
dhqe.vn
cpcalendars.view360.top
www.360batdongsan.duy9.name.vn
www.congvienthienduong.com.vn.duy9.name.vn

Certificate

The complete raw certificate details for tonmat.duy9.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwM90q3dDAo965NpipI/
7H0SHmimpxrKQDcF9G2HuvKjoR5Yclxu/Ev/+PQosCVxxRh03YTzOVKYkXyLXmSO
x34wPBDfRyZySyM3JYsIpkoX9gTO6ajBF9yoAWLAW3NTD0lDmsicILbnPUSMzH/O
Tzsg7fLjDPVdr6Q1EcY457NC4rVuPSGAVwlczaA9cJOOVepu4MCaxLjhoTRAcX3x
I8MHkmkB8hhb4Dt0ll1LaQhsOBR8kXmdYxzdI/R9eUoieit6MZ+nIXJrGvR87dcb
sNtIba/NOEZcTtCskbHmJAL6EFpdcUHmbOP0mK18OYf4Ri1KQEVnzh9QiyAXxrZ6
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422078974734253911498743776933986466161355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 06:59:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 06:59:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tonmat.duy9.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21083395370563781547790596246222173156454187670100618661931117260565155540192079341335201069665503855726295866873717740854878833501364913025630726622347412920104918321703877331907024277141470020151411334751444741694835994229135175606759230941135847718830543658698870171090805719169274440591888746382172067863376638695792088404408207533362584801133738391099393832364849370389194776517375681930796656960939559989416525659144400584122432262365686667306189223202975149078632598949579781863938003599467204172910964409696191702628255514997650059542728869387119879352685744195382826987948067723585909608786400561618757253697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							322cbe8bf6a4bdec5e9a05436d9d66d22a489cfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.digimindgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.digimindgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.digimindgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimindgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimindgroup.vn.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibcwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibcwines.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otochuyendunghanoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otochuyendunghanoi.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonmat.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonmat.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomes.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.digimindgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.digimindgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimindgroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimindgroup.vn.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibcwines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ibcwines.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otochuyendunghanoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otochuyendunghanoi.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonmat.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonmat.duy9.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomes.duy9.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018faec308040000040300483046022100be3ef9e47b5b57b5364065d7f0aa697af5282b14658fdf8e9870a2cd069edcfa022100dbef7bac02260776f760d569b5094cdb52954f0f8428d0d0af0b127aeac0b2bc00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018faec308270000040300483046022100a8f8d047975c8c366584f6aa0811ac07c1dd26f44530baaeea077f81c182bef0022100fcad275d22f06c42b30e2317dee326b8d7db5040b803132481e0e6930ef0d2be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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