bepgialuong.duy1.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:00:cc:9e:5a:b4:0a:f8:9c:8f:e7:99:22:f0:21:fb:58:ab was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bepgialuong.duy1.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:00:cc:9e:5a:b4:0a:f8:9c:8f:e7:99:22:f0:21:fb:58:ab
Serial Number (int): 261608842529005840264972523905642370128043
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:65:52:ea:3d:f0:8b:0c:70:3a:1e:e8:13:4c:37:90:fc:54:28:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:c5:bf:09:77:a0:e1:0b:8d:f7:25:17:d9:14:70:39:6a:a8:e8:b6
Fingerprint (sha256): 14:10:e8:97:2e:f8:e2:84:ee:c7:b8:a2:dc:93:70:0b:d8:e0:a2:56:47:a1:a6:df:95:30:fc:5d:bd:16:7b:ce

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bepgialuong.duy1.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bepgialuong.duy1.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bepgialuong.com
bepgialuong.duy1.name.vn
daitrungviet.duy1.name.vn
hungbao.duy1.name.vn
hungbao.vn
laserintech.com
laserintech.duy1.name.vn
manhducvictory.duy1.name.vn
manhducvictory.vn
simicon-asia.com
simicon-asia.duy1.name.vn
sinvoice.duy1.name.vn
solartop.duy1.name.vn
www.bepgialuong.duy1.name.vn
www.daitrungviet.duy1.name.vn
www.hungbao.duy1.name.vn
www.laserintech.com
www.laserintech.duy1.name.vn
www.manhducvictory.duy1.name.vn
www.manhducvictory.vn
www.simicon-asia.com
www.simicon-asia.duy1.name.vn
www.sinvoice.duy1.name.vn
www.solartop.duy1.name.vn

Other certificates including the domain name duy1.name.vn

(limited to 100 certificates)
cpcontacts.tankymineral.com.vn
ktwindow.duy1.name.vn
bepgialuong.duy1.name.vn
www.daynghebachkhoa.duy1.name.vn
www.sonviva.com
www.kiovietnam.duy1.name.vn
www.covatec.duy1.name.vn
www.digishow.duy1.name.vn
vietkobio.com
www.ledduhal.duy1.name.vn
vinako.duy1.name.vn
www.vinako.duy1.name.vn
www.ngukimthuanphat.duy1.name.vn
mail.xkldnhantai.vn
www.sunshine.duy1.name.vn
www.thietbidienbacninh.duy1.name.vn
www.zoncn.duy1.name.vn
www.aemedia.com.vn
webmail.tankymineral.com.vn
www.sanxuatphimquangcao.duy1.name.vn
daynghebachkhoa.duy1.name.vn

Certificate

The complete raw certificate details for bepgialuong.duy1.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRx/gRBqvDS0n2KhPUGw
U82geyCDPAFfqnopwOdGvtzsinI9uRJWmtpC+cLeUIEnMkFE1VZeskD4LDgxxt1d
UpfKrzfyHYF5FfyNo070jtQ56M4QWuvFpwxuTPl6T742SUilRIN3Q7KpOyXIR+De
AOiMeyx6LckwRBd/C7Z6iszrsgPYEdpXhr1mxB4omv5eGLN76CLt/pczFqenjbNR
fbyOOtG5fzIZzH3arU9ldCjan9spAFBwLsE/yY0Aj3eAHTaDV84grSgh3K8cUJSN
0SlKQxYGaAdlpOj+80iiQuFbiUhv8iTbLc4jMLMhsWOENzy52nq3mFAyhd9xhSN4
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261608842529005840264972523905642370128043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 17:20:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 17:20:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bepgialuong.duy1.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25892905436722151768652280400128356785950724123468803858872654680515974482318216289990547112032553763077508724024865517990003041384366684961862255870990220598804090795484626638319294133091901606815455808013403966881793232367472701345636982367785673843446243680539826242660273483053374149109260028002632275708512873916243795007260303295513187473427029959749203046949154083654999672219244554961982586056114663225510019438880340605269946057675784288229384976626028518015917214728182860102948282040458045626750778983159909680114768661808792938667970852655689250756639771431455357654505052015686246479024228422982868105241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd6552ea3df08b0c703a1ee8134c3790fc542811
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bepgialuong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bepgialuong.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'daitrungviet.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungbao.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hungbao.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserintech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laserintech.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhducvictory.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manhducvictory.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simicon-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simicon-asia.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinvoice.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solartop.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepgialuong.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daitrungviet.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hungbao.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laserintech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.laserintech.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manhducvictory.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manhducvictory.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simicon-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simicon-asia.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinvoice.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solartop.duy1.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aaeabc2df0000040300463044022060ade37dee08e1c7815ead659c45afcfd8e4221fa32111deae7f58f38c98fa8502203209e50a3660320655dc38b5daa48db7599e1cd9505abdef54e67d60c1aa2b3a007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aaeabc3140000040300463044022029d52190fe09e532f40d81850190953c17333cc69c6fb7cbd316978f8aa758c50220272e09ec487244c734a30e2b87bac907b23f114c362b00a3cf4374fe6bc6e719
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00624aff85c058a6de2b50ae6c24100e1eadb9965324bd385412ff6a220151e94d5b41d1fbc65a361dd1f169a7191804c8ec590bfbb762b73b8ba48674c5ff0dcde7991c552e90c405c0bc7c9c21a21c8a3981c8b6d5d3f1657ab4c5804bd9afe42a4e408b010bd7b5082ba7974ff6d78e8a1f66fce0cf3b76eced0be474b3225ec7cbcdd2a36a213e2824339fce81e00f98cbf05baf4af355564c9fdc67d6b90518c17cfe83a4466fcd6d0ee1240ddd5f3d05fd95268ad0f3f902c3e429954d12ef5de7e2af2f6212600d1f5964d9d3fe6577abf9a9df7ea52a966917dee014b577b01872cb4c60f8328366ef29625f513604838f4b68cf7fad3165d699776b99