thanglongedu.com

Issued by R3

About this certificate

This digital certificate with serial number 04:dd:0a:86:fe:87:c1:b9:33:94:5f:8d:d7:69:02:40:61:94 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thanglongedu.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:dd:0a:86:fe:87:c1:b9:33:94:5f:8d:d7:69:02:40:61:94
Serial Number (int): 423665540026793075606232463117566053736852
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:c6:72:51:58:f7:83:6f:f1:18:c7:29:11:f9:ff:d9:1d:ad:47:71
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): cf:ce:3a:0b:56:37:9f:14:d1:e8:6a:db:c1:e4:cf:06:d3:4c:b7:f3
Fingerprint (sha256): 15:3e:4a:dc:a1:99:6d:80:e2:1c:a4:b1:24:6f:bc:bd:f0:88:87:d1:58:07:c4:a9:a5:16:db:dd:9e:d0:b3:3a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate thanglongedu.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thanglongedu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

antinhogreentravel.com
antinhogreentravel.com.duy5.name.vn
donghonhapkhau.com
donghonhapkhau.com.duy5.name.vn
hoathuyetduongnaonibifa.vn
hoathuyetduongnaonibifa.vn.duy5.name.vn
lavishdecor.com.vn
lavishdecor.com.vn.duy5.name.vn
nghiennhadep.com.vn
nghiennhadep.com.vn.duy5.name.vn
thanglongedu.com
thanglongedu.com.duy5.name.vn
www.antinhogreentravel.com
www.antinhogreentravel.com.duy5.name.vn
www.donghonhapkhau.com
www.donghonhapkhau.com.duy5.name.vn
www.hoathuyetduongnaonibifa.vn
www.hoathuyetduongnaonibifa.vn.duy5.name.vn
www.lavishdecor.com.vn.duy5.name.vn
www.nghiennhadep.com.vn
www.nghiennhadep.com.vn.duy5.name.vn
www.thanglongedu.com
www.thanglongedu.com.duy5.name.vn

Other certificates including the domain name thanglongedu.com

(limited to 100 certificates)
thanglongedu.com
www.gammatech.duy7.name.vn
www.nicehairvn.com.duy5.name.vn
www.bpstone.com.vn
trihemofa.com.vn

Certificate

The complete raw certificate details for thanglongedu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHnzCCBoegAwIBAgISBN0Khv6HwbkzlF+N12kCQGGUMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjgxMzQ3MTdaFw0yNDA2MjYxMzQ3MTZaMBsxGTAXBgNVBAMT
EHRoYW5nbG9uZ2VkdS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC8oPIrhIlo/gILYDfl+SJ5K5wl7LXvDcbVlMrMzl40zK1RhmCFqPfTUlbU00l+
xwHoUECxdizSwIS1qU74lHK6V31vTVhn4RnGT7neTNLwdwQslB/0Bkcls61UWQXI
onQd9adgEjIDn+Ou3W82FWYd4OjehLKh7QhypbgCOkQpXKt3k5ZSW/p2cZEZzFp7
gWWbJyPhlPG8I1qhHqX/YedzBpwOaknt9ttZ5PhGfbBSbRyhla11YjO/5RlPvIQB
NA4IO5gy12CQ6UmP1fX057ccV3/0/TwD+B1k4cx4Fqvg/XiVUE4qWYz/8Cpvz8QA
znqKdtKrthsqTjgLNUyOsnzTAgMBAAGjggTEMIIEwDAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFHvGclFY94Nv8RjHKRH5/9kdrUdxMB8GA1UdIwQYMBaAFBQusxe3WFbL
rlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDov
L3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5v
cmcvMIICzQYDVR0RBIICxDCCAsCCFmFudGluaG9ncmVlbnRyYXZlbC5jb22CI2Fu
dGluaG9ncmVlbnRyYXZlbC5jb20uZHV5NS5uYW1lLnZughJkb25naG9uaGFwa2hh
dS5jb22CH2Rvbmdob25oYXBraGF1LmNvbS5kdXk1Lm5hbWUudm6CGmhvYXRodXll
dGR1b25nbmFvbmliaWZhLnZugidob2F0aHV5ZXRkdW9uZ25hb25pYmlmYS52bi5k
dXk1Lm5hbWUudm6CEmxhdmlzaGRlY29yLmNvbS52boIfbGF2aXNoZGVjb3IuY29t
LnZuLmR1eTUubmFtZS52boITbmdoaWVubmhhZGVwLmNvbS52boIgbmdoaWVubmhh
ZGVwLmNvbS52bi5kdXk1Lm5hbWUudm6CEHRoYW5nbG9uZ2VkdS5jb22CHXRoYW5n
bG9uZ2VkdS5jb20uZHV5NS5uYW1lLnZughp3d3cuYW50aW5ob2dyZWVudHJhdmVs
LmNvbYInd3d3LmFudGluaG9ncmVlbnRyYXZlbC5jb20uZHV5NS5uYW1lLnZughZ3
d3cuZG9uZ2hvbmhhcGtoYXUuY29tgiN3d3cuZG9uZ2hvbmhhcGtoYXUuY29tLmR1
eTUubmFtZS52boIed3d3LmhvYXRodXlldGR1b25nbmFvbmliaWZhLnZugit3d3cu
aG9hdGh1eWV0ZHVvbmduYW9uaWJpZmEudm4uZHV5NS5uYW1lLnZugiN3d3cubGF2
aXNoZGVjb3IuY29tLnZuLmR1eTUubmFtZS52boIXd3d3Lm5naGllbm5oYWRlcC5j
b20udm6CJHd3dy5uZ2hpZW5uaGFkZXAuY29tLnZuLmR1eTUubmFtZS52boIUd3d3
LnRoYW5nbG9uZ2VkdS5jb22CIXd3dy50aGFuZ2xvbmdlZHUuY29tLmR1eTUubmFt
ZS52bjATBgNVHSAEDDAKMAgGBmeBDAECATCCAQIGCisGAQQB1nkCBAIEgfMEgfAA
7gB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjoWHj9wAAAQD
AEYwRAIgXDk4q5K0BzNgt6m5VFSzNUrAaaJgsnGVqN/hyrp9PF0CIDxRyODnRDPl
OKdAEnGkJE10ZfJcPPZKm1A+uoSt1xdbAHUAouK/1h7eLy8HoNZObTen3GVDsMa1
LqLat4r4mm31F9gAAAGOhYePiAAABAMARjBEAiAzqGQQumajQtgbbtVu9as7UAZw
toC31EX7Q8zbm3n9mAIgMQWtpnq4pRS8+oXk9M2oTR6qrkA4LT0VmsxGROcPXEAw
DQYJKoZIhvcNAQELBQADggEBAEEkXBWcmVeTc6kLB8/8l4GOaKsAgPXHrG7h2yVV
ujy5YazN1pDa1qAP+H7PQfHZ/nT5fnjVQbBXOv5KefSCSmsbtKICGTIWthtywJVJ
Fn5CZk3fs4vr5EytnusHjZZVMkrEQTyDzoNwbI87835h2gE4S0efzsD2pgiJ9ET6
oa5v4s+epXCsjnEtCmFmCMkBEQntWCh72RU/OEofnw72q8NrGyew+IirQx4WWUND
HewZxz2YZWaQKRF+pPIz8gQxfPs4nsql4bA9+hJLbmR7iKrBNkKUrOzvku8j6J/G
tdVKhoL2L3wRByRY4OYO09pp5m18sx3NwRATy/9Gd9Pn/oM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKDyK4SJaP4CC2A35fki
eSucJey17w3G1ZTKzM5eNMytUYZghaj301JW1NNJfscB6FBAsXYs0sCEtalO+JRy
uld9b01YZ+EZxk+53kzS8HcELJQf9AZHJbOtVFkFyKJ0HfWnYBIyA5/jrt1vNhVm
HeDo3oSyoe0IcqW4AjpEKVyrd5OWUlv6dnGRGcxae4Flmycj4ZTxvCNaoR6l/2Hn
cwacDmpJ7fbbWeT4Rn2wUm0coZWtdWIzv+UZT7yEATQOCDuYMtdgkOlJj9X19Oe3
HFd/9P08A/gdZOHMeBar4P14lVBOKlmM//Aqb8/EAM56inbSq7YbKk44CzVMjrJ8
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423665540026793075606232463117566053736852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 13:47:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 13:47:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thanglongedu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23812166752634522786413617607978933226594390440204190598031329218884442663714933609421462993341657495984591644208576899320195635734408377258923578011571750964664174586641548780792274119142746051181699274066462468062560939310860103326619728534694039639044465472570273856354387021634256163939314574332105750398867320830880029674204815808792991984901351497611073296072828836622699657336909168137386833161371320905035587435412454557648505757311597235973438748146903043807374388949334981158479100643833130477425847443395580766203357669372974070339687753945155858784009179805827312241762975769313257794641137417905583062227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bc6725158f7836ff118c72911f9ffd91dad4771
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (708 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antinhogreentravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antinhogreentravel.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donghonhapkhau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donghonhapkhau.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoathuyetduongnaonibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoathuyetduongnaonibifa.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavishdecor.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavishdecor.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghiennhadep.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghiennhadep.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanglongedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanglongedu.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antinhogreentravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antinhogreentravel.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donghonhapkhau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donghonhapkhau.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoathuyetduongnaonibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoathuyetduongnaonibifa.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavishdecor.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nghiennhadep.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nghiennhadep.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanglongedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanglongedu.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e85878fdc000004030046304402205c3938ab92b4073360b7a9b95454b3354ac069a260b27195a8dfe1caba7d3c5d02203c51c8e0e74433e538a7401271a4244d7465f25c3cf64a9b503eba84add7175b007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e85878f880000040300463044022033a86410ba66a342d81b6ed56ef5ab3b500670b680b7d445fb43ccdb9b79fd9802203105ada67ab8a514bcfa85e4f4cda84d1eaaae40382d3d159acc4644e70f5c40
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0041245c159c99579373a90b07cffc97818e68ab0080f5c7ac6ee1db2555ba3cb961accdd690dad6a00ff87ecf41f1d9fe74f97e78d541b0573afe4a79f4824a6b1bb4a202193216b61b72c09549167e42664ddfb38bebe44cad9eeb078d9655324ac4413c83ce83706c8f3bf37e61da01384b479fcec0f6a60889f444faa1ae6fe2cf9ea570ac8e712d0a616608c9011109ed58287bd9153f384a1f9f0ef6abc36b1b27b0f888ab431e165943431dec19c73d9865669029117ea4f233f204317cfb389ecaa5e1b03dfa124b6e647b88aac1364294acecef92ef23e89fc6b5d54a8682f62f7c11072458e0e60ed3da69e66d7cb31dcdc11013cbff4677d3e7fe83