colormedia.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:aa:3f:71:be:57:14:85:1f:1d:29:e7:c7:b9:d4:f1:09:dd was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=colormedia.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:aa:3f:71:be:57:14:85:1f:1d:29:e7:c7:b9:d4:f1:09:dd
Serial Number (int): 406381478057437014977604394780857616894429
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:86:77:b0:b8:ee:41:9c:6b:c3:e3:7e:1d:b6:fe:68:a1:b5:41:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:84:0a:a4:61:66:01:32:a1:29:10:b2:28:3b:c8:62:10:67:7a:68
Fingerprint (sha256): 21:6a:0b:56:de:5c:a6:86:cd:b5:3f:ce:57:25:4e:66:7f:e6:83:ea:bc:ac:04:24:32:3b:a6:c3:67:de:aa:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate colormedia.vn

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for colormedia.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

colormedia.vn
cpanel.colormedia.vn
crm.colormedia.vn
demo.colormedia.vn
webdisk.colormedia.vn
webmail.colormedia.vn
www.colormedia.vn
www.demo.colormedia.vn

Other certificates including the domain name colormedia.vn

(limited to 100 certificates)
crm.colormedia.vn
parami2.ihappy.info
webmail.newstarhomes.net
tuyendung.colormedia.vn
crm.colormedia.vn
colormedia.vn
tethethang.colormedia.vn
tethethang.colormedia.vn
colormedia.vn
colormedia.vn
colormedia.vn
cpcalendars.duy4.name.vn
summerslam.tnl-lease.vn
colormedia.vn
tuyendung.colormedia.vn
mail.ihappy.info
*.otochuyendunghanoi.com
*.ihappy.info
colormedia.vn
combo.colormedia.vn
mail.meyluciabay.com
tuyendung.colormedia.vn
tethethang.colormedia.vn
colormedia.vn
colormedia.vn
colormedia.vn
profile.colormedia.vn
*.giadungducmag.com
webmail.newstarhomes.net
colormedia.vn
enhnplogiscomvn.ihappy.info
colormedia.vn
mail.meyluciabay.com
colormedia.vn
colormedia.ihappy.info
www.thelegacy2.ihappy.info
www.profilecolormedia.ihappy.info
foutecvn.com
profile.colormedia.vn
www.profilecolormedia.ihappy.info
brief.colormedia.vn
www.board.duy6.name.vn
trihemofa.vn
crm.colormedia.vn
board.colormedia.vn
crm.colormedia.vn
www.meyluciabay.com
solartop.vn
www.meyluciabay.com
www.gammavietnam.com.vn.duy5.name.vn
colormedia.vn
tethethang.colormedia.vn
tethethang.colormedia.vn
www.colormedia.vn
www.profilecolormedia.ihappy.info
tethethang.colormedia.vn
profile.colormedia.vn
colormedia.vn
parami2.ihappy.info
crm.colormedia.vn
summerslam.tnl-lease.vn
*.ihappy.info
colormedia.vn
www.colormedia.vn
www.colormedia.vn
colormedia.vn
mail.ihappy.info
*.otochuyendunghanoi.com
*.giadungducmag.com

Certificate

The complete raw certificate details for colormedia.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6+AeEIeb8CeYzCJdkb+
NfkT8QhkDE/JkpFGCZmRVbHqES9JdjNo3+kYitlVbwt7NqJoQimpkYqNh4CgPxhF
76G43GByWSLR5pJx4c0yDl97qUm0FQAFSVZOlNoytQh/1PKRWKAqwSqUVOijcY/d
RIKQVhUW8LtMaLWFK1ZNdPrKCr5gqeUm2QXYFPAuaT57NdfZXr8Q5JbBxSNo9+jS
9APUqaDFHXTIST1KPSsejngatjP4snyyAd8YoLC87oaeYHuY6xdLeraSs2DD+H7v
0q2QPEppVmXMjpU0OP5ZKmKBlrD91XQA8cHKeNFppuNiNM7lWKsXlFLc9cGCqIM9
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406381478057437014977604394780857616894429
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 13:43:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-08 13:43:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'colormedia.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24703012648726304892327753752520407141887529502230963157345854590582244042228954531977726864690157880459611472983626726466744560865166566393020092604491099126787813988682769872821667328137070863774492524526779617710279305269650052203105104493018927446975110057827261843937236084638097257049085146528626891932340852482042699881015886243786576584271516756694083455683887232947880705555034374808253720215134073396101349475841384249887348579840010134437192143951317214025758089748482112938915474014917202272337694523406091097080897892401041055492552336005466316079304784577669538218367447605346287956670287779228027141387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b8677b0b8ee419c6bc3e37e1db6fe68a1b54150
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colormedia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.colormedia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.colormedia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.colormedia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.colormedia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.colormedia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colormedia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.colormedia.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a028de5ab0000040300473045022100d9b48a7bbff6f00e7b9ca9569c62944a2f518675054e7e5afa787c4c3853971a022058684f65a3c7c5c12784ee2038224f041d8a9596767a0ff11f9f75904c74074a007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a028de5be00000403004830460221009c68427108287103415325b9e45efaf30668a0d455571e25b6ddd9498a549392022100fcf66d2df88132f9ceb0fc422a6604b4ed586593d632dcbd90dc17d5c97cc0d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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