www.brosis.com.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:47:dc:fc:ec:b0:f2:8e:5f:6d:2a:e0:d6:99:79:0f:0b:e4 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.brosis.com.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:dc:fc:ec:b0:f2:8e:5f:6d:2a:e0:d6:99:79:0f:0b:e4
Serial Number (int): 285790649265216293669159017807529074691044
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a2:9a:6a:9c:21:57:67:da:4f:80:6e:38:13:c4:71:c9:8b:d2:df:ed
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 46:56:c7:09:08:19:b8:59:aa:dc:e4:3a:32:91:b8:31:3b:e5:3f:b3
Fingerprint (sha256): 27:d5:2a:73:e0:b2:7e:7d:e3:c8:6c:ba:1f:e8:0b:f3:fe:40:92:e6:51:70:cd:da:b5:f9:a4:dd:57:9e:b5:5a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.brosis.com.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brosis.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brosis.com.vn
brosis.com.vn.duy6.name.vn
cthvietnam.com
cthvietnam.duy6.name.vn
digimindgroup.duy6.name.vn
grandeurpalace.duy6.name.vn
grandeurpalace.vn
haehair.com
haehair.duy6.name.vn
kanwayaudio.com
kanwayaudio.duy6.name.vn
weaponpaint.com
weaponpaint.duy6.name.vn
www.brosis.com.vn
www.brosis.com.vn.duy6.name.vn
www.cthvietnam.com
www.cthvietnam.duy6.name.vn
www.digimindgroup.duy6.name.vn
www.grandeurpalace.duy6.name.vn
www.grandeurpalace.vn
www.haehair.duy6.name.vn
www.kanwayaudio.com
www.kanwayaudio.duy6.name.vn
www.weaponpaint.duy6.name.vn

Other certificates including the domain name brosis.com.vn

(limited to 100 certificates)
www.weaponpaint.duy6.name.vn
www.brosis.com.vn
sni.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for www.brosis.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP0j8iNxspPHZV5IVCOi
oIrwwJmBm9UcYnaz+j6AKloucAvh1cGJWLjGV4QryFyY7Dh0PgHfByo/5KYlNj+7
xEZoPDHLo0YoOEfF55T6FAUeGALxTjVkckOxbETvblMozbwCi5KG7HY5zwWr0eX4
HcSSZy8HmwpU6HkOGXDNZxSNo6PWASch4nQOuVaTFx+w8EaCLVU8FC1B4fPVaOXY
3zhOq93JrJ4GJlF0KrMGVjBhTW94gDWgVMDXdPAJcYxY/l1ZDBUImlQwItFm5TI8
j/FLdfKkysfhAO6vvnekqS1TYavXOKhs0ZS0XZIKP68x/lG31eUdFzB7LoUKd4ha
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285790649265216293669159017807529074691044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 13:44:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 13:44:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brosis.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25877442403378040138385343793845935381110711979853691871061723550140467527086518607473269336070058464279555703353417393990834758397525430590770368454519269676873240623112485449548949127033586464430529736679277537484732423285654890240093471528350722465249932616731635647745970116387086182738284409139502074353646170313073228754529408725481521614980210847503082569882401883746999660191842168390263844059422912052969564787182227480621253627576411858425475278636776000407983231954844313715453886952822933731988095562238757040752537704528507812471586755055431243627288537458618580296558843934277842448456048373927338596997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a29a6a9c215767da4f806e3813c471c98bd2dfed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brosis.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brosis.com.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cthvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cthvietnam.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digimindgroup.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeurpalace.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeurpalace.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'haehair.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanwayaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanwayaudio.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weaponpaint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weaponpaint.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brosis.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brosis.com.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cthvietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cthvietnam.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digimindgroup.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeurpalace.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeurpalace.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haehair.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanwayaudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanwayaudio.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weaponpaint.duy6.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d3bedb147000004030047304502207d154883e226ea1db0b93f98482dc4caa58768666c42fcca97bd1e536ea2d268022100be92263837489b394eb507f6e76c3089d3ac42fc3358d5396384a20160f0b19f0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d3bedb158000004030047304502210088094c63f80dc5be45dd698a1932790c3c1dfd0f012206134a4423386bee047602205946b469931812cd2b1aa95890902a4d2c06199a4cd89460a7ccd460f21e24be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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