agent.hpt.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:13:2f:d8:53:77:23:57:70:1e:c4:c9:67:a6:01:d9:ad:37 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=agent.hpt.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:13:2f:d8:53:77:23:57:70:1e:c4:c9:67:a6:01:d9:ad:37
Serial Number (int): 267865819711580991438118840861715020229943
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:26:8a:d8:ac:04:32:e5:af:98:a1:aa:4d:b5:04:a6:d5:47:b7:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:3d:f1:16:7c:f6:e0:97:b3:71:26:d3:60:85:0e:12:e3:b3:4e:0b
Fingerprint (sha256): 28:66:da:76:8b:be:4f:27:c2:c6:92:6e:33:2f:3c:35:db:e8:28:6f:f5:12:3a:62:83:c7:22:8d:1a:f5:2b:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate agent.hpt.vn

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agent.hpt.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agent.hpt.vn
cmdb.hpt.vn
jira.hpt.vn
kanban.hpt.vn
minio.hpt.vn
oms.hpt.vn
pbi.hpt.vn
pgp.hpt.vn
service.hpt.vn
servicedesk.hpt.vn
skb.hpt.vn
sp.hpt.vn
srp.hpt.vn
ticket.hpt.vn
tlnsdp.hpt.vn
unl.hpt.vn

Other certificates including the domain name hpt.vn

(limited to 100 certificates)
itsupport.adhocteam.us
helpdesk.ytl.com
helpdesk.ytl.com
ck.hpt.vn
helpdesk.aaanm.org
ck.hpt.vn
helpdesk.ytl.com
helpdesk.ytl.com
agent.hpt.vn
servicedesk.veritechkw.com
eform.has.hpt.vn
project.hsi.hpt.vn
ithelpdesk.splashbi.com
ithelpdesk.splashbi.com
vas-demo.hpt.vn
helpdesk.pcrm.org
helpdesk.ytl.com
sdpmsp.hsi.hpt.vn
servicedesk.tscapparel.com
helpdesk.ytl.com
ticket.hpt.vn
portalitsuporte.griner.co.com
csep.hpt.vn
helpdesk.ytl.com
servicedesk.hpt.vn
ck.hpt.vn
project.hsi.hpt.vn
ck.hpt.vn
ticket.hpt.vn
ck.hpt.vn
itservicedesk.inspireer.com
ticket.hpt.vn
ck.hpt.vn
servicedesk.novasourcepower.com
helpdesk.ytl.com
*.hpt.vn
agent.hpt.vn
ck.hpt.vn
ck.hpt.vn
project.hsi.hpt.vn
ck.hpt.vn
*.hpt.vn
agent.hpt.vn
*.hpt.vn
ticket.hpt.vn
redbot.hsi.hpt.vn
*.hpt.vn
agent.hpt.vn
portalitsuporte.griner.co.com
orchestrator.hsi.hpt.vn
portalitsuporte.griner.co.com
helpdesk.ytl.com
ticket.hpt.vn
project.hsi.hpt.vn
helpdesk.ytl.com
itsupport.adhocteam.us
sdpmsp.hsi.hpt.vn
helpdesk.ytl.com
ck.hpt.vn
portalitsuporte.griner.co.com
agent.hpt.vn
helpdesk.ytl.com
support.opiant.com
servicedesk.veritechkw.com
helpdesk.ytl.com
ck.hpt.vn
support.lrp.com
servicedesk.novasourcepower.com
helpdesk.awazel.com
ticket.hpt.vn
helpdesk.awazel.com
agent.hpt.vn
servicedesk.tscapparel.com
agent.hpt.vn
ck.hpt.vn
helpdesk.ytl.com
sdpmsp.hsi.hpt.vn
git.hpt.vn
servicedesk.tscapparel.com
helpdesk.ytl.com
ck.hpt.vn
servicedesk.veritechkw.com
servicedesk.tscapparel.com
helpdesk.ytl.com
helpdesk.ytl.com
helpdesk.pcrm.org
hpt.vn
servicedesk.novasourcepower.com
ck.hpt.vn
helpdesk.netlinkbus.com
helpdesk.awazel.com
itsupport.adhocteam.us
servicedesk.hpt.vn
helpdesk.ytl.com
hpt.vn
helpdesk.ravens.nfl.net
ck.hpt.vn
eform.has.hpt.vn
itservicedesk.inspireer.com
helpdesk.ytl.com

Certificate

The complete raw certificate details for agent.hpt.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iXMvRDuugUGKtj/oAKZ
m1kdEhpSrcmUDZ8iEvyLglWrHwlmdLdkiFuGkY86ejpgsqV5bCk0Pd5BJDGVFgRz
s4scKy8XuWz5bbkA9jRMnFsRq3r1epjk0kOBxSiY903QYO0HZQep7JhcgVP0p2kx
kw2nRUEjNOSPu4wgBXYlgkd5Wu71J1PZMef9d3kn114YAr3m4rdfQhC2sKT8167j
PfD7lOmcqBU4wycfA1MukYPngfHeyX+2MBVdHetnT+8c681uteE1K8z9ndJySiAZ
2wKRmzZFuPAsfdl4oaJRzlo8QzZ1mcJb/47h7TLKI0I6n4ZfS3U5BK1j2tA8hZKW
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267865819711580991438118840861715020229943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 05:21:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 05:21:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agent.hpt.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28043543458794990680157641073159678928953746623941334779466658177610528188696660323992551367894360672528335421621974248967218669720795512503247959604480603454836430419973419622989384701483900234875744090627054793446862241575575832677109808965180273872848587326440302273436374349925338121039063391696302968544218229957605736829057202732696889945734176192197220307474734445740833562839626302264198021837137715872628632216026865582924373788396442135128978790790648308395378317004179896569016938224893134299300417503503539522941279679674895911505135220030141921853185324306690924446491983961601328295655267917639749637671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26268ad8ac0432e5af98a1aa4db504a6d547b7fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmdb.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kanban.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minio.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbi.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgp.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicedesk.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skb.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srp.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ticket.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlnsdp.hpt.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unl.hpt.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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