*.baoviet.com.vn

- BAOVIET HOLDINGS -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 52:15:46:06:4c:8b:51:6b:2b:4d:8f:35 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BAOVIET HOLDINGS

Organization: BAOVIET HOLDINGS
State / Province: Hanoi
Locality: Hanoi
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 52:15:46:06:4c:8b:51:6b:2b:4d:8f:35
Serial Number (int): 25403488929412059854898302773
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: e2:c3:7e:4b:8c:ac:51:5d:65:b0:0f:bc:8c:10:6d:1d:a2:e9:0f:cd
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 88:e6:c8:7d:ed:eb:bd:97:c0:ab:79:f2:f9:25:a0:36:93:46:2d:37
Fingerprint (sha256): 2d:17:1a:57:00:40:b4:6c:a9:7d:e2:ca:2e:55:df:b4:c3:1d:b3:43:ab:57:91:4b:03:16:31:79:8f:ae:c0:54

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.baoviet.com.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.baoviet.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.baoviet.com.vn
baoviet.com.vn

Other certificates including the domain name baoviet.com.vn

(limited to 100 certificates)
*.vpn.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
ocr.baoviet.com.vn
*.baoviet.com.vn
covid19.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.vpn.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn

Certificate

The complete raw certificate details for *.baoviet.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh8uZtrx+3JSF+plL8TO
F0BIXEVA9NF2jyEdsMqPNVXfvSkxfk+k1i7YtfPdKuxJV2jIOYvuU6AFOew8O5o0
vYv6oIxfT5bD3j5IvMM9dsEQkd5qkuvvmh4FHlX8d30tnVesg2DKmJEuQB8G7Nj0
/CTCd9jubYL+m44WC4YtQrZgejvRfOOC7c6QDYmdDTqSzCebgJQyL+obSlp1Yq/e
jo/NHSoO2MH5i6EEX5aWecAt8zRTPDTcyw1yCoQoGXJCUQNG8IYuMbm+f4ZxdwFG
k8kF8/rRVnL0/tWqh5mNtjJ+ZmVQTpeEvJXEAVITgOcOG+0zhOF78mvDqUBxnGx7
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25403488929412059854898302773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 08:47:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-25 09:51:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BAOVIET HOLDINGS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.baoviet.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20465981455375147970854894893144253018612571017196527408680466250468745327606672922546462390967899305402996355257414435396969151299867669136350198731351529924066203603255237618173749958838900633813631020531375351948377472633732800100968257214322990963533522732755397918949213399218071298772770578150909658924673550216445571212910832985137380655741239113125178991037725973518208291975973385749380539270411901338937117462365944502783744236904841313225758590652453942895653373308502151451575662822527900219085883073582311363092832507631317815228849687532920719540992357767504216885427126481353916712357885668812890340173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baoviet.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baoviet.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2c37e4b8cac515d65b00fbc8c106d1da2e90fcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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