www.vnpay.vn

- Viet Nam Payment Solution Joint Stock Company -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 2c:96:9a:f3:66:43:fb:03:f1:91:4a:3c was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Viet Nam Payment Solution Joint Stock Company

Company registration number: 0102182292
Organization: Viet Nam Payment Solution Joint Stock Company
Organization unit: IT Department
Address: Room 804A, No 22, Lang Ha Street, Lang Ha Ward, Dong Da District
State / Province: Hanoi
Locality: Hanoi
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:96:9a:f3:66:43:fb:03:f1:91:4a:3c
Serial Number (int): 13799411039447558646544812604
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: ce:9b:7b:17:c0:52:28:75:19:ae:7f:ba:27:81:a9:67:dd:71:6b:1a
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): bf:65:ac:01:0a:56:53:b6:40:dd:89:82:67:90:0d:1a:15:9f:20:47
Fingerprint (sha256): 2d:37:b4:bd:f4:4b:e1:81:06:d9:3f:63:6d:07:ad:89:b5:92:f4:1c:b3:47:d9:d7:7d:47:23:3a:4b:ca:8d:58

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate www.vnpay.vn

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vnpay.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vnpay.vn
mobilebk.vnpay.vn
agribank.vnpay.vn
lpb.vnpay.vn
owa.vnpay.vn
mail.vnpay.vn
autodiscover.vnpay.vn
vnpay.vn

Other certificates including the domain name vnpay.vn

(limited to 100 certificates)
vemaybay.vnpay.vn
www.gioithieuungvien.ihappy5.name.vn
chaohe.vnpay.vn
www.vnpay.vn
*.vnpay.vn
quoctenocnha.vnpay.vn
*.vnpay.vn
ganket.xn--s7-j9s.vn
*.vnpay.vn
*.vnpay.vn
www.vnpay.vn
*.vnpay.vn
vemaybay.vnpay.vn
*.vnpay.vn
viganket.vnpay.vn
*.vnpay.vn
deckf.org
id-dgl.vnpay.vn
chaohe.vnpay.vn
vemaybay.vnpay.vn
vemaybay.vnpay.vn
vemaybay.vnpay.vn
sanvang.ihappy.info
vidientu.vnpay.vn
pos.vnpay.vn
*.vnpay.vn
gioithieuungvien.vnpay.vn
webmail.newstarhomes.net
*.vnpay.vn
vidientu.vnpay.vn
vidientu.vnpay.vn
chinhsachbanhang.charmlonghai.vn
pay.vnpay.vn
*.vnpay.vn
www.vnpay.vn
next.golfhub.co
*.vnpay.vn
nagios.vnpay.vn
*.vnpay.vn
chaohe.vnpay.vn
hillsidehospital.ng
vidientu.vnpay.vn
id-admin-dgl.vnpay.vn
vidientu.vnpay.vn
ganket.xn--s7-j9s.vn
*.xn--s7-j9s.vn
crono.app
vnpay.vntopup.vn
www.quoctenocnha.ihappy.info
vemaybay.vnpay.vn
vnpay.vntopup.vn
truongtinland.vn.duy4.name.vn
www.vongquaymayman.ihappy.info
www.vnpay.vn
*.vnpay.vn
quoctenocnha.vnpay.vn
*.vnpay.vn
*.vnpay.vn
www.vnpay.vn
*.rayatraining.com
chaohe.vnpay.vn
vnpay.vn
*.vnpay.vn
*.vnpay.vn
id-dgl.vnpay.vn
vnpay.vntopup.vn
id-admin-dgl.vnpay.vn
www.vnpay.vn
vnpay.vn
www.vnpay.vn
pos.vnpay.vn
www.vnpay.vn
www.vnpay.vn
*.vnpay.vn
oauth-dgl.vnpayapis.com
vemaybay.vnpay.vn
pos.vnpay.vn
*.vnpay.vn
chaohe.vnpay.vn
*.vnpay.vn
*.vnpay.vn
www.vnpay.vn
vemaybay.vnpay.vn
*.vnpay.vn
www.vnpay.vn
next.golfhub.co
vidientu.vnpay.vn
oauth-dgl.vnpayapis.com
www.viganket.ihappy.info
gioithieuungvien.vnpay.vn
*.vnpay.vn
*.vnpay.vn
quoctenocnha.vnpay.vn
*.ihappy.info
pay.vnpay.vn
id-dgl.vnpay.vn
id-dgl.vnpay.vn
*.vnpay.vn
www.quoctenocnha.ihappy.info
*.vnpay.vn

Certificate

The complete raw certificate details for www.vnpay.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFk/AceDk4ZPbn1Vz3Vi
8PVOl9Rm9A6KhzB6gxs2PyQVt3mtu1SUhrxTBzFMYEB/GtA7le+Q5UHuoh2erhuh
0QKCi2qZtdpo2WHGmSylq7+n4op/6D58PwgFrFnS15s4XnAbPAjbhHI8t+J4t/ki
pqntTZEEE1yxyVuyxwyrGMkWNa4JMs5MlF7pI3g45OAb4AWgAzKDhdR/in4u4t/n
zzzVTE02KbfC36h7u4FzvEfY/B3vcQnKSvB+8PP7P2OW8BlpnvQyFyjQhXGFfRXF
DTZ2bj/6fEm23Xlukhg28fdSEMXQ7Lj8CZMcK0PoW6XF0N/Frjqsf9TlArI2jsJW
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13799411039447558646544812604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-05-08 05:47:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-29 07:50:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0102182292'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Room 804A, No 22, Lang Ha Street, Lang Ha Ward, Dong Da District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Viet Nam Payment Solution Joint Stock Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vnpay.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25796623115526374606422927282005855395483500722527964494920629726176358553047283311941324610639102586203665008617306720246223817895559913092757341173272385550723296158438569827217384044625503401918462951762612623481505705754864290032130577632356068371864279936518376268555165182219473992782918025578697083287733851898604340765186245063510872563771546222473579668792033257237434817950330506684115986557511064684463027790237825267437423086021571902196364279734806018316653147251765368176453400477920013856315337831027554556941974412567118956687382012159738675781027161096381666413547676601705212615083837808142085936813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilebk.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agribank.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpb.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnpay.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce9b7b17c052287519ae7fba2781a967dd716b1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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