www.vnnic.vn

- Vietnam Internet Network Information Center -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 78:b2:07:c6:8d:49:db:3f:78:4e:c6:88 was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Vietnam Internet Network Information Center

Organization: Vietnam Internet Network Information Center
State / Province: Hanoi
Locality: Hanoi
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 78:b2:07:c6:8d:49:db:3f:78:4e:c6:88
Serial Number (int): 37353426693654428420374709896
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 94:44:20:50:05:52:4e:d9:8a:ef:1e:56:82:19:5a:d3:b7:05:1d:e1
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 1d:f5:dc:58:73:de:50:44:43:f4:9d:e6:c9:f0:84:0b:db:1b:30:1d
Fingerprint (sha256): 30:3c:c6:87:9d:d3:d0:f6:d5:03:2e:43:41:52:85:aa:e0:83:56:ae:89:4b:3f:e4:60:ae:f0:2b:6c:03:d7:3d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate www.vnnic.vn

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vnnic.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vnnic.vn
autodiscover.vnnic.vn
mail.vnnic.vn
owa.vnnic.vn
aw.vnnic.vn
mail-archive.vnnic.vn
www.thongbaotenmien.vn
vnnic.vn

Other certificates including the domain name vnnic.vn

(limited to 100 certificates)
helpdesk.vnnic.vn
helpdesk.vnnic.vn
www.vnnic.vn
*.vnnic.vn
www.vnnic.vn
www.vnnic.vn
sc.vnnic.vn
www.vnnic.vn
www.vnnic.vn
www.vnnic.vn
academy.vnnic.vn
*.vnnic.vn
www.vnnic.vn
*.vnnic.vn
academy.vnnic.vn
*.vnnic.vn
www.vnnic.vn
www.vnnic.vn
www.vnnic.vn
helpdesk.vnnic.vn
*.vnnic.vn
www.vnnic.vn
www.vnnic.vn
*.vnnic.vn
*.vnnic.vn
www.vnnic.vn

Certificate

The complete raw certificate details for www.vnnic.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71/deY2fnBjUKW0E+RLR
T1wmSeSJ8OD3WjpsKrIDSmaAi2SV+pTBEsdY/raFwKhqUbg0BWdX7Zta7sbIIhUC
jUcJ1J+S9t9kk6EkqqYQfYKtXghB0HgoiXf3pi4tq3hBrOfo9YtsdhpLavj0EgpL
TUtI39k3zOGsCRV1jbRO094LbWK0FJqJPkuO/ew62I+LzZxX07xei+EuDLPwTTaD
F6Yve6HTC9mmuITun8pu2jgMmEtVOV8VmsV0n6P9B/SyLUj3sGnAKdrqWRfmjeMA
ip9HMfIVCqWV9u15T2/NY5d7x9hPGkWRx3hJhxCv8l0jb79lam2GjQd/rRvMNuHb
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37353426693654428420374709896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 08:27:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-22 10:43:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vietnam Internet Network Information Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vnnic.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30218227747335660857187213736610478390521235728718653299613552665532810740541626592523181195688146676144725428309841492657642656635869782540448396603818766614214649033484883975670734511181882766534674499036881865631876212787952280094372775503975741011952925359267904479584066952225977456305003711348739286711887004460654576644662811993460500877741247501394788616455149851245828744846868361296628417384267402025936916163736546829572326077587114002972413651083005326970835982916039790649519293999422924300329614408784075910963841362535448681499634446165232141118269331251479131133401447404617523578239723641774878612373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (139 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vnnic.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.vnnic.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.vnnic.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.vnnic.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aw.vnnic.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail-archive.vnnic.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thongbaotenmien.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnnic.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9444205005524ed98aef1e5682195ad3b7051de1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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