*.stag.teko.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:e1:1c:46:db:79:11:c9:7a:a8:ad:22:06:36:82:17:65:90 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.stag.teko.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:1c:46:db:79:11:c9:7a:a8:ad:22:06:36:82:17:65:90
Serial Number (int): 337937976648593784983945041467304886887824
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:44:ac:d7:9f:c3:1f:cb:28:05:2c:71:46:62:c9:5e:e1:cd:36:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3c:ee:29:1f:10:76:12:f3:cd:42:6b:9a:77:6a:5a:c6:83:db:97:92
Fingerprint (sha256): 32:23:9f:86:ca:fa:ac:86:f6:77:25:b0:c7:99:bd:28:59:f8:32:40:c3:a5:5c:8e:da:dd:93:af:79:fa:b6:8c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate *.stag.teko.vn

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stag.teko.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.a.teko.vn
*.cloud.teko.vn
*.custom.dev.teko.vn
*.custom.stag.teko.vn
*.dev.phongvu.vn
*.dev.teko.vn
*.dev.tekoapis.net
*.dev.vnshop.vn
*.develop.tekoapis.net
*.dgl-dev.teko.vn
*.dgl-dev.tekoapis.net
*.dgl-staging.teko.vn
*.dgl-staging.tekoapis.net
*.dgl-test1.teko.vn
*.dgl-test1.tekoapis.net
*.dr.teko.vn
*.dr.tekoapis.com
*.echo-app.dev.tekoapis.net
*.erp.dev.teko.vn
*.erpadmin.dev.teko.vn
*.experiment.svc.dev.teko.vn
*.experiment.svc.stag.teko.vn
*.hackathon.teko.vn
*.hackathon.tekoapis.net
*.iam-admin.test-1.teko.vn
*.iam-identity.test-1.teko.vn
*.iam-oauth.test-1.teko.vn
*.iam-profile.test-1.teko.vn
*.id.dev.teko.vn
*.id.stag.teko.vn
*.karavan.stag.teko.vn
*.landing.dev.teko.vn
*.landing.stag.teko.vn
*.landing.test-1.teko.vn
*.lb-admin.dev.teko.vn
*.lb-admin.stag.teko.vn
*.lb-admin.test-1.teko.vn
*.mkt.dev.teko.vn
*.mkt.stag.teko.vn
*.oauth.dev.teko.vn
*.oauth.stag.teko.vn
*.pages.teko.vn
*.pinpos-be.dev.teko.vn
*.pinpos-be.stag.teko.vn
*.policies.svc.dev.teko.vn
*.policies.svc.stag.teko.vn
*.policy-service.svc.dev.teko.vn
*.policy-service.svc.stag.teko.vn
*.pos365-diamond.dgl-dev.teko.vn
*.pos365-diamond.dgl-staging.teko.vn
*.pos365-diamond.dgl-test1.teko.vn
*.pos365.dgl-dev.teko.vn
*.pos365.dgl-staging.teko.vn
*.pos365.dgl-test1.teko.vn
*.saas.teko.vn
*.saas.tekoapis.net
*.sandbox-1.teko.vn
*.sandbox-2.teko.vn
*.sandbox-3.teko.vn
*.sandbox-4.teko.vn
*.sandbox-5.teko.vn
*.sandbox-6.teko.vn
*.sandbox-7.teko.vn
*.staff.dev.teko.vn
*.staff.stag.teko.vn
*.stag.phongvu.vn
*.stag.teko.vn
*.stag.tekoapis.net
*.stag.vnshop.vn
*.stage.tekoapis.net
*.svc.dev.teko.vn
*.tempi.dev.teko.vn
*.tempi.stag.teko.vn
*.test-1.phongvu.vn
*.test-1.teko.vn
*.test-1.tekoapis.net
*.test-1.vnshop.vn
*.test-2.teko.vn
*.test-2.tekoapis.net
*.test-3.teko.vn
*.test-3.tekoapis.net
*.test-4.teko.vn
*.test-4.tekoapis.net
*.vnshop.svc.dev.teko.vn
*.vnshop.svc.stag.teko.vn

Other certificates including the domain name teko.vn

(limited to 100 certificates)
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
*.teko.vn
sni206743.cloudflaressl.com
test-crm.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
www.ec-play.com
jira.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
confluence.teko.vn
sni206743.cloudflaressl.com
persisch.de
sni206743.cloudflaressl.com
*.services.teko.vn
*.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
test.jinhechinese.com
aionpsi.com
*.teko.vn
sni206743.cloudflaressl.com
*.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
ahmedkhairaldin.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
mendfy.com
jira.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
*.teko.vn
chedraui.app
mhvroyalmotors.com
telegram.design
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
www.gethandouts.com
master.ml.teko.vn
sni206743.cloudflaressl.com
nanaychat.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
*.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
test.everydish.app
sni206743.cloudflaressl.com
*.teko.vn
sni206743.cloudflaressl.com
farishammoud.dev
sni206743.cloudflaressl.com
sms-brandname.teko.vn
git.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
*.teko.vn
*.teko.vn
*.stag.teko.vn
jenkins.teko.vn
letsquiz.tk
*.teko.vn
shop.leapthat.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
*.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
speednoisemovement.com
teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
alertmanager.teko.vn
sni.cloudflaressl.com
innov.plusscommunities.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
*.teko.vn
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com
sni206743.cloudflaressl.com

Certificate

The complete raw certificate details for *.stag.teko.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMiDCCC3CgAwIBAgISA+EcRtt5Ecl6qK0iBjaCF2WQMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMjUwMzQ2MzRaFw0yNDAzMjQwMzQ2MzNaMBkxFzAVBgNVBAMM
Diouc3RhZy50ZWtvLnZuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
s8yPDCfWyaMopgk+lqpByIKpnIrrl8hax6EdEuOLPjcjtz0HALQvAO+ANrkGqQ0j
oSRwAV6tig1nnBpouGGo3o6c7WlHyNM3TtLq2eQI9yVkx71zLcwy3+lFIp35L99T
/MPQb7n+z2jDPq9o4QgPFnbpVHwdYf6YmZGuwDqhmN/+S5DqpsQ3fr8QMbTRGZ61
ivFXaKIT/8Bdg1gYGFEvu/aTY+nvH58K6OFO7FgZBzQk+0zRGm+XxY4zIXB1Z4J3
eFGkWjM4UPtB0S/FKRlXIUKVg+sWHE9wjnpGrZuGp87H4ocqNlWGsTHWfNIot9LK
tDBo+3sCDOhacrbyuh2kHQIDAQABo4IJrzCCCaswDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBTJRKzXn8MfyygFLHFGYsle4c02yDAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzCCB7YGA1UdEQSCB60wggepggsqLmEudGVrby52boIPKi5jbG91ZC50ZWtvLnZu
ghQqLmN1c3RvbS5kZXYudGVrby52boIVKi5jdXN0b20uc3RhZy50ZWtvLnZughAq
LmRldi5waG9uZ3Z1LnZugg0qLmRldi50ZWtvLnZughIqLmRldi50ZWtvYXBpcy5u
ZXSCDyouZGV2LnZuc2hvcC52boIWKi5kZXZlbG9wLnRla29hcGlzLm5ldIIRKi5k
Z2wtZGV2LnRla28udm6CFiouZGdsLWRldi50ZWtvYXBpcy5uZXSCFSouZGdsLXN0
YWdpbmcudGVrby52boIaKi5kZ2wtc3RhZ2luZy50ZWtvYXBpcy5uZXSCEyouZGds
LXRlc3QxLnRla28udm6CGCouZGdsLXRlc3QxLnRla29hcGlzLm5ldIIMKi5kci50
ZWtvLnZughEqLmRyLnRla29hcGlzLmNvbYIbKi5lY2hvLWFwcC5kZXYudGVrb2Fw
aXMubmV0ghEqLmVycC5kZXYudGVrby52boIWKi5lcnBhZG1pbi5kZXYudGVrby52
boIcKi5leHBlcmltZW50LnN2Yy5kZXYudGVrby52boIdKi5leHBlcmltZW50LnN2
Yy5zdGFnLnRla28udm6CEyouaGFja2F0aG9uLnRla28udm6CGCouaGFja2F0aG9u
LnRla29hcGlzLm5ldIIaKi5pYW0tYWRtaW4udGVzdC0xLnRla28udm6CHSouaWFt
LWlkZW50aXR5LnRlc3QtMS50ZWtvLnZughoqLmlhbS1vYXV0aC50ZXN0LTEudGVr
by52boIcKi5pYW0tcHJvZmlsZS50ZXN0LTEudGVrby52boIQKi5pZC5kZXYudGVr
by52boIRKi5pZC5zdGFnLnRla28udm6CFioua2FyYXZhbi5zdGFnLnRla28udm6C
FSoubGFuZGluZy5kZXYudGVrby52boIWKi5sYW5kaW5nLnN0YWcudGVrby52boIY
Ki5sYW5kaW5nLnRlc3QtMS50ZWtvLnZughYqLmxiLWFkbWluLmRldi50ZWtvLnZu
ghcqLmxiLWFkbWluLnN0YWcudGVrby52boIZKi5sYi1hZG1pbi50ZXN0LTEudGVr
by52boIRKi5ta3QuZGV2LnRla28udm6CEioubWt0LnN0YWcudGVrby52boITKi5v
YXV0aC5kZXYudGVrby52boIUKi5vYXV0aC5zdGFnLnRla28udm6CDyoucGFnZXMu
dGVrby52boIXKi5waW5wb3MtYmUuZGV2LnRla28udm6CGCoucGlucG9zLWJlLnN0
YWcudGVrby52boIaKi5wb2xpY2llcy5zdmMuZGV2LnRla28udm6CGyoucG9saWNp
ZXMuc3ZjLnN0YWcudGVrby52boIgKi5wb2xpY3ktc2VydmljZS5zdmMuZGV2LnRl
a28udm6CISoucG9saWN5LXNlcnZpY2Uuc3ZjLnN0YWcudGVrby52boIgKi5wb3Mz
NjUtZGlhbW9uZC5kZ2wtZGV2LnRla28udm6CJCoucG9zMzY1LWRpYW1vbmQuZGds
LXN0YWdpbmcudGVrby52boIiKi5wb3MzNjUtZGlhbW9uZC5kZ2wtdGVzdDEudGVr
by52boIYKi5wb3MzNjUuZGdsLWRldi50ZWtvLnZughwqLnBvczM2NS5kZ2wtc3Rh
Z2luZy50ZWtvLnZughoqLnBvczM2NS5kZ2wtdGVzdDEudGVrby52boIOKi5zYWFz
LnRla28udm6CEyouc2Fhcy50ZWtvYXBpcy5uZXSCEyouc2FuZGJveC0xLnRla28u
dm6CEyouc2FuZGJveC0yLnRla28udm6CEyouc2FuZGJveC0zLnRla28udm6CEyou
c2FuZGJveC00LnRla28udm6CEyouc2FuZGJveC01LnRla28udm6CEyouc2FuZGJv
eC02LnRla28udm6CEyouc2FuZGJveC03LnRla28udm6CEyouc3RhZmYuZGV2LnRl
a28udm6CFCouc3RhZmYuc3RhZy50ZWtvLnZughEqLnN0YWcucGhvbmd2dS52boIO
Ki5zdGFnLnRla28udm6CEyouc3RhZy50ZWtvYXBpcy5uZXSCECouc3RhZy52bnNo
b3Audm6CFCouc3RhZ2UudGVrb2FwaXMubmV0ghEqLnN2Yy5kZXYudGVrby52boIT
Ki50ZW1waS5kZXYudGVrby52boIUKi50ZW1waS5zdGFnLnRla28udm6CEyoudGVz
dC0xLnBob25ndnUudm6CECoudGVzdC0xLnRla28udm6CFSoudGVzdC0xLnRla29h
cGlzLm5ldIISKi50ZXN0LTEudm5zaG9wLnZughAqLnRlc3QtMi50ZWtvLnZughUq
LnRlc3QtMi50ZWtvYXBpcy5uZXSCECoudGVzdC0zLnRla28udm6CFSoudGVzdC0z
LnRla29hcGlzLm5ldIIQKi50ZXN0LTQudGVrby52boIVKi50ZXN0LTQudGVrb2Fw
aXMubmV0ghgqLnZuc2hvcC5zdmMuZGV2LnRla28udm6CGSoudm5zaG9wLnN2Yy5z
dGFnLnRla28udm4wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYyf
S9DQAAAEAwBHMEUCIQCFZoK28gFW7/odUOnxX9449b6ysyb2PMaJMFWaiZGkWAIg
QRvMNHqv8DwSJ2dcqR3sjaKO5QWaD5T0G61D3KtVmD8AdgAp0DobtnSqcRzTA1tl
V8FPiqeLT+g4lEnspFP5RL0kaAAAAYyfS8/GAAAEAwBHMEUCIEW0b/c0XNQ/bxUK
iz3h62ZEnOl5HSN8Pe7kVoFHpBaKAiEAkSIGP7ipbxf4ovszOKLr56Vb3VaMJ/CT
L+XnfuMRFowwDQYJKoZIhvcNAQELBQADggEBAKfLapvjFfCwydvxmyxvBwNhLWqt
XKxE7B7j7UUmVxK2eIrAGDvgNeRWYe1gUiY8xI6kBmiIR0of4XzgyiPgvJ+MDMcQ
7l9CfuICHcRjK/LLiODGMt8HC3Ks3U8PHLtqKMqKjbEXTboIqlRHa5Ns538XRehG
VCl5kjacTkwlKfgUc1PHDjVinrPxD8XiLodLMSdbv+Gatd1MZgoyBDraEnQd1QUX
yE/2oXs/osUIuCl18kC02YZmUsLsPHEThPkpgPoH2i1VG4j0F3/2oxgBdWKLBsLK
Hp6wZ9ifX5JDIRHnKV+U+awdBWeZ1LSLynz3hV2wnrcBhwmMMQXMWv8FYLc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8yPDCfWyaMopgk+lqpB
yIKpnIrrl8hax6EdEuOLPjcjtz0HALQvAO+ANrkGqQ0joSRwAV6tig1nnBpouGGo
3o6c7WlHyNM3TtLq2eQI9yVkx71zLcwy3+lFIp35L99T/MPQb7n+z2jDPq9o4QgP
FnbpVHwdYf6YmZGuwDqhmN/+S5DqpsQ3fr8QMbTRGZ61ivFXaKIT/8Bdg1gYGFEv
u/aTY+nvH58K6OFO7FgZBzQk+0zRGm+XxY4zIXB1Z4J3eFGkWjM4UPtB0S/FKRlX
IUKVg+sWHE9wjnpGrZuGp87H4ocqNlWGsTHWfNIot9LKtDBo+3sCDOhacrbyuh2k
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337937976648593784983945041467304886887824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 03:46:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 03:46:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stag.teko.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22697528282502340463105885647396313364449353964400685851675234254324751722206820251906268577060933711858977737481716238088456031374968882917365454145760984913830536790015372607445615500015122829175277141019223629722020925958593633165886309128503195063494062142586481887465108266948790898644136382081990387606163280336982137339404916171381807926286205274940941902088015548323503044651721555780247165564162996704421735171485650885028303468502153482681938829889625363328366957016657762629308133510536006254563075162029221950967007255371013060620385753621611278822814158349174389301109464969158725525360300255568971277341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c944acd79fc31fcb28052c714662c95ee1cd36c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1965 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.a.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custom.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.custom.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.phongvu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.vnshop.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.develop.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgl-dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgl-dev.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgl-staging.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgl-staging.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgl-test1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dgl-test1.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr.tekoapis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.echo-app.dev.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erp.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.erpadmin.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experiment.svc.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.experiment.svc.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackathon.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackathon.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam-admin.test-1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam-identity.test-1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam-oauth.test-1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iam-profile.test-1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.id.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.id.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.karavan.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landing.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landing.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.landing.test-1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lb-admin.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lb-admin.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lb-admin.test-1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkt.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mkt.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oauth.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oauth.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pages.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinpos-be.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinpos-be.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policies.svc.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policies.svc.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policy-service.svc.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.policy-service.svc.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pos365-diamond.dgl-dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pos365-diamond.dgl-staging.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pos365-diamond.dgl-test1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pos365.dgl-dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pos365.dgl-staging.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pos365.dgl-test1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saas.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saas.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox-1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox-2.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox-3.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox-4.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox-5.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox-6.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox-7.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staff.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.phongvu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stag.vnshop.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svc.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempi.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempi.stag.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-1.phongvu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-1.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-1.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-1.vnshop.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-2.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-2.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-3.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-3.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-4.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test-4.tekoapis.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vnshop.svc.dev.teko.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vnshop.svc.stag.teko.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c9f4bd0d00000040300473045022100856682b6f20156effa1d50e9f15fde38f5beb2b326f63cc68930559a8991a4580220411bcc347aaff03c1227675ca91dec8da28ee5059a0f94f41bad43dcab55983f00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c9f4bcfc60000040300473045022045b46ff7345cd43f6f150a8b3de1eb66449ce9791d237c3deee4568147a4168a0221009122063fb8a96f17f8a2fb3338a2ebe7a55bdd568c27f0932fe5e77ee311168c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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