tiannenggroupvn.com

Issued by R3

About this certificate

This digital certificate with serial number 03:3e:5e:e5:ad:8d:06:88:c0:30:9e:05:8e:c8:63:d1:20:d1 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tiannenggroupvn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3e:5e:e5:ad:8d:06:88:c0:30:9e:05:8e:c8:63:d1:20:d1
Serial Number (int): 282560504531993365819992661209971772432593
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:6e:25:55:e3:c7:9f:ec:ce:f2:b6:1c:c3:64:1e:dc:a0:e9:56:ee
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:9f:9e:65:77:97:e9:66:c3:7b:72:17:e5:21:de:3b:47:5e:0b:17
Fingerprint (sha256): 34:76:0b:a9:f4:d6:88:93:f6:86:26:aa:95:8c:b0:0e:13:e9:b2:63:b9:40:a6:ae:25:db:be:2f:c9:a6:bb:3e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tiannenggroupvn.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tiannenggroupvn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

668jsc.duy6.name.vn
668jsc.vn
datvangtiemnang.duy6.name.vn
grandeurpalace.duy6.name.vn
grandeurpalace.vn
mayindatehc.com
mayindatehc.duy6.name.vn
tiannenggroupvn.com
tiannenggroupvn.duy6.name.vn
tonmatpan.com.vn
tonmatpan.duy6.name.vn
vinhomes-vuyenhaiphong.duy6.name.vn
vinhomes-vuyenhaiphong.vn
www.668jsc.duy6.name.vn
www.datvangtiemnang.duy6.name.vn
www.grandeurpalace.duy6.name.vn
www.grandeurpalace.vn
www.mayindatehc.com
www.mayindatehc.duy6.name.vn
www.tiannenggroupvn.duy6.name.vn
www.tonmatpan.com.vn
www.tonmatpan.duy6.name.vn
www.vinhomes-vuyenhaiphong.duy6.name.vn
www.vinhomes-vuyenhaiphong.vn

Other certificates including the domain name tiannenggroupvn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tiannenggroupvn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sAibC6qRqGdUtMlKJ53
wDmHxqysxasu4mlBpYf8by+uzlt/AsmE+IzwaRKuZwU7koX4DtNcBh/E8u0QemsM
fXHj3/tHa1TECOTGuwQBnoXcYYS+nX/p/0L1SDLt4jH0om9kR4tIW5N3AfvJWd+v
beexujCvFqP9cFPv45FUzRbw3//DCshRqg4zKxMfh8KMam1CxFRBrn3bPGr7EnpO
l6b4xT4RmI09PGde6kjRYrSp0Lf6ip3l7l1MckYK3/cT+yw3tI62F7ZfBReQinDl
5QqTF2SOIoIJubVjDDUEYetyOJy4LCG21CdUWOozDf0xZHiKN39GQAiaXLR2EXKM
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282560504531993365819992661209971772432593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 17:43:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 17:43:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tiannenggroupvn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27109742297751405666961272802638891647267676313486657387330943114640053696408091917694786523803610706196715042858789416432830783839924171668635933653502443217805351347520744142899819651020205062797388768294643292347918229498621396808973893352628052808860359819311828351511464659545468485454262064840519378713947169423024521640455898511149222845272312904702800402532526568551442412716114714357375148415683632142758202359373960131971506266750150671174257060261704905098157906296014184670727891106045298554670878394665009773221494531241984137020926753052069975995788307041169378468375563003887139294666906578793048214711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d6e2555e3c79feccef2b61cc3641edca0e956ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (636 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '668jsc.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '668jsc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datvangtiemnang.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeurpalace.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeurpalace.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayindatehc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayindatehc.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiannenggroupvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiannenggroupvn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonmatpan.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonmatpan.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomes-vuyenhaiphong.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomes-vuyenhaiphong.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.668jsc.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datvangtiemnang.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeurpalace.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeurpalace.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayindatehc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayindatehc.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiannenggroupvn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonmatpan.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonmatpan.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomes-vuyenhaiphong.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomes-vuyenhaiphong.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e76ed049a0000040300463044022008f75217f9dd0040ef9599e6b92a276ccae6309747f42443349d14ae3b46e29f02201731bc9ef80bc3a1d48d958e7227d4c8c11611d6b0af6af398b3d263e0797c5700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e76ed04e200000403004630440220336c4d89db329b10eac532dfd0a949b5c70110f8f47a521e51b5e141fe2e978e022047c34a296c973116848d44f8b7ca27c43d3e76868d7fec483792dc6797c94e69
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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