myokovn.duy8.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:34:80:42:98:b9:7e:ed:79:dc:41:cc:5a:92:e6:48:eb:e9 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=myokovn.duy8.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:34:80:42:98:b9:7e:ed:79:dc:41:cc:5a:92:e6:48:eb:e9
Serial Number (int): 279202027847845424592641262838622961855465
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:5e:28:db:8a:7b:e9:16:b1:3c:5b:e2:2b:e7:cb:d2:4b:97:35:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0e:17:95:59:82:cf:17:68:80:ec:8a:47:db:02:aa:9f:0b:b7:7e:67
Fingerprint (sha256): 3d:c0:7d:6d:24:78:eb:da:7e:4c:d6:4a:cc:e4:cf:18:26:9e:9d:e4:d9:4f:d7:7e:ba:eb:ba:8b:39:84:1f:73

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate myokovn.duy8.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myokovn.duy8.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acquyleopard.duy8.name.vn
centacityvsipbacninh.com
centacityvsipbacninh.duy8.name.vn
hopcartonhanoi.duy8.name.vn
myokovn.com
myokovn.duy8.name.vn
phunggia.duy8.name.vn
phunggia.vn
ruituovietnam.com
ruituovietnam.duy8.name.vn
setuphotel.duy8.name.vn
setuphotel.vn
vieclambacninh.duy8.name.vn
vieclambacninh.vn
www.acquyleopard.duy8.name.vn
www.centacityvsipbacninh.duy8.name.vn
www.hopcartonhanoi.duy8.name.vn
www.myokovn.duy8.name.vn
www.phunggia.duy8.name.vn
www.ruituovietnam.com
www.ruituovietnam.duy8.name.vn
www.setuphotel.duy8.name.vn
www.setuphotel.vn
www.vieclambacninh.duy8.name.vn

Other certificates including the domain name duy8.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for myokovn.duy8.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hDa7yRnQqmH2L+LzfGy
g34dSQIDsPfNSpAcZesFpmReM8hF2ZMvCrF7I8Br31PXsS8+GVSfW63gH/NZ5if9
pVaO7mjzTU0kzmFT3onUvTPeKqipNWMkAiIkJGoz+opfOIU2OsUn80UJjW6bNTNo
sROtz20RUyMTgmodZNMR/0cmUe3IxHX/VPMCnZDn6d8IfWSx//kjmRxWZLjpOM4F
4FJhDlOluG2rFXrJFrX8Fu0L3zwBNTboSV2Kp4TUZYD4XPpfI+pbShlAsktEXgkJ
Ny+9V0qMjOHi5UODhe4ejjjv9EL3fUKKbGfjrtMbrqHoTlbhfQ2ohKo6bp4UfmiM
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279202027847845424592641262838622961855465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 00:05:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 00:05:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myokovn.duy8.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28538168536908073206395726615211754853850561220637612501920326173123820905925529533689026342073587315893732065235760517731143510965076338035775651558738156919647864960645347062851338221509524378307100913585781682801299353137992621121387918526658206296214789558188696047171702314992370500054702101724759607158100166878224443340510302833937734630662466360902800304146663808232613113927265197715541864589632264460911211091118530498409745167619141435885160690539471509381978676448291868605510132474099107774994933322007786097492034600929985158531576390144571789970586700281690547512181858071705667250832678933380286942291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c5e28db8a7be916b13c5be22be7cbd24b9735fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (619 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquyleopard.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centacityvsipbacninh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centacityvsipbacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopcartonhanoi.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myokovn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myokovn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phunggia.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phunggia.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruituovietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ruituovietnam.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setuphotel.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setuphotel.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vieclambacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vieclambacninh.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acquyleopard.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centacityvsipbacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopcartonhanoi.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myokovn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phunggia.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruituovietnam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ruituovietnam.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setuphotel.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.setuphotel.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vieclambacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fb26ebe4500000403004730450221009d7e2aa5b0d71d5f13c8c265044bae851a29d6919b9e23b1e0bb493d33e744d90220381dba3965ab804651a6f07f1a029d1fe3608924ca01bf367a2e00966c431fe400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fb26ebe420000040300473045022100d02d7950660196dc4969910fcfac98baa229af17d917446c97304b70e2dd8b1f02204cfdd538a258b6e1f1a6ee01ef268ebb39a352912cb7ceb89e7d72f924b41b78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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