*.ssi.com.vn

- Saigon Securities Incorporation -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 4c:02:b3:89:ec:11:ce:40:76:2a:e6:13 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Saigon Securities Incorporation

Organization: Saigon Securities Incorporation
Organization unit: IT Department
State / Province: Ho Chi Minh
Locality: Ho Chi Minh
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:02:b3:89:ec:11:ce:40:76:2a:e6:13
Serial Number (int): 23524126445876430289945421331
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 95:13:ad:0b:87:24:08:d3:37:cc:83:e7:d1:df:38:dd:e3:75:f4:1a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 21:19:b2:70:79:7a:9d:d8:a4:40:3f:89:3b:eb:e3:18:75:db:fc:cb
Fingerprint (sha256): 45:51:a9:cb:d0:5a:c6:1a:00:f1:cf:0c:ec:45:01:cf:40:4e:b9:9f:69:81:ef:9f:7f:04:9f:11:14:2c:77:33

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.ssi.com.vn

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ssi.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ssi.com.vn
autodiscover.ssi.com.vn
mail.ssi.com.vn
owa.ssi.com.vn
ssi.com.vn

Other certificates including the domain name ssi.com.vn

(limited to 100 certificates)
*.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
meeting.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
mail.ssi.com.vn
meeting.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
webtrading.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
webtrading.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
meeting.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
mail.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
tracking.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
wt-snapshot-afd.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn

Certificate

The complete raw certificate details for *.ssi.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIMTAKziewRzkB2KuYTMA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTYxMTE0MDMxMjAzWhcNMTcxMDE5MDI1NTAyWjCBkjELMAkGA1UEBhMC
Vk4xFDASBgNVBAgMC0hvIENoaSBNaW5oMRQwEgYDVQQHDAtIbyBDaGkgTWluaDEW
MBQGA1UECwwNSVQgRGVwYXJ0bWVudDEoMCYGA1UECgwfU2FpZ29uIFNlY3VyaXRp
ZXMgSW5jb3Jwb3JhdGlvbjEVMBMGA1UEAwwMKi5zc2kuY29tLnZuMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRKBRZb+dpDcRR9WRrRbU52pCV+OoACB
Hihjdn9ERRi8L+vZfen9PTxx2cSleEox9TKx5TwMu50XoPUySHLe6dpdtk26nE/m
JQpJYfIwgWp+xyW2t72zOyrSzvzxsbXiiTJrtgtlcjucpVNVYejdVaowY+Ks2x66
MCbU/Z7Ncw6o0BKo9sqDOEWXed6vEfKNe82UfMYYB7kyFg2VMNIOEKtU3pxv14eR
PThVGjCQkSzPiskTAk5EnRgQ51eZxAQ3tnKQyqGt/oHi1qU8850zdVHSzXlehJ80
DV9MgV7NazXTUpo82b+OVdxvIDu3ONebFwEA2Bsj+eXUn8K0uy4puwIDAQABo4IC
IzCCAh8wDgYDVR0PAQH/BAQDAgWgMIGgBggrBgEFBQcBAQSBkzCBkDBNBggrBgEF
BQcwAoZBaHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nvcmdh
bml6YXRpb252YWxzaGEyZzJyMS5jcnQwPwYIKwYBBQUHMAGGM2h0dHA6Ly9vY3Nw
Mi5nbG9iYWxzaWduLmNvbS9nc29yZ2FuaXphdGlvbnZhbHNoYTJnMjBWBgNVHSAE
TzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9i
YWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADBJBgNV
HR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzL2dzb3Jn
YW5pemF0aW9udmFsc2hhMmcyLmNybDBdBgNVHREEVjBUggwqLnNzaS5jb20udm6C
F2F1dG9kaXNjb3Zlci5zc2kuY29tLnZugg9tYWlsLnNzaS5jb20udm6CDm93YS5z
c2kuY29tLnZuggpzc2kuY29tLnZuMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAdBgNVHQ4EFgQUlROtC4ckCNM3zIPn0d843eN19BowHwYDVR0jBBgwFoAU
lt5h8b0cFilTHMDMfTuDAEDmGnwwDQYJKoZIhvcNAQELBQADggEBAL/VAEX3Qf3l
+9IE1i3Vzqtwd0zwZ98pVt9TAhEA948m8Ligofa///DS2RLFbqrYE9A07Vr3FlGw
jZHEil1TqmFkILn87RyWJgkV3ze45t23oP+Z1/uVLA8BiZ0g0XlXaTq7pHvAUTZc
ozJlAPrbxM4me2rcUMJy8U35A2jde6qo3oEMJ27lxUlp7KxMAVzMUG7LXCHLCCbe
oog6bdHMvzfeW4NOxNBKaBQDLjD3yGSQHFX6+2uAupvoNxA12x6I35unCfpZK15u
Hb2SF0zRhHbE7Va57ezi9Um1D7ibFH2FpAK8yK75ieuEqjOsFfuYYj6rnoK2W/kq
H+LgmK6KjGQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRKBRZb+dpDcRR9WRrRb
U52pCV+OoACBHihjdn9ERRi8L+vZfen9PTxx2cSleEox9TKx5TwMu50XoPUySHLe
6dpdtk26nE/mJQpJYfIwgWp+xyW2t72zOyrSzvzxsbXiiTJrtgtlcjucpVNVYejd
VaowY+Ks2x66MCbU/Z7Ncw6o0BKo9sqDOEWXed6vEfKNe82UfMYYB7kyFg2VMNIO
EKtU3pxv14eRPThVGjCQkSzPiskTAk5EnRgQ51eZxAQ3tnKQyqGt/oHi1qU8850z
dVHSzXlehJ80DV9MgV7NazXTUpo82b+OVdxvIDu3ONebFwEA2Bsj+eXUn8K0uy4p
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23524126445876430289945421331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-14 03:12:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-19 02:55:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ho Chi Minh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ho Chi Minh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saigon Securities Incorporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ssi.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18818632579814615591603811712924890095909797892766730161080280013413986809776902007239955950660705647986753271394767289444372230243290343260313260320640973497598594693481860350484968002687875894122443451235225597643196139633276454916649803752075787691171680779948688436413605684947177831037436958113137308573304120306127712302196688720120966459034408025569554750727767449200697871417646986524328683025127645071617328589225370884456598222890972297198004667468745884946735794343201348256729326224625782111300208347232429150067757753736872846760946810749016688002390898021539836720165063121558125309528834154453099489723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssi.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9513ad0b872408d337cc83e7d1df38dde375f41a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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