phuquocexpressboat.com.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:d7:5d:38:18:f8:18:bc:bc:da:45:ad:77:1d:e9:10:13:d8 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=phuquocexpressboat.com.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:5d:38:18:f8:18:bc:bc:da:45:ad:77:1d:e9:10:13:d8
Serial Number (int): 421733762093708901958947145889920410719192
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 21:19:2a:df:86:eb:c3:b6:08:da:12:9f:d0:a1:62:1a:ba:ac:f2:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:58:03:19:75:34:32:5b:b7:b2:1b:50:c3:1e:d8:0c:0e:5a:fc:a1
Fingerprint (sha256): 47:f9:73:02:50:d7:11:97:bd:66:08:86:50:3d:d6:ba:e1:c8:d2:fb:24:4e:7d:bc:59:66:9f:05:d6:cd:f7:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate phuquocexpressboat.com.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for phuquocexpressboat.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chidecor.duy8.name.vn
cokhibacninh.duy8.name.vn
dogothuyhoa.duy8.name.vn
kientrucamita.duy8.name.vn
phuquocexpressboat.com.vn
phuquocexpressboat.duy8.name.vn
simicon-asia.com
simicon-asia.duy8.name.vn
thamtugiabao.duy8.name.vn
vietmax.duy8.name.vn
viquang.duy8.name.vn
www.chidecor.duy8.name.vn
www.cokhibacninh.duy8.name.vn
www.dogothuyhoa.duy8.name.vn
www.kientrucamita.duy8.name.vn
www.phuquocexpressboat.com.vn
www.phuquocexpressboat.duy8.name.vn
www.simicon-asia.com
www.simicon-asia.duy8.name.vn
www.thamtugiabao.duy8.name.vn
www.vietmax.duy8.name.vn
www.viquang.duy8.name.vn
www.xaydungvinhthai.duy8.name.vn
xaydungvinhthai.duy8.name.vn

Other certificates including the domain name phuquocexpressboat.com.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for phuquocexpressboat.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD1if/oLCOBDDirH485e
34b4vE32iKyq8FtZn21ZtDzyURSjt7R/+1W4DzQNhZaBItubbnuVvfdL8F2gqksj
NoM5TFrQ9cIk1THHO9ah1CEPfc2YsZVhgAJo4ko9eVTnVFcaGFzAS7Bpy2v+aiKQ
4hqlL92bD9dzjug1yxXtzYXbraUu3yBAgFhqw7/r1CoZu7jiPa9mwjWOt/o+KqH6
NDBYzxIbrvdD7IJ4agFcvK4G1ShzhaYBQ9bBl0Zc0vy99FTaYe4RsIyg67WhWkxn
r9ltSJ2JH+mbd2Rw4NNSJmY4xSnragmsJm9epiO5jCb3pG3KvTfF21tHEktPPNET
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 421733762093708901958947145889920410719192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 20:39:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 20:39:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'phuquocexpressboat.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23258118069686102039763494132110554686906033941191831819550100361813678805472797000851050413353945857656916256182703047250196840223231221669322029979903879415460817063585178659466857728505722413084802651841265100460977915377848339774852480861200324960916938421525434507268463343696131315580773558366592337131548299877130899758670846032999013629756851997395288818829150931417712202793301408073110464990935856195201534574886563962228537861532756407503968416068899111621759298107935137207395648956481013770390904411432533817485906360045738225293848035763736452403165676903348677654152693257929623634032186014019995374353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21192adf86ebc3b608da129fd0a1621abaacf280
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (672 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chidecor.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cokhibacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogothuyhoa.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kientrucamita.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuquocexpressboat.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phuquocexpressboat.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simicon-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simicon-asia.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thamtugiabao.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietmax.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viquang.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chidecor.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cokhibacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogothuyhoa.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kientrucamita.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phuquocexpressboat.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phuquocexpressboat.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simicon-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simicon-asia.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thamtugiabao.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietmax.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viquang.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xaydungvinhthai.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xaydungvinhthai.duy8.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0345ad76000004030048304602210097d79082397aec81c92376174a1922e42684a3b39710a330b5286adc63ad083e022100e32458bfa82f7f3a13de62746bef569f578e2df10372fde492d52f34d36ea0eb00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c0345adf2000004030047304502210084fc34c7e94ce63e93638b17f2dc7cb9d91c9383d1d344214f9e9b95846512ba0220688e02cc06712c95c4c01e0ae5a46267fb7b844e5a615ba2487d777d81429d20
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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