*.baoviet.com.vn

- BAOVIET HOLDINGS -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 43:ef:ab:b3:85:de:64:b9:11:8f:d1:59 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BAOVIET HOLDINGS

Organization: BAOVIET HOLDINGS
Organization unit: IT Department
State / Province: Hanoi
Locality: Hanoi
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 43:ef:ab:b3:85:de:64:b9:11:8f:d1:59
Serial Number (int): 21025239765200034078556934489
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 90:b9:c1:3c:0f:ca:0b:e5:85:e6:c1:2b:a3:44:16:44:73:3a:63:8a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 08:4c:a2:17:57:24:a6:bf:19:af:f4:95:1d:45:10:f4:c5:0f:65:61
Fingerprint (sha256): 48:11:b6:f7:4b:13:fc:94:c8:71:5c:ab:f0:ef:c5:b2:de:cd:97:b3:87:01:47:4b:4c:12:66:66:0e:d8:58:1b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.baoviet.com.vn

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.baoviet.com.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.baoviet.com.vn
autodiscover.baoviet.com.vn
mail.baoviet.com.vn
owa.baoviet.com.vn
baoviet.com.vn

Other certificates including the domain name baoviet.com.vn

(limited to 100 certificates)
*.vpn.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
ocr.baoviet.com.vn
*.baoviet.com.vn
covid19.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.vpn.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
sni.cloudflaressl.com
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
covid19.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn
*.baoviet.com.vn

Certificate

The complete raw certificate details for *.baoviet.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21025239765200034078556934489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-15 07:37:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 03:50:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BAOVIET HOLDINGS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.baoviet.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764324249887004361846910554177438652898870155472787166113859490357599963562634885035658053187448960182699473885808679039951481922742612953878467969435247317895835451298374065810889779670284101341957999422029137082825547559239168041559494382180372734577665547942952349580938521801258508940896570903162267730053112781818580485039535144595650774403496248753130330436268110701059199775251697785310864920663096376817651641154403182397543083381872720202947397199851274938691616844719153423761496666253944757605281739149027118980315238350813910736785132971990701650435091228580999405409983291506274518672286439769151787725950359055564081762035118935262352484429781643192831608671396780467292671733916883582959279443961292863650370990246354435642092503032836373998243342266750508445694593009423035962242354656196311661854287480522853853604081149055578191409296203192660930211804245396665448120424441879790056187195799350373233804775233590551601734915079006909703484608455603749635859459335499039200094488123983343059657100630434005213420635982958153825879978904929467049449350604510505275705182797621880473083210669118801021089791876140777557316370356371784888014615917194663444553280281954270301764365116953968922219426937295742746575372371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.baoviet.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.baoviet.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.baoviet.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.baoviet.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baoviet.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90b9c13c0fca0be585e6c12ba3441644733a638a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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