0104999562.v23.vesjsc.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:c3:a9:f6:7f:9e:76:dd:23:ce:39:16:58:6f:2a:4a:46 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=0104999562.v23.vesjsc.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:c3:a9:f6:7f:9e:76:dd:23:ce:39:16:58:6f:2a:4a:46
Serial Number (int): 317743530294166518859138443666765065636422
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:45:2a:b6:d8:6a:19:9d:84:6f:69:14:14:bd:a3:d4:6d:e1:01:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:4f:5e:96:6e:03:c0:09:60:dd:12:55:3b:7e:95:02:91:17:33:37
Fingerprint (sha256): 4a:f3:c2:9a:3a:dd:c7:8b:c8:04:0e:fb:ab:94:3a:5b:02:8e:6d:9c:03:f8:cd:3f:a5:15:2d:19:1f:04:c5:96

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 0104999562.v23.vesjsc.vn

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 0104999562.v23.vesjsc.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0104999562.v23.vesjsc.vn
0106717125.v23.vesjsc.vn
0107931065.v23.vesjsc.vn
admin-hddt.phongvu.vn
hddt.phongvu.vn

Other certificates including the domain name vesjsc.vn

(limited to 100 certificates)
0700780482.hanam.vesjsc.vn
demonamha.cellx.vn
0101628672.hanoi.vesjsc.vn
vesjsc.vn
0313767188.ame.com.vn
0101628672.hanoi.vesjsc.vn
vesjsc.vn
vesjsc.vn
0108519873.ame.com.vn
vesjsc.vn
vesjsc.vn
0101898735.hanoi.vesjsc.vn
0101898735.hanoi.vesjsc.vn
0108519873.ame.com.vn
vesjsc.vn
vesjsc.vn
demonamha.cellx.vn
*.vesjsc.vn
0315250187.hochiminh.vesjsc.vn
0104999562.v23.vesjsc.vn
vesjsc.vn
0700780482.hanam.vesjsc.vn
vesjsc.vn
0313767188.ame.com.vn
0700780482.hanam.vesjsc.vn
0700780482.hanam.vesjsc.vn
vesjsc.vn
test20.vninvoice.net
test20.vninvoice.net
0101886899.hanoi.vesjsc.vn
0107371511.hanoi.vesjsc.vn
dungthu.vninvoice.vn
0101898735.hanoi.vesjsc.vn
demonamha.cellx.vn
0108095409.hanoi.vesjsc.vn
vesjsc.vn
0108095409.hanoi.vesjsc.vn
0108519873.ame.com.vn
0101886899.hanoi.vesjsc.vn
0108095409.hanoi.vesjsc.vn
0104999562.v23.vesjsc.vn
vesjsc.vn
0108230979.hanoi.euvn.vn
0107371511.hanoi.vesjsc.vn
0108095409.hanoi.vesjsc.vn
studio86.hanoi.vesjsc.vn
test20.vninvoice.net
demoinduongsat.s23.vninvoice.net
0108519873.ame.com.vn
0101886899.hanoi.vesjsc.vn
0201194789.haiphong.vesjsc.vn
0108230979.hanoi.euvn.vn
vesjsc.vn
0108095409.hanoi.vesjsc.vn
0106738580.hanoi.vesjsc.vn
0101628672.hanoi.vesjsc.vn
0700780482.hanam.vesjsc.vn
0107371511.hanoi.vesjsc.vn
vesjsc.vn
vesjsc.vn
dungthu.vninvoice.vn
0106738580.hanoi.vesjsc.vn
*.vesjsc.vn

Certificate

The complete raw certificate details for 0104999562.v23.vesjsc.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkudTOXM14y3x7lpcuK0
nm8w9lxVLZ5LL+hHPYwzfNQFhgB5/B9cTgMMcz2Xh+kk04h3PFHxg/8nFq1Mh0Bi
jXt3bozjTePk7c/yu5iPxGnddBGClL6iXaNrclhwyQadVgQRR8sF03zRVEO+XPeD
Jkr/SWY/VhkmcNGejesnZax/cc/ecOQXbntAOgX+buLygmxNO9Hs2jX8cShLZp1g
QYsmXlxldH05qshrY+Cp6jHp9I39sVe7frzvQlPp2CZc5tKGxSDNH0Ico23KgwDK
iTanDJUf6lRoh/TkDJ4ibVU7KThfa+Tm7fTLsQPKpCTw9emGq4oUvBhziYQkrh/r
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317743530294166518859138443666765065636422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 14:55:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 14:55:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0104999562.v23.vesjsc.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21497798721501631651751768912295180723276561861686133053712693918285701982929162028145578957330767442284208327931823230865480450925416280946572582085900679820566120371295078986883173226556536052693869676420533874876858423750616212293304858172002370377617950737288831582473048388174321671229177737014415457618602884010827473460736995830672446959868784295554803582916021881078282392909254238080304474992897129619241398334186803413210073624399744402755331425456347385867607125402637827837005510052619904715435705386958473770838152402193473432895144644402467586661482929824432622036005569829375812073240460437250958683091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a452ab6d86a199d846f691414bda3d46de101dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0104999562.v23.vesjsc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0106717125.v23.vesjsc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0107931065.v23.vesjsc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-hddt.phongvu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hddt.phongvu.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f9f9db3b6000004030046304402203e4050f00b99799abbe43144978fa6720e3310fe0cf78969710574b42e4be856022047a703d1f82ea3bb41d522e1e9e7a5ee410d05d505e3c65411bc747490778cc100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9f9db3d20000040300463044022033065f7f1d41115f9e55f07036ba34c6cd10e8c76aa359dcae566acd65de597a02206b56f51b7a445a9b9ee33d71fedd140a5636d90214b1fce3d6d2cf2c91c2c4ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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