cpcontacts.tankymineral.com.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:13:8d:d8:e1:40:75:44:c9:09:ae:65:35:59:d2:d9:a5:94 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cpcontacts.tankymineral.com.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:13:8d:d8:e1:40:75:44:c9:09:ae:65:35:59:d2:d9:a5:94
Serial Number (int): 267990770018954743531540859855908481115540
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:cd:26:dd:3f:fd:7c:60:e1:ec:ac:e7:21:bd:4b:e3:31:41:89:92
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:cb:dd:fc:c8:a6:22:03:d6:4e:55:06:dc:fa:74:ff:9d:8d:be:5a
Fingerprint (sha256): 4c:08:69:4e:b8:18:19:8e:0c:ee:df:2a:b4:d0:2b:fe:7b:dc:7b:b8:66:60:27:fa:01:d8:89:0c:2c:c8:45:a3

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcontacts.tankymineral.com.vn

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcontacts.tankymineral.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banhxedayminhthu.com
banhxedayminhthu.duy8.name.vn
congtynhabacninh.com
congtynhabacninh.duy8.name.vn
cpanel.tankymineral.com.vn
cpcalendars.tankymineral.com.vn
cpcontacts.tankymineral.com.vn
heemangchicken.vn
heemangchicken.vn.duy8.name.vn
osungvinacom.duy8.name.vn
phimdoanhnghiepcom.duy8.name.vn
tankymineral.com.vn
tankymineral.duy8.name.vn
webdisk.tankymineral.com.vn
webmail.tankymineral.com.vn
www.banhxedayminhthu.duy8.name.vn
www.congtynhabacninh.duy8.name.vn
www.heemangchicken.vn
www.heemangchicken.vn.duy8.name.vn
www.osungvinacom.duy8.name.vn
www.phimdoanhnghiepcom.duy8.name.vn
www.tankymineral.com.vn
www.tankymineral.duy8.name.vn

Other certificates including the domain name tankymineral.com.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for cpcontacts.tankymineral.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKzTngtULYDSDjC46JVD
rRG7+isVhZIyhPcP2XHLvhDFjFf42oveam7f9jwZSuwXMfXpojocLEmeaxvJMplj
XNx4IEu9Oit12SuLM/GG6uKurgUofZje4P1QK2VR2eKQ9O7MX14uVqoznZpHPzfI
kx7Syd8r0sKKv6KHl4AO/VcfIJrdcYj1guJpD/2ErFO06Og/lDpAFWKXBBdLBx1Y
IXp9beX1pf27llLjIaSuzh98QVwch8vNy5oLfwYSJR/UsKVrBAuvvCj+GaWN69kD
cImvTD110Zdc+OvZAc3GYYoCDv8HDQMpnEixfNSMPT66TiMUbiusYnpPghaLJJW0
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267990770018954743531540859855908481115540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 00:05:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 00:05:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcontacts.tankymineral.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25837838200825276025617915129931583342103554438849402493774545091852274026922318545246821772074233306228407035824406752578331668775047471608808648953806079193353793597994205933652573768364583174014112976930566947647908985753871270201626811658410426654710917483530083880448775017866709467746059668728986814197248324253853311838762414129719110594696515717888492216844443753082973353125613409312419794988581454346384326770018451875383519025720361451027254165678040865597731543011322127666909253304866063551269241358846397321914176807017875096595884272166403319345010818980646963573425866907617542604868361042044275504299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dacd26dd3ffd7c60e1ecace721bd4be331418992
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (673 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banhxedayminhthu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banhxedayminhthu.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congtynhabacninh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congtynhabacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.tankymineral.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.tankymineral.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.tankymineral.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heemangchicken.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heemangchicken.vn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osungvinacom.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimdoanhnghiepcom.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankymineral.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tankymineral.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.tankymineral.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.tankymineral.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banhxedayminhthu.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congtynhabacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heemangchicken.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heemangchicken.vn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osungvinacom.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phimdoanhnghiepcom.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tankymineral.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tankymineral.duy8.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fb26ea01b0000040300473045022100b0ff6899ad5a45fc4163f9254dce663a692e13fef050ad62e94045825227982e02204253c9ba22d45a8eba9140e781502545934f062319aab290d4d609d616485de1007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018fb26e9fd0000004030046304402207eee994446a7c8aa8679d93ca0f93f3c853c1fb04d7aa1968d6b21bae7435021022007c7e34a2285ff0a4a320a0c43095938b1aef67e3df34c84707a1bb436c79eda
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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