www.sinhdien.com.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:48:06:47:d3:1d:dd:51:f2:da:74:0d:96:09:24:5a:4f:1a was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.sinhdien.com.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:06:47:d3:1d:dd:51:f2:da:74:0d:96:09:24:5a:4f:1a
Serial Number (int): 285845536516594513117654191606092407656218
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:cc:8c:69:44:2b:6b:bf:55:6f:cd:43:27:47:ff:30:17:38:c5:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:ae:7c:15:f3:58:50:2b:cd:70:c2:e6:a4:9f:88:ee:82:f3:1b:8d
Fingerprint (sha256): 4c:5e:9f:b5:d6:3b:df:0c:50:7c:7e:3b:fb:c1:b7:1a:e9:b3:0e:56:8e:26:f6:8f:63:ac:ef:f8:0e:93:03:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sinhdien.com.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sinhdien.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.sinhdien.com.vn
cpcalendars.sinhdien.com.vn
cpcontacts.sinhdien.com.vn
duanvinhomesvuyen.com.vn
duanvinhomesvuyen.com.vn.duy6.name.vn
hvn.duy6.name.vn
masterisevietnam.duy6.name.vn
sinhdien.com.vn
sinhdien.duy6.name.vn
sydneygroup.duy6.name.vn
sydneygroup.edu.vn
tintucahv.duy6.name.vn
tintucahv.vn
webdisk.sinhdien.com.vn
www.duanvinhomesvuyen.com.vn
www.duanvinhomesvuyen.com.vn.duy6.name.vn
www.hvn.duy6.name.vn
www.masterisevietnam.duy6.name.vn
www.sinhdien.com.vn
www.sinhdien.duy6.name.vn
www.sydneygroup.duy6.name.vn
www.sydneygroup.edu.vn
www.tintucahv.duy6.name.vn
www.tintucahv.vn

Other certificates including the domain name sinhdien.com.vn

(limited to 100 certificates)
sinhdien.com.vn
www.sinhdien.duy6.name.vn
www.sinhdien.com.vn
www.mbcvietnam.duy3.name.vn
www.hvn.duy6.name.vn

Certificate

The complete raw certificate details for www.sinhdien.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YWdIOluVz0l9shjQ4h7
oY6kRj4h79LX5tJPMw+NnRIcm6Pi/8w1B+t97S4o5kO+8YrYGWOMKf60czDkYW+S
FRBI8YW8TZkg5UX9t4XewhTVUwfofLTZ/K8nfDa/aQ9lgADfUliY9pfZe+lM9f7O
Wr9s2ykQsB2Co06/5HJSNxygHzICon8H447ARtbEuFCT/zBYwCZz+LBUXcJt5w3g
j5gdCERuPKZDPUrrCtBFfyJvt+Tvg7KX67DHdXh9yxg+R0be0DrvZKckQt2jSEcA
bIkZ+Tl2TUejpCcoq4z/ZbcAbMkQ0br2RBqpM/Diz3l/jFcFZw5gDvqriwWRhKEi
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285845536516594513117654191606092407656218
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 17:43:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 17:43:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sinhdien.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26449693150180378905383243751833433113480583347955825685100750206308682671752093864744120546408597294432200465106230449273260632219626516129953815418640943750190252384486977078126026132107352871712655171587757318593583668547510802913691653777861623358613017591839461711709294370205751769287884691450815286360364174734187099408751732116850847392874905002275555941319651702807897782108188418587591430598966974384245248256735800521403924630095307261992095255457577880128296798506146125468331789475298022240933489271006448045748833127605018139019448009470021972431139872065967278705024241965922165073463398419341439476349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eacc8c69442b6bbf556fcd432747ff301738c52f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (626 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.sinhdien.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.sinhdien.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.sinhdien.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duanvinhomesvuyen.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duanvinhomesvuyen.com.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masterisevietnam.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinhdien.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinhdien.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneygroup.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sydneygroup.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tintucahv.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tintucahv.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.sinhdien.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duanvinhomesvuyen.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duanvinhomesvuyen.com.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hvn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masterisevietnam.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinhdien.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinhdien.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydneygroup.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydneygroup.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tintucahv.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tintucahv.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e76ed277500000403004630440220037511894e6f1afb3a169477cdd43fa476ee4da5c9a1e3c2462b519f53a3b4a902205b2691af6ae157e4ab2a7931fb8dd785b6973e898db4ab0a0cd1eef42b22de41007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e76ed278900000403004730450220660487f3d84f9f56435b24d4a2c81ac21d60e908950935249aa4e4a2844ca182022100a5d4292422de139bc74d64ac84ce6fa81b88c6be2a183d697042f3d8dac70245
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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