www.removacid.duy5.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:80:83:6f:e4:67:94:6c:d3:40:7f:2c:a8:68:67:20:65:53 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.removacid.duy5.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:83:6f:e4:67:94:6c:d3:40:7f:2c:a8:68:67:20:65:53
Serial Number (int): 305067710606155810323002058141804745745747
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:3d:35:13:9a:b0:8f:99:ea:fc:50:e3:74:7e:1b:e5:ab:7b:58:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): af:58:63:76:0a:a3:c8:cc:fc:17:55:5d:dd:7e:66:7e:d8:58:ee:d9
Fingerprint (sha256): 52:b1:96:29:1b:1f:13:5c:0d:b1:6d:09:34:a7:f4:8b:1e:90:71:a6:82:c1:17:1f:41:b6:8c:79:2d:40:42:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.removacid.duy5.name.vn

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.removacid.duy5.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bidvchuyenxekhuckhich.duy5.name.vn
damaihaiduong.duy5.name.vn
ginzatea.duy5.name.vn
mail.rayatraining.com
rayatraining.com
rayatraining.com.duy5.name.vn
removacid.duy5.name.vn
salebungno.duy5.name.vn
sedu.duy5.name.vn
thanglongedu.vn
thanglongedu.vn.duy5.name.vn
thienlongcnc.duy5.name.vn
www.bidvchuyenxekhuckhich.duy5.name.vn
www.damaihaiduong.duy5.name.vn
www.ginzatea.duy5.name.vn
www.rayatraining.com
www.rayatraining.com.duy5.name.vn
www.removacid.duy5.name.vn
www.salebungno.duy5.name.vn
www.sedu.duy5.name.vn
www.thanglongedu.vn
www.thanglongedu.vn.duy5.name.vn
www.thienlongcnc.duy5.name.vn

Other certificates including the domain name duy5.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.removacid.duy5.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi4pjlL9aacLVqjmiutZ
+7Btoc/96T8CNqIccYyMb+FN68NHe4cW5ZjQtMp+jIo9G5wKaHAxRGgyaE7/rZsk
ojE/DIwUilCh2WSyPtTRmWT3TwK5IsVtzFtk9mZRBmeXJYdFAbFAg9fDNKJ+Vnng
UgFWQVPdHazAAiZv8eItPZGCfExtwt6dOWN3Jx941xbBq8LDJPNXjRuMNylb93Rw
3CaD6bhnfth0fe3Vspr/A7ZXcl6noAD4fFh+8bS5vSaKSQyEHnbGmOenOHS5PP43
BUpKAtM5c3zTaE0Q+Aojcz57Jy2PEqP/Ls0DRXtmE3aQw4p16Sydliee2oVLm2J+
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305067710606155810323002058141804745745747
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 16:32:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 16:32:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.removacid.duy5.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24008041435867612491775318431371149541936598931585639808822439052628933909847156209983167423755665132547212573000955121345718526331052673070713291304465486958259446738779644365370116596497459223227758639787022404401467277798804116647424963924033868529615687646418222490100165722876102318282863736547522987146446035531570765684361584571366279516197864083416045950804260347745633276889648226924851623660896733748941076834555755978031336443424942240140937164340937123087291019508443361406373030523891011595666265987577620480414919454163852000905885672398285913347205477988245514572518704245058337342460078017456701079243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb3d35139ab08f99eafc50e3747e1be5ab7b5891
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (627 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidvchuyenxekhuckhich.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damaihaiduong.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginzatea.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.rayatraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayatraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rayatraining.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'removacid.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salebungno.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedu.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanglongedu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanglongedu.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thienlongcnc.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bidvchuyenxekhuckhich.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damaihaiduong.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginzatea.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rayatraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rayatraining.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.removacid.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salebungno.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sedu.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanglongedu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanglongedu.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thienlongcnc.duy5.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4bfb042c0000040300483046022100f2e018ed4d2f809d34284fbe08adbc3b919489b2dceff3ebd6e2706d6c8f2d06022100b712f119caff49f1252ed048a89bf22d5c4954b1b67efd89b83b2b0dab845320007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d4bfb04700000040300483046022100feb6c80885fce77215c7e9b393fec365c351b1c54e4e80ce71912a1369aeecca022100e43aa56ad99bd5a8021d65a9aee5713737f32609cb09739e53ca8bd073ee30e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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