*.humg.edu.vn

- HANOI UNIVERSITY OF MINING AND GEOLOGY -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 44:49:d0:b8:b2:ae:2f:1d:ef:a3:0c:81 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

HANOI UNIVERSITY OF MINING AND GEOLOGY

Organization: HANOI UNIVERSITY OF MINING AND GEOLOGY
State / Province: Hanoi
Locality: Hanoi
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 44:49:d0:b8:b2:ae:2f:1d:ef:a3:0c:81
Serial Number (int): 21134217911987959242120432769
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 55:ae:2f:e6:3d:3c:c0:6a:e0:06:8d:79:a6:45:9c:ab:ad:8e:12:ae
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 15:99:c3:8a:c3:3d:1c:68:d6:34:ac:80:15:32:d4:77:86:2a:6a:89
Fingerprint (sha256): 5f:de:c4:75:97:42:fe:d9:35:39:c8:ff:d0:b6:ea:0f:1d:5c:99:ab:ed:f8:9c:ee:3f:1a:89:7a:c8:16:36:5e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.humg.edu.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.humg.edu.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.humg.edu.vn
humg.edu.vn

Other certificates including the domain name humg.edu.vn

(limited to 100 certificates)
geoinformatics.humg.edu.vn
emf.humg.edu.vn
icit2022.humg.edu.vn
geoinformatics.humg.edu.vn
geo.humg.edu.vn
geoinformatics.humg.edu.vn
geoinformatics.humg.edu.vn
*.humg.edu.vn
geoinformatics.humg.edu.vn
*.humg.edu.vn
geo.humg.edu.vn
geo.humg.edu.vn
geoinformatics.humg.edu.vn
isrm2020.humg.edu.vn
geoinformatics.humg.edu.vn
geoinformatics.humg.edu.vn
geoinformatics.humg.edu.vn
daotao.humg.edu.vn
*.humg.edu.vn
geoinformatics.humg.edu.vn
*.humg.edu.vn
*.humg.edu.vn
*.humg.edu.vn
*.humg.edu.vn
isrm2020.humg.edu.vn
geo.humg.edu.vn
humg.khaothi.edu.vn
geoinformatics.humg.edu.vn
geoinformatics.humg.edu.vn
ersd2020.humg.edu.vn
geoinformatics.humg.edu.vn
*.humg.edu.vn
geo.khoadiachat.edu.vn
*.humg.edu.vn
geoinformatics.humg.edu.vn
geo.khoadiachat.edu.vn
geoinformatics.humg.edu.vn
isrm2020.humg.edu.vn
ctsv.humg.edu.vn
nde.humg.edu.vn
*.humg.edu.vn
*.humg.edu.vn
geoinformatics.humg.edu.vn
geoinformatics.humg.edu.vn
ctsv.humg.edu.vn
ersd.humg.edu.vn
geoinformatics.humg.edu.vn
tapchi.humg.edu.vn
*.humg.edu.vn

Certificate

The complete raw certificate details for *.humg.edu.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdb8dD+HCIDwF1k+Cv8j
Y8i2msTzYgd+q+YLo17MzaVf8jJjGw2LImNheOd6cZxf9QvcoP/sozRxPXTt2PU0
t+nrxFtT0c3BAds3CZEWysJgUaccvZ/1bMSam1EEE6o35CW2OGo8gotxJ0CGrqqs
7gAYplkt1l+edfiBx/i9yGaZ43DewWtX0sba4BTHxBWCb/x9ic1ad3fRox6q3W57
A5Eyl7M3SUS82GruUTzqflReWWpvhAGkk4o2NzimoDlPhpJbx4BvnSSVMiOpmS5B
eZWzou6AAixscL8xfMEPD8PzQmLzI2+C8NfDfjanjM6JYVUHVarrtrRzEkPLW9Cs
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21134217911987959242120432769
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 07:57:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-19 10:26:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HANOI UNIVERSITY OF MINING AND GEOLOGY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.humg.edu.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23965053259743119977483063267418702104812049386979602016319624630351376476687440178466844566571209219629504589319526422569457733576724022783169984528869999646348251232421022985787931788349666938596223795607253987763994713659201149060023104886174766815586992748134983801754342476484490061614214897290158778440771473740228206091591571690182980596762806118009667657859355492094077708073815373429648081882300792914198009893274597498050287431515802126885598555280821206606737998615431355260025868852565959709325812504969111359583526425979427706377721851234682580745085938455772545705282855709013443031604929356017878215897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.humg.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'humg.edu.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55ae2fe63d3cc06ae0068d79a6459cabad8e12ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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