www.vietnamatlantic.duy7.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:53:dd:79:aa:0b:06:ea:90:9b:f8:82:c5:cc:8d:73:c8:d4 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.vietnamatlantic.duy7.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:53:dd:79:aa:0b:06:ea:90:9b:f8:82:c5:cc:8d:73:c8:d4
Serial Number (int): 376986971285350511066050007612750740834516
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 14:9d:a6:1f:4f:91:18:39:82:7c:1b:04:6a:3c:4b:3f:b6:47:55:40
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 04:32:27:36:81:ca:80:99:cf:94:d5:6f:ba:0a:2a:91:90:7a:c1:6a
Fingerprint (sha256): 60:1f:18:26:9a:81:e1:0b:f9:5b:6f:33:b0:b8:4a:6a:66:73:09:3a:d9:d9:5e:72:38:49:00:74:e7:dc:7f:20

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.vietnamatlantic.duy7.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vietnamatlantic.duy7.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bpstone.duy7.name.vn
cpanel.teehair.com
cpcalendars.teehair.com
cpcontacts.teehair.com
danloakaraoke.com
danloakaraoke.duy7.name.vn
dogolamsam.duy7.name.vn
gaokinhbac.duy7.name.vn
lazion.duy7.name.vn
mail.teehair.com
teehair.com
teehair.duy7.name.vn
vietnamatlantic.com.vn
vietnamatlantic.duy7.name.vn
webdisk.teehair.com
webmail.teehair.com
www.bpstone.duy7.name.vn
www.danloakaraoke.duy7.name.vn
www.dogolamsam.duy7.name.vn
www.gaokinhbac.duy7.name.vn
www.lazion.duy7.name.vn
www.teehair.com
www.teehair.duy7.name.vn
www.vietnamatlantic.duy7.name.vn

Other certificates including the domain name duy7.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.vietnamatlantic.duy7.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCsdhp6jpIORg3/eXgus
c8azgbsoIBuEMZuQJj5WB5yBygx3J8tDqOg3Ei3aiWYaPveFAOH1vjnGerGEmv6U
QSpwvoIP2UEqk3pwvEhUo3Dq0GTO+tKbIhdpIOQpq4EQA1Tn8kTSZcwWte6RpUNo
7CmxSBGfbuaCdVsLyNuMGLCMSaFyWMXoBbbNhAcFNCEJCCeR2B6qMgRkQSLSK/r6
AjH2AY1iPJk72DONuIBxNKUmkCrGYLra26ieNcAVZSMho482x4KvMwiWxIV+JHS5
7YKMbb3GLTNwuH9oT4MUAl+qsqexXl9qzkoyrJh52778m+l3YVp+IPfBBkON9LxH
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 376986971285350511066050007612750740834516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-24 08:45:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 08:45:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vietnamatlantic.duy7.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22744155858175081960741978936074988678993853365284107304539302985870437438114872326641786748282614603579981124367974085514194055032087965785288006919885883658266618066880776008787415706578032625176789260401336264945065152686884083106060777906246655676330750473353215273922610632723787848428816740689531915843805710346385523595178970776791198320846424368926873195107818178347909370472864984185780026986487227489088905531052973911601943465209406996917144770745512686529876846221848753641560180670115204676406550377639443006925203738701144119989450134148890319509157158823450493926123456764607904604528355474350511245117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							149da61f4f911839827c1b046a3c4b3fb6475540
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (580 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpstone.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.teehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.teehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.teehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danloakaraoke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'danloakaraoke.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dogolamsam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaokinhbac.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lazion.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.teehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teehair.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnamatlantic.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnamatlantic.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.teehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.teehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bpstone.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.danloakaraoke.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dogolamsam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaokinhbac.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lazion.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teehair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teehair.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnamatlantic.duy7.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c00b803ca00000403004630440220559500668aa4207b31bf8319b4bc6dee8e7df0295284c73e66337d504943f1cc022015e50bdfd9e4f755af1adf76d5ce08873c007f1eddcfffaddbc7bacaf2abceaa00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c00b804030000040300473045022100ef630481207cca7468a28becb4cd66b6c256fe0b98a3d2ec4348a9b1c212583e022043327a53be5835bef53c89ac5b1a169e263cc1d6f8db8f728f8af5f4acc4d9de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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