canhdieuxanh.duy4.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:9a:59:37:44:5a:4b:44:99:fe:0d:fb:71:94:d0:25:cb:bc was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=canhdieuxanh.duy4.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9a:59:37:44:5a:4b:44:99:fe:0d:fb:71:94:d0:25:cb:bc
Serial Number (int): 400971216487175268872561561844659844926396
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 09:47:a3:a5:80:b5:72:f1:1c:ee:a7:03:49:70:0e:73:d8:b1:bc:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b9:b1:a4:e7:04:d3:1a:44:33:df:0a:67:e7:31:ef:cc:20:59:41:4a
Fingerprint (sha256): 65:df:b4:59:f4:0f:6e:ee:f9:86:b0:5b:7e:49:7b:c0:9d:f8:73:45:e0:cc:58:fe:ed:9c:cc:9f:52:ff:b9:dc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate canhdieuxanh.duy4.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canhdieuxanh.duy4.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bidvcrimson.duy4.name.vn
canhdieuxanh.duy4.name.vn
drhs.duy4.name.vn
kientructuyetmynew.duy4.name.vn
linkocable-ja.duy4.name.vn
phantuong.com
phantuong.duy4.name.vn
sakuko.duy4.name.vn
sapaheritage.duy4.name.vn
tohanacomvn.duy4.name.vn
vnpaytet.duy4.name.vn
vnshop.duy4.name.vn
www.bidvcrimson.duy4.name.vn
www.canhdieuxanh.duy4.name.vn
www.drhs.duy4.name.vn
www.kientructuyetmynew.duy4.name.vn
www.linkocable-ja.duy4.name.vn
www.phantuong.com
www.phantuong.duy4.name.vn
www.sakuko.duy4.name.vn
www.sapaheritage.duy4.name.vn
www.tohanacomvn.duy4.name.vn
www.vnpaytet.duy4.name.vn
www.vnshop.duy4.name.vn

Other certificates including the domain name duy4.name.vn

(limited to 100 certificates)
www.digimindgroup2.duy4.name.vn
www.shopbanhcuon.com.duy4.name.vn
locnuocsmart3.duy4.name.vn
truongtinland.vn.duy4.name.vn
webdisk.vaihoalam.com
tonmatposhacocom.duy4.name.vn
baotinlogistics.com.vn
cpcalendars.duy4.name.vn
xenangsc.com.duy4.name.vn
locnuocsmart2.duy4.name.vn
dailyfordbacninh.com
vaihoalam2.duy4.name.vn
lidolounge.vn
canhdieuxanh.duy4.name.vn
www.asiapacifictravel.vn.duy4.name.vn
tuyensinh2023.uwebristol.edu.vn.duy4.name.vn
www.congnghegiaoduc.hust.edu.vn.duy4.name.vn
www.saotech.vn.duy4.name.vn
www.congnghegiaoduc.hust.edu.vn.duy4.name.vn
www.bidv83.duy4.name.vn

Certificate

The complete raw certificate details for canhdieuxanh.duy4.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkw0OWEMsQIWp3rvkLN7
qSmMrsCtCygiD3DvHcqwNUyD+W82ZF0h9T5n8Ly++TMEq8Oi1Yq3S1DDUs28NKWL
6KfH8dDgqf+R8Kwm/ZWvWaj1MRAHacygcS6cOrP3bPtL9IlC3A/Zv83MsnGxkutT
vS3YBte2b04jYMWIvnIcAk+r4RDx4hsBfNo50VH0Sl02oxM4SqNlUlJspd0b5/t6
RqA/4YmvyBdN6A2jX7MXTGyQL7SR3lmjgZDVUv11Geo3Fa1xttw1RVl/Vt+cdYUQ
JkWgaWol7g/0kzCNXUUY9ml78dsohhl10vfKirR1gSsoKLoYryXhWXmMDe8jYEwV
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400971216487175268872561561844659844926396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 20:22:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-24 20:22:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canhdieuxanh.duy4.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24022855536751312070276960614086545856717442918407500889033421966493358933554426686670779100796297114367902719637563671364741356915739291821801124744781289362639974251661679221124957761633036683532638361428627106230795651406463333661446898858979235619096166851061835844396760362139768411643045706487214619989758553826396897360042917258945461061345965457438994693243790028503348688079592273706407175253071308482017270286176670093976621089420506451639914573015381089830528177786631935739612674876351957307714336952575131438048111536529324162454843135858566486396044697980309594277616527165025983812742700459090718233987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0947a3a580b572f11ceea70349700e73d8b1bc51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (632 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidvcrimson.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canhdieuxanh.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drhs.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kientructuyetmynew.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linkocable-ja.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phantuong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phantuong.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakuko.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapaheritage.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tohanacomvn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnpaytet.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnshop.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bidvcrimson.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canhdieuxanh.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drhs.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kientructuyetmynew.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linkocable-ja.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phantuong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phantuong.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sakuko.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sapaheritage.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tohanacomvn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vnpaytet.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vnshop.duy4.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e7ca47970000004030047304502201b59243a698d7c93ecb337162b983728ff663ef780520620f2d5d9740f4acc6b022100d2e7865fe3eecd8af6a1a4a49f0095279dc6387d6b462b6d0302d61269248e4600770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e7ca4799d00000403004830460221009eb6614c840d2ecdc62444d8476198506d434489bb91ef54798d6a71c86a676d022100a1d7dba63552684f375fd2ca4ec43d68866d1cf4b069be09b459f875b933ab9c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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