mobio.vn

Issued by R10

About this certificate

This digital certificate with serial number 04:67:c8:be:53:a6:1e:c2:69:93:1f:73:70:64:15:5d:22:76 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mobio.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:67:c8:be:53:a6:1e:c2:69:93:1f:73:70:64:15:5d:22:76
Serial Number (int): 383765061352059144775975953958993890452086
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:d5:3a:ae:78:0e:e3:7b:01:61:34:b6:67:b9:79:42:07:5e:46:e8
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 41:ed:da:7c:a7:f9:b0:06:8b:53:fb:ef:17:ee:6b:d3:ab:63:ef:82
Fingerprint (sha256): 71:bd:93:ee:84:da:92:d0:e3:02:4b:ca:1b:7b:29:eb:1e:06:11:06:49:d4:57:82:7b:b5:07:1e:f9:aa:68:57

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate mobio.vn

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobio.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

confluence.mobio.vn
help.mobio.io
help.mobio.vn
mobio.io
mobio.vn
rancher.mobio.vn
www.mobio.io
www.mobio.vn

Other certificates including the domain name mobio.vn

(limited to 100 certificates)
ck.hpt.vn
gitbucket.mobio.vn
loind.mobio.vn
admin-test1.mobio.vn
doitac.mobio.vn
doitac.mobio.vn
ck.mobio.io
dev.mobio.vn
vpbank.mobio.vn
partner.mobio.vn
sungroup.mobio.vn
ck.hpt.vn
ck.hpt.vn
admin-doitac.mobio.vn
ck.mobio.io
sungroup.mobio.vn
api-sunworld.mobio.vn
ck.hpt.vn
ck.hpt.vn
crm-api.mobio.vn
ck.hpt.vn
admin-cv.mobio.vn
admin-sunworld.mobio.vn
gitbucket.mobio.vn
ck.hpt.vn
cem.dev.mobio.vn
mobio.vn
mobio.vn
gitbucket.mobio.vn
ck.hpt.vn
api.mobio.vn
vpbank.mobio.vn
admin-dev1.mobio.vn
bibomart.tnk.mobio.vn
admin-cv.mobio.vn
api.bank.mobio.vn
admin-vpbank.mobio.vn
admin-sunworld.dev.mobio.vn
sunworld.mobio.vn
mobio.vn
admin-test1.mobio.vn
mobio.vn
gitbucket.mobio.vn
partner.mobio.vn
mobio.vn
dev.mobio.vn
ck.hpt.vn
mobio.vn
partner.mobio.vn
doitac.mobio.vn
admin-sunworld.dev.mobio.vn
ck.hpt.vn
doitac.mobio.vn
mobio.vn
api-p.dev.mobio.vn
ck.hpt.vn
admin-cv.mobio.vn
crm.dev.mobio.vn
cem2.dev.mobio.vn
loind.mobio.vn
mobio.vn
cem.dev.mobio.vn
app.mobio.vn
ck.hpt.vn
ck.hpt.vn
admin-test1.mobio.vn
ck.hpt.vn
dev.mobio.vn
admin-vpbank.dev.mobio.vn
gitbucket.mobio.vn
doitac.mobio.vn
vpbank.dev.mobio.vn
cem2.dev.mobio.vn
dev.mobio.vn
api-vpbank.dev.mobio.vn
ck.hpt.vn
api-sunworld.mobio.vn
admin-sunworld.mobio.vn
mobio.vn
admin-sunworld.mobio.vn
ck.hpt.vn
admin-sunworld.mobio.vn
partner.mobio.vn
api.mobio.vn
admin-cv.mobio.vn
ck.hpt.vn
admin-sunworld.mobio.vn
crm.dev.mobio.vn
api.mobio.vn
doitac.mobio.vn
api.mobio.vn
admin-doitac.mobio.vn
crm.dev.mobio.vn
admin-doitac.mobio.vn
api.bank.mobio.vn
admin-sunworld.dev.mobio.vn
doitac.mobio.vn
api-sunworld.mobio.vn
ck.hpt.vn
ck.hpt.vn

Certificate

The complete raw certificate details for mobio.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hn7ESAPFL90hnT42z26
oBbxu7+8CZ7vnf29p0B/gGNXlB24OuDoKak1W5HX1z+gh7ZZ7U6kJhQuBLy6lzJM
tQmkfRN9Ey92JILGOy/X6lwIJpjjmwm0ez6ZNsveqN1H1GYZATmNS4T8/Zk1X29D
5O0fnf+7UoanWg098zFhr+28Pp0Mg3xSSXWsRWia3E2NKrxpxlZI0pgTbvuIQ41R
Zz0T/JV3cVBV2ROOR2vGTbjE7nJqpGvuB36zbgcXdRljpMUmeIO1vFBHqEEgiiEK
9AfCdCSWSoYdVkpY/jEoae1WSWU3sFjVowXYqeyvwtqQXcdwlHVEepPkCgzYisFH
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383765061352059144775975953958993890452086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 09:17:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-08 09:17:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mobio.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27027808838223223755225379557814219908050619104817572367519202390149500509095291613209888721417385201266517024084433287932894654374486316773693013430775574441302636949947346539777381913413418217462745581460754064280829753413089194865961326839987094921815759594209216424744423549061628580133940897712565600899825102801962809642041189607302554319730134626706394981423259059624504727052736253366770091885598863572723166388399963148511219311384003504734472313955304874091199219135757440301866544467005314274158423992066539603190229533956435273588097206244396855599983787902990953944308160038651744715961510346057326872457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29d53aae780ee37b016134b667b97942075e46e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.mobio.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.mobio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.mobio.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobio.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rancher.mobio.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobio.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000019001a6c2a300000403004830460221009bceb1cad46bdb09c695d5c57df6aa262e32b9e07b367b7de01b4bc9859e5f0802210084e01a0587755165b6d430395e43ac0c5f2530988148256c871590a8a1b5adbc00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000019001a6c3000000040300473045022100f16b859d911610b7cabe969378e3cbf786da93bb1b1e404f0abb6edd3ae3fbb902206d89e8c2eb0a99a9f42051b435632e54ca398f2b3225c18cdc11d4ca173b7dfc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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