api-go.acheckin.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:5a:21:92:5a:61:25:83:34:05:b0:ed:b3:87:72:6d:cd:eb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api-go.acheckin.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5a:21:92:5a:61:25:83:34:05:b0:ed:b3:87:72:6d:cd:eb
Serial Number (int): 379119181182241302259686681823338763767275
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:a9:dd:d9:25:a2:76:13:b4:9e:89:81:7c:01:d7:0c:87:16:ac:34
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ac:13:0d:fc:2a:d4:1c:e9:ce:de:c0:52:8f:7c:22:9c:8f:a4:75:5f
Fingerprint (sha256): 77:8e:99:60:7a:7e:aa:13:43:0d:4c:98:dc:09:63:36:a4:0a:09:ca:1e:23:0d:9d:d2:90:a7:b1:22:ee:88:0e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate api-go.acheckin.vn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-go.acheckin.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-go.acheckin.vn

Other certificates including the domain name acheckin.vn

(limited to 100 certificates)
clientadmin.symterra.co.uk
firetable.medgrocer.com
www.trendly.app
stage.fns.xchart.com
*.acheckin.vn
*.acheckin.vn
acheckin.vn
acheckin.vn
link.acheckin.vn
unila.com.br
mktpos.com
lottogold789.com
*.acheckin.vn
staging.nuclei.app
www.blissretreat.co.nz
dev.acheckin.vn
yamakoune-practice.tk
www.easyplaylists.online
tallyho.cc
acheckin.vn
app-aider-ai-staging.aider.ai
*.acheckin.vn
dev.acheckin.vn
news.acheckin.vn
*.acheckin.vn
news.acheckin.vn
go.trentee.net
katalog.systemdesign.no
*.acheckin.vn
www.rngevents.org
*.acheckin.vn
*.dev.acheckin.vn
itqanquran.org
news.acheckin.vn
sni.cloudflaressl.com
api-go.acheckin.vn
dev.acheckin.vn
news.acheckin.vn
auth.filmpicks.fan
discoverthecotswolds.net
www.schuldnerhilfe-zentrum.de
www.travelcab.net
sni.cloudflaressl.com
ysaebyuk.tk
app.acheckin.vn
probellapp.mx
*.acheckin.vn
sni.cloudflaressl.com
acheckin.vn
dashboard.grubity.com
kamilo.dev
app.sprinterwing.com
app.acheckin.vn
acheckin.vn
acheckin.vn
*.dev.acheckin.vn
dev.acheckin.vn
news.acheckin.vn
app.luner.com
josebernardes.dev
yamakoune-practice.tk
portal.talepnet.com
tocoankhanh.com
survey.cardiflab.com
sni.cloudflaressl.com
acheckin.vn
rbspharma.com.pk
mymoment.ashreinu.app
katalog.systemdesign.no
genius-car-services.monir.blog
www.everbary.com
cookies.futurenl.org
news.acheckin.vn
cavemanken.com
ganbei.lader.tw
dev.acheckin.vn
vidno.online
project.dev.acheckin.vn
results.quantifiedcitizen.com
fundmybachelors.com
allshelter-rfq.riyo.io

Certificate

The complete raw certificate details for api-go.acheckin.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuB0NDMvarFYPZldwydD
TEnnIpienwaAMNsCan1cnv8ysH7s8Cn4e5jHemXu+9YjYekHm1KpgBwsTWZhnCh+
Tz3f7J/cgceBxHpI1Vk+UIiGDvYNb607Z8qfsucmmJdCl+MH04CznCfXygAH8SEm
Az95e7hhjsm1WjHV1LuMXOaw/2ja6xxazLHdpWMdGDFKhs1WWLLAtHE9uuZnKz4v
bbaThRZ9i+aTKdZR86fn3QVTCZOgFHiUUtM3fd69MgCBL1kpx2JrP02IRX75bGYj
EJNBsUoKgdzJsjjh/j9Rliang0+YJYMivd8cX+1lv65fBxBlCeDA36p+d2Ku+NKu
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379119181182241302259686681823338763767275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 16:02:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-13 16:02:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-go.acheckin.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25105866737162978698323817279247411652563705919896184279930142525632390125413342205754911664512333152227106113907382715211243959517212042262475644582514487069293167322877365607662041260144803322932624235085560681829706311047356330342432886277902748974904550034267161819773546216013622596638928854244564346484794501824688225729856014134208306834856024932927340720364748665588895710509440806730206178037240885036714420033958943212919890866523186482438918938992758651620835960827047677482496470989829848504370313787898018868253442769669942733441274457774854819139331529135596995305166374518767119863561184212767506345679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83a9ddd925a27613b49e89817c01d70c8716ac34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-go.acheckin.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d08ec7ba10000040300463044022040b26c0c11e9ea1920c64b357d1f30cf0c8bec6d63c7acec5cb50de605b17b5b0220711cf5a92b7b412a9e877d2e207bd42dcc2facadb9afbbb84c539d7258b62c3000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d08ec7c640000040300473045022100ece2fc3ffdc859c653f3fb06c2f3bfba2952696a78d8202ad1a2ac02f30a1c870220426bcfece64cd9954f110dc3cf0b1d2e91babe458ea30d92779a1de712b98fa6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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