www.ngukimthuanphat.duy1.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:b5:35:b2:27:11:94:e7:36:22:26:32:e7:db:0e:7a:d8:96 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ngukimthuanphat.duy1.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:35:b2:27:11:94:e7:36:22:26:32:e7:db:0e:7a:d8:96
Serial Number (int): 322999340312994958171437544868550434019478
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:6c:75:6d:ff:6c:17:d0:d4:f6:51:c1:e0:d4:06:20:96:59:3d:e4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:9a:29:f3:01:ea:55:35:e9:4a:36:0d:99:4d:35:4b:ea:d8:61:bf
Fingerprint (sha256): 7e:2e:84:e6:e8:1c:02:bc:58:37:93:ea:bf:57:ab:0b:a7:1f:6e:57:37:75:45:d6:aa:e2:3d:44:b1:13:b4:0a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ngukimthuanphat.duy1.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ngukimthuanphat.duy1.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

andatzada.duy1.name.vn
banhxedayminhthu.com
banhxedayminhthu.duy1.name.vn
hoalantrantuan.duy1.name.vn
learnvietnamese.duy1.name.vn
learnvietnamese.hanu.edu.vn
muabansaucanxi.duy1.name.vn
ngukimthuanphat.duy1.name.vn
osungvina.duy1.name.vn
tuyetdungcolor.duy1.name.vn
vietabolt.com
vietabolt.duy1.name.vn
www.andatzada.duy1.name.vn
www.banhxedayminhthu.duy1.name.vn
www.hoalantrantuan.duy1.name.vn
www.learnvietnamese.duy1.name.vn
www.muabansaucanxi.duy1.name.vn
www.ngukimthuanphat.duy1.name.vn
www.osungvina.duy1.name.vn
www.tuyetdungcolor.duy1.name.vn
www.vietabolt.duy1.name.vn
www.xenangdongduong.duy1.name.vn
xenangdongduong.com
xenangdongduong.duy1.name.vn

Other certificates including the domain name duy1.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ngukimthuanphat.duy1.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyExwE8QP4tOnIk8IdfQK
T6kLghTA/e6BZ6WDCQb4NwrdDjSwmmywBQaNyajBHN9rmA1B4EkF4BZ+qtTYtxw4
UOvuWZuZfTsxEnTj15AdkCWL7BLfBqJaNKMKgsshK7HowhsYjfooYP2sL50j1HjD
xL2A5+8w30ibLCSYLXP8YpByrULyQGvtFdmpVNpMPdMi0oWu/LrWYHzsSvGfSjy9
FRE2Zj7I7oBIhrs39e1hWxx/jVI44QdjdigCCwr3Wsg8lt4ATmF3gRerBUtKHcaO
CddZJ4q3tRUhxN/R5dbzOxtIVgmCk57WXZJAwRA0aswf9zKQjqnLukM3pbPavNRz
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322999340312994958171437544868550434019478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-20 11:36:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 11:36:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ngukimthuanphat.duy1.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25285353878015318254558350274808189215873546625110930057882354379667431268083421857037482658769511516536873172718733031884565258674187836924470133466167875466785675046629330313235434104032983542685781871633242399069879414717369907556505077986216668340052902575533059881721953709140575635035997242045564982872921660499506229447923184759354820037796113026523030963316346103395044855473661638050234706861797945160870997932134037542329022255385064314634395567627944828989870239324295129321598875526233126897568129639979660755251033127020748024592466913603633808571151515781800889571954743568102807663021924086108688511841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b86c756dff6c17d0d4f651c1e0d4062096593de4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (691 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andatzada.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banhxedayminhthu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banhxedayminhthu.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoalantrantuan.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnvietnamese.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learnvietnamese.hanu.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muabansaucanxi.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngukimthuanphat.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osungvina.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuyetdungcolor.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietabolt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietabolt.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.andatzada.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banhxedayminhthu.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoalantrantuan.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.learnvietnamese.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.muabansaucanxi.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngukimthuanphat.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osungvina.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuyetdungcolor.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietabolt.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xenangdongduong.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenangdongduong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xenangdongduong.duy1.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189734d2d55000004030047304502210082e7d8a7bb379c173ae4fd802f2ddffaeae102d4241fd2de2f56650d445cd4d802205b134c5df0a7929d057145f865124e9c87e4feb471ceb57f8eca1a16fbc08afe007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189734d2d3e0000040300483046022100d527a4b94a8f8f16765f9b21fbb21ea9378b0424da03b1c2b4b322f03bdeacd8022100e412bafeaeb96eec872e1db0b9a108e50e6e96f036df34251e224ca332b88808
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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