*.vietjetair.com

Issued by RapidSSL Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 05:2f:93:a5:fb:d6:ec:78:b5:d3:28:80:5d:44:3e:3d was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.vietjetair.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:2f:93:a5:fb:d6:ec:78:b5:d3:28:80:5d:44:3e:3d
Serial Number (int): 6893172596074832207984241057026293309
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3d:81:45:0c:60:92:ef:52:b3:42:57:e4:7c:a7:7b:1a:3d:50:46:cb
AuthorityKeyId: f0:9c:85:fd:a2:9f:7d:8f:c9:68:bb:d5:d4:89:4d:1d:be:d3:90:ff

Fingerprint (sha1): 63:26:17:bd:e3:2e:a1:ef:f2:f7:14:98:22:11:45:5c:b6:89:84:7c
Fingerprint (sha256): 7e:38:b2:af:44:46:e0:ac:ac:00:06:84:77:df:e0:65:92:b6:69:1d:56:28:48:56:e6:ae:fc:f9:75:3f:58:4d

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.vietjetair.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vietjetair.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vietjetair.com

Other certificates including the domain name vietjetair.com

(limited to 100 certificates)
vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
*.vietjetair.com
book.vietjetair.com
vietjetair.com
m.vietjetair.com
vis.vietjetair.com
skyjoy.vietjetair.com
m.vietjetair.com
*.vietjetair.com
booking.vietjetair.com
mapi.vietjetair.com
skyboss.vietjetair.com
m.vietjetair.com
vietjetair.com
*.vietjetair.com
efb.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
m.vietjetair.com
*.vietjetair.com
agent.vietjetair.com
m.vietjetair.com
cargo.vietjetair.com
ifs-api.vietjetair.com
*.vietjetair.com
m.vietjetair.com
cargo.vietjetair.com
*.vietjetair.com
skyfun-api.vietjetair.com
*.vietjetair.com
m.vietjetair.com
vietjetair.com
vietjetair.com
m.vietjetair.com
careers.vietjetair.com
vietjetair.com
*.vietjetair.com
vis.vietjetair.com
vietjetair.com
m.vietjetair.com
vietjetair.com
goldairplane.vietjetair.com
hdbank.vietjetair.com
*.vietjetair.com
vietjetair.com
vis.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
vietjetair.com
skyjoy.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
*.vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
vietjetair.com
vietjetair.com
*.vietjetair.com
*.vietjetair.com
mail.vietjetair.com
skyfun-api.vietjetair.com
vis.vietjetair.com
vietjetair.com
freesummer.vietjetair.com
agent.vietjetair.com
*.vietjetair.com
vzinterline.vietjetair.com
vietjetair.com
cargo.vietjetair.com
vietjetair.com
*.vietjetair.com
careers.vietjetair.com
vietjetair.com
*.vietjetair.com
vietjetair.com
agent.vietjetair.com
skyfun-api.vietjetair.com
vietjetair.com
*.vietjetair.com
skyjoy-id.vietjetair.com
*.vietjetair.com
*.vietjetair.com
cargo.vietjetair.com
vietjetair.com
*.vietjetair.com
www.vietjetair.com
vietjetair.com
funcoin.vietjetair.com
book.vietjetair.com
skyjoy.vietjetair.com

Certificate

The complete raw certificate details for *.vietjetair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiFParRBx09LfmuT6bSN
h77esUUd9nQzOKAqGHWffJ+iKa+XNWBEarJaOuG3oicgSzgCqhkR+tR78XhIa+Nd
pUSZRCSNglKLAtKGSTYAHr+zm6kma2DUNaq4NBTyeEGB5NzTM7tbQ4hhmqmRkjG8
tbQL6VZuuqnNJFoCLJYwnXWsnbyJZCOA7zpowIMy/G5xiyLaUimLahJhl7qdTE53
GkQtUh2O+uuujZhqcRzC0F7Af7vzwSujvSDCegRilRaFYX884fwGTFXXINXqZvqS
g1AU2c/ly81dwkuksT22VbaHZpRNmZNrvKXLLbao0q1tzVHPOuex+LvSF3kYvPF3
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6893172596074832207984241057026293309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vietjetair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17942265187812961926250501302485919001122183825053305595613822207849265854516034493063232910470597366169475466476733765650398946466207767540731565181904464174211334546574596118420502844534858319647289076696450865318743499931006975102007489981428804323961110605440198368513472987485885812607666262765318175925307134215297177211563179825968794427417556861380171410104201989304719929742527582642948274666263594757517122817270571000120475884721357597755491560482434691727811162089378049477548416836496275085925042677801147400227147108264437230567609817550601577035329394370573530678565640280237580331877902342271632766797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f09c85fda29f7d8fc968bbd5d4894d1dbed390ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d81450c6092ef52b34257e47ca77b1a3d5046cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietjetair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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