cskh.tankienland.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:73:52:a0:18:ae:6b:67:10:81:ef:bd:63:7b:22:2e:34 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cskh.tankienland.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:73:52:a0:18:ae:6b:67:10:81:ef:bd:63:7b:22:2e:34
Serial Number (int): 336352268752885859801153072747441396264500
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8c:ea:4d:95:15:60:95:ab:21:ac:93:79:86:83:7c:45:d7:54:d6:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 88:76:e7:47:8f:9b:d8:cc:d6:1e:f7:ce:f2:17:c8:52:be:c0:29:f5
Fingerprint (sha256): 82:d4:dc:73:99:89:a1:ef:d0:25:64:8c:d9:4f:40:0e:02:20:f5:90:58:99:58:95:e5:68:23:d8:7f:17:5e:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cskh.tankienland.vn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cskh.tankienland.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cskh.tankienland.vn

Other certificates including the domain name tankienland.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for cskh.tankienland.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuioTfrkqaZ3vzdBX5LQk
DGtxfA4QZsp8n6EbKnhOgv9SlL1m5cPZE5lH9eybW0JXZ9k2et7kKzxywZpmJCqz
PTajWSG/+R1WoB9XutV8hHQAkk1jIW1OTIMWHsVCwz18HZf6lGQeETly+HL/PWHX
iR0HU5NKobeya5RcxYhKasj7VBLieHlLPLp1PhSF3Ff+W/yUXGY0YlNuWb0RZXJj
Q2ACRq1tbq0rYbbH3lId3SG2RFpoinNBhZOmUV0AtcNg+SN+z/h2G8k0cnF1AQNF
Drl8p97GLoR9+o56FC3Crj8G/M4TO35ja7TB3/WaBEnbg8/pZ1eTkrieC6O0jaBw
fbEpRDM5Owrk3fsNtlG/lMEaBEGQmlWCjHoSkjqr89xJDRDzIGZ5iAx0IaZKonHT
/BsbaTQ6mQYgOjdXn1NfaOmswkdXZKQsa7Py1+xufprnu8L1DBrR/Ps8VoXpVBsc
Y4zIaAiKemR1dwAlV1am1BwvSTzY/i/R2Tc7U+NscOn3L8xfeCvvai/uVTXFjJ1n
ryvrwLVyoGTf5+qku19V86SCjwrm13KwiH/tRNQ865J1CF+SptxTPst2bdoTko93
AH3SEOMapRRPfDiDXWUDAJ8aAXFHq+fgnwaAPQf1K6InuSe6hSiVoSQi4vIu0EIB
2BEZ8UMWYSSDgSy90SH8gVMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336352268752885859801153072747441396264500
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 23:11:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 23:11:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cskh.tankienland.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759484326829555843969290824929462226813393409596582148562330823256340958606512459983007200094650347417612384992562242979260192719964381123632124091036144055716924222526076098039940717643064072133997386184144975747556441560489220630899539251413259919393914138040236391487853586892096191435620130600613081265338575060877572862417562427065501224734319637027907221422225881187005662011689714250545424495991402112031470611851529761085469473148618774597528241038307171949357243044448716926065079458148174701375999171242950552739259875092832964870227633788922794488669869368436491863565158714670992708923893010208981048230627294447696197285779444283664593848882469536261649509359196665005413653888438746028866323173970516660774330146194814603065570254451268676253770090427342086796452731993455635798400681928767983595231670656732246299864390197901671709787764266089037505258365606706941616787975296499118864160509700558679482922202264146615796292524522673819798160612161072004822470300909018089089099637050470220046981331112240514289696964468559133496145028680561917228253679573129557739171282840075064358479717929659689807152243498106708499887712411175681232054422241359911582343366331020528296967447440321751426852702417393906239787532627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cea4d95156095ab21ac937986837c45d754d656
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cskh.tankienland.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f68be77ca0000040300473045022100cf2c317d59b168c56f0818761ab124a9d137c87528d43ad0d38b21fbd998d29a02201cd8e92cfcb9c829acd959451b5e41d4504489d7d52835b66fb76ee773004b34007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f68be77bf000004030047304502206219bfc6a61abd29ddfeffac76e626f72f14699ff8229a8cd86af514b431c7ac022100c2b9b7c6fb9c735b01ee865e9ef189e3bafe4590beefb4f1c3487b53db9ea891
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00222ddf937632429e82e30d2f8e5f1167e039935273a970397b8fc6ddd7335935c49cbfc03273271a53a2e80354493fa308df0367e8447e1ea6e718a11d5323ac6cca5034c8c103cd20a628d96eddef69435d28e49a4b12a190662a818b8977134f1dba3bafe0e11b68c3a8bfcba9c7acd727b488735edd39ae6aa998213a63d1253fd28ffb511e96b71a6e1893a1476d388511c8020fd51de12eecbdd624c64a00dc214030275057ff1bb43ca743267022da4ed52b30ae52ca1b6894bc529f6d872d485f003f3abcbf9756d4894d61b1fac6c376d72f3178779042fa34b457f09b191c315061ca04068b541407dd6eb49385aa96a8b49d5d08a58363b927b839