www.apecgroup.duy7.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:e0:41:28:e0:8c:9c:d4:2b:d9:d0:f7:97:64:f9:7e:eb:a1 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.apecgroup.duy7.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e0:41:28:e0:8c:9c:d4:2b:d9:d0:f7:97:64:f9:7e:eb:a1
Serial Number (int): 337646720051571546811368329508200793435041
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:23:fe:b4:e6:8f:84:01:d1:b8:59:d4:ae:a9:7a:28:eb:43:d4:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b3:73:02:e5:a5:be:4c:06:22:8d:78:94:20:48:1d:7a:81:0b:a4:ae
Fingerprint (sha256): 88:fe:36:ac:ad:cd:62:45:ef:6c:81:46:51:dc:cb:5e:20:af:55:fc:fb:07:38:e0:31:85:f3:55:2c:40:ba:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.apecgroup.duy7.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.apecgroup.duy7.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lavishdecor.vn
apecgroup.duy7.name.vn
gammavietnam.com.vn
gammavietnam.duy7.name.vn
ganket.duy7.name.vn
ganket.vnpay.vn
karotech.duy7.name.vn
lavishdecor.duy7.name.vn
lavishdecor.vn
mhdgroup.duy7.name.vn
raya.duy7.name.vn
thanhbinh.duy7.name.vn
thanhbinh.net
www.apecgroup.duy7.name.vn
www.gammavietnam.duy7.name.vn
www.ganket.duy7.name.vn
www.karotech.duy7.name.vn
www.lavishdecor.duy7.name.vn
www.mhdgroup.duy7.name.vn
www.raya.duy7.name.vn
www.thanhbinh.duy7.name.vn
www.thanhbinh.net
www.wyndham.duy7.name.vn
wyndham.duy7.name.vn

Other certificates including the domain name duy7.name.vn

(limited to 100 certificates)
vietnamatlantic.com.vn
www.chudoso.duy7.name.vn
thangmayitech.com
duoclieuninhhiep.com
ecogarden.duy7.name.vn
sunrisecolour.duy7.name.vn
www.esv.duy7.name.vn
www.gammatech.duy7.name.vn
webdisk.thbamboo.com.vn
kimsagroup.net
www.nangluongtaitao.vn
www.vietnamatlantic.duy7.name.vn
www.gttvietnam.com
kimsagroup.net
xaydungtantien2.duy7.name.vn
cpanel.dochoihoaphat.com
www.chudoso.duy7.name.vn
vietnamatlantic.duy7.name.vn
www.bpstone.com.vn
www.apecgroup.duy7.name.vn
www.avgcargo.duy7.name.vn
www.hoathinhwood.com
www.thbamboo2.duy7.name.vn
suadienlanhbacninh.duy7.name.vn
mayinnoiao.com
cpcalendars.dochoihoaphat.com
vp-parts.duy7.name.vn
vietlogos.duy7.name.vn
dogolamsam.duy7.name.vn
lianshengpower.com
hikorea.duy7.name.vn
www.apecgroup.duy7.name.vn
vietko-vp.duy7.name.vn

Certificate

The complete raw certificate details for www.apecgroup.duy7.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKzZHkxXp04XgYhr2Rp+
mM2kNojtIw3rYGNEv9tpFneMJ33dSa1RDZEOTbASDbOvW3CcB0QRVrdGnLjw4DZe
RD06iESWPXcBZLnsBk+5H902FV/Fh4VtkLYqCtM/DV82js6Akmc5j2YgCB7a3/qZ
nd0xOOHOl0py4b/wI5C4ymLQXjlJ9RDlwlulBdsZi1n3O0wfWHu35IL71RF9wnlN
eN4j3jrr+mQl5hPrAUoq8/WhrU668cfEvf7c140S1OKYUNTld6EMiDpLR602xyZX
FwGPk/UTynvC1LGjYy0SJeFEDcowxFC9z82ufmIU25nVtxuaZRpjQk8LN1swdnpf
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337646720051571546811368329508200793435041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-18 11:23:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 11:23:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.apecgroup.duy7.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24322989137483630066764307885743158347461067777967401662602951992286904766807228883967926136725499641491110942943856043973562468389044316742461550270321468802607610841147245830841111352417783028468230542368438763497656431752740699757970512090512374510645426383236448410297822806685729548333179163547957186055602346248130285158592717797458596046894053855309995746525152688878276494911439402497341186540769201345873434170915842928814350471488772328368971371744685437101342280659551395783166394364439161944491037820278556567300297059435945607742715336309429685585215010563656568661189059189764944481307624617584002490161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c523feb4e68f8401d1b859d4aea97a28eb43d481
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (564 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lavishdecor.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apecgroup.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gammavietnam.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gammavietnam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganket.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ganket.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karotech.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavishdecor.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavishdecor.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhdgroup.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raya.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanhbinh.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanhbinh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apecgroup.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gammavietnam.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ganket.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karotech.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavishdecor.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mhdgroup.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raya.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanhbinh.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanhbinh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wyndham.duy7.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wyndham.duy7.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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