www.xuongkhopnibifa.duy6.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:1c:d2:81:4e:d4:85:1f:7d:2c:d8:bd:5f:69:04:a2:9d:1f was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.xuongkhopnibifa.duy6.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:d2:81:4e:d4:85:1f:7d:2c:d8:bd:5f:69:04:a2:9d:1f
Serial Number (int): 271144573353342119354904131859670884326687
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:6d:98:da:4c:18:4e:00:f3:65:27:e7:70:a9:f4:4c:e4:f2:ef:e6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:ae:38:3f:44:e3:b5:f4:88:cd:5c:65:fb:a6:a9:68:75:84:18:25
Fingerprint (sha256): 8b:cc:de:78:10:0b:65:e4:53:a4:49:e8:61:5d:ee:da:fd:9d:db:9d:ff:6b:64:44:b5:df:5a:cf:c0:53:ac:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.xuongkhopnibifa.duy6.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xuongkhopnibifa.duy6.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amdigroup.vn
amdigroup.vn.duy6.name.vn
chongchay.org
chongchay.org.duy6.name.vn
cpanel.amdigroup.vn
cpcalendars.amdigroup.vn
cpcontacts.amdigroup.vn
lptimetech.com
lptimetech.com.duy6.name.vn
mail.xuongkhopnibifa.vn
webdisk.amdigroup.vn
webmail.amdigroup.vn
www.amdigroup.vn
www.amdigroup.vn.duy6.name.vn
www.chongchay.org
www.chongchay.org.duy6.name.vn
www.lptimetech.com
www.lptimetech.com.duy6.name.vn
www.xuongkhopnibifa.duy6.name.vn
www.xuongkhopnibifa.vn
www.xuongkhopnibifa.vn.duy6.name.vn
xuongkhopnibifa.duy6.name.vn
xuongkhopnibifa.vn
xuongkhopnibifa.vn.duy6.name.vn

Other certificates including the domain name duy6.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.xuongkhopnibifa.duy6.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIAIWdgBSQOkojPPqRmL
flqobwY9yQZT4l8Ck7yPObL5POS3jXA60Xg0Tlqz8ouK06ZHzacvVDGZwf33belT
omNJtFtcwKu9Cer0aeSO3bthlI31QjYbfPZs6PXMhy6ecFFlWK7bECv5SY0OZXob
6kDGcLIAMtapyjwQEUdyu9yZlbCehdIVmtduaQZziz0AB13WMRZ48gKTE2c7z/yd
XlIGL+e9Jb+0zWQX02wo2JolpS9Yu3AvqWdRSXIptkPONVmuqKBkn49/AMu52Ikk
O4tksQ1aO1b5GNmZaBPoEwFTQd7ocePNIkkyGTkc+N7esCB3zgc4OgdomuSqQ0Xw
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271144573353342119354904131859670884326687
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 04:02:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 04:02:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xuongkhopnibifa.duy6.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23795936572070887911271936208448321143572007735795713735840031222250092222569924251669882677056436329523071688274708770948220739231401784252902474664038682175747265439574450375276358415815904532692290999360687584795844271235921931517897574272305590275762499562399449539919186138096094682713571083667122931493389684505491330591644244802011232802849832091642434872743118316355007305810215824925613248438412760820481160489350594275112746628497669077621095009111414612285968147755260473399670907483646936313049916444219554324192214523745844843861173597375031549961678637949215368736689181690452090399382024326255716200701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e36d98da4c184e00f36527e770a9f44ce4f2efe6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdigroup.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chongchay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chongchay.org.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lptimetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lptimetech.com.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.xuongkhopnibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdigroup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdigroup.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chongchay.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chongchay.org.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lptimetech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lptimetech.com.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xuongkhopnibifa.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xuongkhopnibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xuongkhopnibifa.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuongkhopnibifa.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuongkhopnibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xuongkhopnibifa.vn.duy6.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c0f28b656000004030047304502205808233b64134a06e5d520548025a93373f0ad6c01ab27a10464749a76fb93610221009c719903c905ded73072b5ad5d269249949e74685763a0c5353157628c3723b50076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c0f28b6600000040300473045022100e6ed3eb6a5caf39d9a486afb219c87a41bcd11fcbaf2e6e1eb91146d8157481e022072b8b30d0b5996a743d75e925174a2a9e642db1285a604c91296c355db9b664b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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