vnpay.vntopup.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:e5:85:1f:b8:33:c2:92:2a:ec:06:72:24:03:3b:f8:e6 was issued on by Let's Encrypt.

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vnpay.vntopup.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:e5:85:1f:b8:33:c2:92:2a:ec:06:72:24:03:3b:f8:e6
Serial Number (int): 267426742462802323258912225459501577009382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5d:81:b6:e8:ac:e9:5c:8b:f4:55:98:a3:fd:bc:99:6f:e1:6f:d1:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:1f:9d:e7:4b:05:c9:0c:63:c4:36:6a:d2:90:27:74:3f:f7:5c:da
Fingerprint (sha256): 8c:06:28:53:8d:60:35:1c:46:c3:64:c8:7b:60:ee:c2:53:c9:7d:69:f7:56:78:db:25:26:8b:43:90:6b:d0:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate vnpay.vntopup.vn

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vnpay.vntopup.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbank.vntopup.vn
agribank.vntopup.vn
bankweb.vntopup.vn
baovietbank.vntopup.vn
bidc.vntopup.vn
bidv.vntopup.vn
bidvsmartbanking.vn
dongabank.vntopup.vn
eximbank.vntopup.vn
ficombank.vntopup.vn
gpbank.vntopup.vn
hdbank.vntopup.vn
indovinabank.vntopup.vn
lienvietpostbank.vntopup.vn
maritime.vntopup.vn
mb.vntopup.vn
namabank.vntopup.vn
namamobilebanking.vn
navibank.vntopup.vn
ncb.vntopup.vn
ocb.vntopup.vn
oceanbank.vntopup.vn
pgbank.vntopup.vn
sacombank.vntopup.vn
scb.vntopup.vn
seabank.vntopup.vn
shb.vntopup.vn
simdanang.vn
techcombank.vntopup.vn
tienphongbank.vntopup.vn
vcb.vntopup.vn
vib.vntopup.vn
vid.vntopup.vn
vietabank.vntopup.vn
vnpay.vntopup.vn
vnticket.vntopup.vn
vpbank.vntopup.vn

Other certificates including the domain name vntopup.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for vnpay.vntopup.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267426742462802323258912225459501577009382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 02:25:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-24 02:25:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vnpay.vntopup.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 969444778282968125862215957433611972495219200049332558257845316653758044998637125869672216033203414501537461572244849446301487468345843013495388189672925037057822169634569465418061754855182205056907612056502189952914403647706342006119935324092168111145151703910134387256854312952688157601590220734353190915462000566475772001395010455232876608018948696979382525717505060665335070112701177295399418197253675026077420430468317361737778964076452343659770437893357498555557458386435738145563802180339812401483016871223100781682914617416479402837658366047055620010075528418161308139415105110527410480014363190822516709345777595731417712221449966728109711545975749605906056153231400958553015674178419362504769588132070612048183018371790124505275010429723636563943921952748614115796583235382617807380290558254348838854522795173805532331208166431588030511768291240278960554724420771011889493391197490229533212882437371173493824983357572585237361356636627502849214592117954198405816898249224951034380406302747822534821900905307693334511189221542973002229704102663440191377317541768683999939748827753908506435721951424179965091887203910277642929439441623875378944416347386364924956262510834629258157224825702574867970269916214630433273873703871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d81b6e8ace95c8bf45598a3fdbc996fe16fd1b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (739 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agribank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankweb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baovietbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidc.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidv.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidvsmartbanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dongabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eximbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ficombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indovinabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lienvietpostbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritime.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namamobilebanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navibank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simdanang.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienphongbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vib.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vid.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnpay.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnticket.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpbank.vntopup.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ea5be3ef40000040300483046022100d5cca101eb6afa01ede0e86b7bab6f3c0bef064161bca08904a340eef1c01be10221009143e2a8523cdb3dc5086f4b2b268982a4cda62bad50a2aba0c2addc32a4ac1b007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ea5be3ee70000040300483046022100808fec7d9f7736dcacf4a2a02746bb7b26f050cbd913b470f47caa07d93b5b31022100ac6cb7542ebcc26c31bf36e22323b2206992f57348f060e1a3cf2d2184e70030
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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