www.qbtravel.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:a1:e8:16:d1:d7:1b:5c:9b:e0:5a:95:15:73:a8:49:08:01 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.qbtravel.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:e8:16:d1:d7:1b:5c:9b:e0:5a:95:15:73:a8:49:08:01
Serial Number (int): 403543104182931197609132355430004103383041
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:f6:4c:9f:35:ed:d8:f0:b2:0a:99:76:cc:75:22:51:b5:7a:dc:49
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:c9:07:89:0e:4c:82:3c:51:bb:d7:cf:37:ee:fc:be:ec:5d:4d:3c
Fingerprint (sha256): 8e:35:eb:40:94:ca:91:69:43:6b:ee:28:30:7c:f4:c7:65:0d:67:49:a0:4b:6a:05:86:66:6a:57:b6:2a:2f:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.qbtravel.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.qbtravel.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qbtravel.vn
www.qbtravel.vn

Other certificates including the domain name qbtravel.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.qbtravel.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wF3JwaOhniK/M0HLAbe
97tvdcJbw4UkZ6JAGnlYlpCx0jb+TEv57RyNz0xqnw8nrsZi12Ec/l6nxr+A5BOx
CYTNwy+8jGrlor1Tua709oMqTq3O220/bcRjTOpcHAvJS6OJMUS7JLQiXS/0/n0i
AsbvbV6Y1k0xX5bqE55xdNDpDsISd+bXKGYGS0jEoRi25TeC5qYo/Zop5jkVuYMC
5CCEZZ7XgUArFXq65Q3f9yXn6WCcMyng1pEhLtR0izTXo43j3RadfztX5QyQ9tJq
+KYNmi8Fpb+niop0xmvbD+eD2/hT6XA8Vzls8WlSxB9FXGNYsqc+wWZVCFuPXSd9
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403543104182931197609132355430004103383041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 02:46:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 02:46:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.qbtravel.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28656817862314364289696050110675318141356698074017218583306644440641084432361529821967020409835050117422876708184382394196030271568557705895798401456115856010982456196653310451522479952678200670354054470748742462099258712621799500579290961675454485645464596564979009552111707546655472730052483172040483101279016468228052132451468869313390700134120003368805263610737498108651100044517908177972189640987982954903607966417167703816084195314325029483081635948372998108151809742676227446787053548131318422970066926288305964871660323870581311887062517235733654055260737007207461250311435146590357637198372181362215173455279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2f64c9f35edd8f0b20a9976cc752251b57adc49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qbtravel.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qbtravel.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cd7ba51af0000040300473045022100dac93ace33aa4d3e39c129fe733e8307301b39d311612d6c3df708d79125b7c7022029bdec0ef9c7ef917d359fcb4b26c1dc58e2cbc4a58869aebcefe1c1d72cf65d00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cd7ba522c000004030047304502204211aa4785f92215dff61807d5f1c6be71ff8f6cc1a6bdf9c4233dc662e028bf022100e5906e3fbd531797d306b2b3464e50df0a50db765b09e7987cf588a9d2e15314
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0096261fb72336ad8aad5a14e717a78c916d17c13490da8c3e6c705455b3038a28319b06e72865b4b45f9c47967911fb01c8ff98dc65db171027938809b0efc0b228d5338208ad0e36a58b58b69a20fc9a6a5f1176ae0cc13898977b9374ab1b71e4bb6d4a2b83fe9291f20a15da9a1cad3e313e1b3db77ac37e9484647ed6773d83606e706721173d1d92b2c03b3e451a4bc49bfc37396c49de3f62e6cdef747fef0b9f5e4752424c5694a5050bd20cb36e0e1e29a0eaf5fa485b7a6069a8327ebae0f25f53a3aeb6b5b29e5732eef700192d41e8baafcbe78f835cc7a27779ae2e508aefc80d50cd90430b4e352477582c9a05879ba73d336512c99f3fac72e0