www.hoathuyetduongnaonibifa.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:70:75:fe:18:0e:9b:f9:bc:d4:df:7b:8a:a0:7f:ca:ee:a8 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.hoathuyetduongnaonibifa.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:75:fe:18:0e:9b:f9:bc:d4:df:7b:8a:a0:7f:ca:ee:a8
Serial Number (int): 299605321897270047704739942281871199235752
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:13:6e:38:74:c7:32:a9:70:01:61:39:3f:c3:43:a9:ae:94:33:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c0:13:ce:85:62:f9:31:0d:c3:bd:51:f4:ac:cf:20:69:e8:e0:d3:14
Fingerprint (sha256): 9b:5a:9c:02:4b:f5:7f:4c:e3:af:92:96:ec:d3:d5:cd:ce:6e:5c:79:19:c4:a3:6d:19:fd:89:af:f1:2b:3d:ca

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.hoathuyetduongnaonibifa.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hoathuyetduongnaonibifa.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

9t9perfume.com
9t9perfume.com.duy5.name.vn
antinhogreentravel.com
antinhogreentravel.com.duy5.name.vn
damaihaiduong.com.duy5.name.vn
donghonhapkhau.com
donghonhapkhau.com.duy5.name.vn
hoathuyetduongnaonibifa.vn
hoathuyetduongnaonibifa.vn.duy5.name.vn
nghiennhadep.com.vn
nghiennhadep.com.vn.duy5.name.vn
theoirgardenbhsgroup.vn.duy5.name.vn
www.9t9perfume.com
www.9t9perfume.com.duy5.name.vn
www.antinhogreentravel.com
www.antinhogreentravel.com.duy5.name.vn
www.damaihaiduong.com.duy5.name.vn
www.donghonhapkhau.com
www.donghonhapkhau.com.duy5.name.vn
www.hoathuyetduongnaonibifa.vn
www.hoathuyetduongnaonibifa.vn.duy5.name.vn
www.nghiennhadep.com.vn
www.nghiennhadep.com.vn.duy5.name.vn
www.theoirgardenbhsgroup.vn.duy5.name.vn

Other certificates including the domain name hoathuyetduongnaonibifa.vn

(limited to 100 certificates)
thanglongedu.com
www.hoathuyetduongnaonibifa.vn
www.9t9perfume.com.duy5.name.vn

Certificate

The complete raw certificate details for www.hoathuyetduongnaonibifa.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz38BiWA1zIO6AIDXH7eI
lU6VblZROVf/MADjT3mKM/PkHooihwpw1ySn1pSGOqKV4ZAxFpnHv3sOFPgN1waf
HzBPQYndpnJACqtQsvQwWF7kFCVsD9BSPf/YaohaSMBtW6EBoFVMEXnorOhL41Hj
OCwEIezN3AOC4JGeXjAKl1aEIYQWReOo56A5T7+YWkbs+LqE68fzd1bEdQQOWnWh
4wXb4GIDP7EdhMrkMfmfzXYZQwYXwV9hZpvnDA2bh8ckupn3oM3Nu3OUuGa5w3Ee
wZn4D6QPA+nMYsAWCPOcZJNhVytUY9wYQ+JSqsS1xqSlSeoKh3JywwF94mQl0T3T
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299605321897270047704739942281871199235752
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 11:13:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 11:13:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hoathuyetduongnaonibifa.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26193958121991217813928318606843161930331296031445063213735107393034853778741828175131860877868317974582335766489149938814532361427013606623453577395194772705537434482683767747790625295724776440857026674898006420848584574894641875672464128650346073412829599675636094830704260672476871240845459023813428199412983274101897487869240168962273469743765096332383248890565820997663306322693330602840029615800484774202475641427044998953919137082440257231671538928367556071487753938814503489698776469013302818354842121036918268702613622182804776381855209304872618803637743184031574278398507592821148898501827233269875467998181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b136e3874c732a9700161393fc343a9ae943348
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (758 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9t9perfume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9t9perfume.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antinhogreentravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antinhogreentravel.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damaihaiduong.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donghonhapkhau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'donghonhapkhau.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoathuyetduongnaonibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoathuyetduongnaonibifa.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghiennhadep.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghiennhadep.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoirgardenbhsgroup.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9t9perfume.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.9t9perfume.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antinhogreentravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antinhogreentravel.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damaihaiduong.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donghonhapkhau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.donghonhapkhau.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoathuyetduongnaonibifa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoathuyetduongnaonibifa.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nghiennhadep.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nghiennhadep.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theoirgardenbhsgroup.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d4ad71a34000004030046304402204c3b7f7137760b14ce9903b93bb08e7e0b847ff8dca2d6a933dadbb45cde6c810220587c78dfd343fe3d932b08bcf46c5b4ded35c0afa1f904ba9392b8acbe2784b7007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d4ad71b010000040300463044022050fdd7cca3483ad92a07ca4ee1185c451aef9c640e988dcb2c009792fa904cd902207429f3ad527024721a8b5e016bc4e8fa28c0b2c39cd90f127559b517d918f2ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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