www.thietbidienbacninh.duy1.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:8b:28:43:51:86:30:be:bd:b1:8c:9d:da:c8:ae:c0:03:a8 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.thietbidienbacninh.duy1.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:28:43:51:86:30:be:bd:b1:8c:9d:da:c8:ae:c0:03:a8
Serial Number (int): 308689625454518942374524381145084916138920
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:4a:74:34:9d:85:6a:ee:4c:9a:6c:a5:84:88:1a:56:25:e8:04:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 66:72:0f:70:9a:6c:f2:b0:41:3b:ab:a6:78:34:ea:e4:1b:77:10:a5
Fingerprint (sha256): 9d:14:87:92:02:47:47:8a:31:33:1e:e1:2c:e0:a6:b4:30:03:d4:14:81:de:ee:ad:c8:21:62:47:fb:a3:84:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.thietbidienbacninh.duy1.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.thietbidienbacninh.duy1.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

catechvn.duy1.name.vn
catechvn.vn
kinhbac24h.duy1.name.vn
koreahouse.duy1.name.vn
nhaphobacninh.duy1.name.vn
parami.duy1.name.vn
pems.duy1.name.vn
redsunvietnam.duy1.name.vn
tethethang.duy1.name.vn
thannuongpicom.duy1.name.vn
thietbidienbacninh.com
thietbidienbacninh.duy1.name.vn
www.catechvn.duy1.name.vn
www.catechvn.vn
www.kinhbac24h.duy1.name.vn
www.koreahouse.duy1.name.vn
www.nhaphobacninh.duy1.name.vn
www.parami.duy1.name.vn
www.pems.duy1.name.vn
www.redsunvietnam.duy1.name.vn
www.tethethang.duy1.name.vn
www.thannuongpicom.duy1.name.vn
www.thietbidienbacninh.com
www.thietbidienbacninh.duy1.name.vn

Other certificates including the domain name duy1.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.thietbidienbacninh.duy1.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTaTboY7YdvJtLVXzZgY
4xDz/GAywpOdaXXm5n4tsmTC1E0KII+WTPu+6MFRbfNbItubdwfFhfVz4+4HFx7e
qQbWqtIF+0ODa1datc0xQ/isMxM9nYumtwY6Ow2raHkTwCT4C7E59FzeZ3F2tMTC
Ku4jc9jpWdtqaKsRNx3MM3Fj3vuhGq9P9Rrv3mN8sTcU0tnwyax4HnAU49JftKFJ
aRtO7F2fUOXznXzeyiiQIwUjVbAfmk58NfjqCNjGXUYwfZW+MmS/V79UxGrx1emU
W3FaNzDmtAFzqpon8bNhoGLqXeQly5Dgahaj+J9z0lIoxA2uVRazWSyhbVdCSc3w
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308689625454518942374524381145084916138920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 17:20:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 17:20:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thietbidienbacninh.duy1.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21361185921164937692341792661557438696397498650086364121801255475495215920043151756666854877009520497661782794164810852715938899681358239207973339433555377238556754308715149643066918376489723033839166660264801768167780387371851102574693751271920801152522987280128331552424921400581715601864270724920220313704422920450694096288302466749440725083653337335532177455229473160500506330433089939376206379553562441785379207359433477171576923916330763870177977210990731894283341336842379783580349735093091203056116821578418066961798110458286663919023778307600913555110411336201507035554525032774857852802173631914521358364759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a34a74349d856aee4c9a6ca584881a5625e804ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (638 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catechvn.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catechvn.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kinhbac24h.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'koreahouse.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhaphobacninh.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parami.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pems.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redsunvietnam.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tethethang.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thannuongpicom.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thietbidienbacninh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thietbidienbacninh.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catechvn.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catechvn.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kinhbac24h.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koreahouse.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhaphobacninh.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parami.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pems.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redsunvietnam.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tethethang.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thannuongpicom.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thietbidienbacninh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thietbidienbacninh.duy1.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aaeabe449000004030046304402204c69e535e92610004358a25c114ba00b4a144a038c7844a983c1016bbaf94f3e02204cb90320c80e17146757747329e9db87e5ba233531e5c9df6defa0f138b779a3007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aaeabe46b0000040300463044022039f3ffea8f72f2a7abbf44426c139091c0ce21604006e7823479501beea707b30220381ca07f2d316b716eaffa51a4ac0266459584034ed49ec50b34e9d74db32d17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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