cpcalendars.damaihaiduong.com.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:94:68:b0:ab:ec:b0:8d:3c:df:11:2e:57:0e:b9:37:f4:91 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cpcalendars.damaihaiduong.com.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:68:b0:ab:ec:b0:8d:3c:df:11:2e:57:0e:b9:37:f4:91
Serial Number (int): 311837805142432894598423757194272582399121
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:c7:20:4f:01:43:93:9f:b5:3e:0d:64:6b:73:4b:5d:24:cd:93:eb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 81:ed:b9:9e:ab:78:f1:a1:4b:cc:ff:db:7e:7b:6d:e2:63:05:9a:d6
Fingerprint (sha256): a1:31:f1:ec:99:e9:87:27:46:f6:62:04:22:93:4b:03:a2:5f:0e:9a:0d:05:24:78:66:07:6d:51:07:82:69:a2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cpcalendars.damaihaiduong.com.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpcalendars.damaihaiduong.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.seduacademy.edu.vn
cpanel.damaihaiduong.com.vn
cpcalendars.damaihaiduong.com.vn
cpcontacts.damaihaiduong.com.vn
damaihaiduong.com.vn
damaihaiduong.duy6.name.vn
duy6.name.vn
eccenter.duy6.name.vn
eccenter.edu.vn
ecogreen.duy6.name.vn
eduwinschool.duy6.name.vn
eduwinschool.edu.vn
hi-halong-citadines-is-here.duy6.name.vn
mail.damaihaiduong.com.vn
seduacademy.duy6.name.vn
seduacademy.edu.vn
tryan.com.vn
tryan2.duy6.name.vn
webdisk.damaihaiduong.com.vn
webmail.damaihaiduong.com.vn
www.damaihaiduong.com.vn
www.eccenter.edu.vn
www.eduwinschool.edu.vn
www.tryan.com.vn

Other certificates including the domain name damaihaiduong.com.vn

(limited to 100 certificates)
www.ecogreen.duy6.name.vn
blog.damaihaiduong.com.vn
cpcalendars.damaihaiduong.com.vn
xaydungcic.vn.duy5.name.vn
bidvquavangnhuy.duy5.name.vn
*.damaihaiduong.com.vn

Certificate

The complete raw certificate details for cpcalendars.damaihaiduong.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7dbjRXFmzI2QH6rmxdYt
IsrG6TJB1k6CtXy+yp/KbpYPQb670dwmf6HuVRsIjGks4pQoZLb6IfIu1KY29ds+
vjApW+u5jngL0A2J6W87ou4ltpIj7g/XkR8g7qbS7cUJBbcCN5ZcUKV7NhvTgzDB
tWw1nFVnfHitsD104jZyh4oRwQQDXgGJdsscl5RLGTgGMUy2fKUwGZz3Xd9R+qyF
QQZARp4AM7HFGMgu54a15mAQSJPRe6u+BvgBzQHXFbI/G5jamPKoVz7GsjUj/1fx
eFzqM03Ogud/hpOEmQ17hbdKV07riuHFAR9rNNFJmjPAtxouR+DxC5rb2/WjTmmj
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311837805142432894598423757194272582399121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 21:12:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 21:12:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpcalendars.damaihaiduong.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30024443389841864861210027156884242644810319810346577567175753565756900877943307631396835884680349043212288651647928386441644689105551202114632698178287538927623906207575332175983208643789459385002805559543930867587902636920137500462395698110199671014436868171188748264104075078871881065829840903103907138131905827146003988721793193891546971528190195703218558150204178255330789776068683743538106450753468795537190110645011790188369332494727659243818403093598528885306106022859460918128254256424245839127172130861061931322095600224471121696826436534835202189918956530556458182996458698535798199724508678927017331762007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							36c7204f0143939fb53e0d646b734b5d24cd93eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (597 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seduacademy.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.damaihaiduong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.damaihaiduong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.damaihaiduong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damaihaiduong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damaihaiduong.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eccenter.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eccenter.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecogreen.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduwinschool.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eduwinschool.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hi-halong-citadines-is-here.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.damaihaiduong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seduacademy.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seduacademy.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryan.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tryan2.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.damaihaiduong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.damaihaiduong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damaihaiduong.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eccenter.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eduwinschool.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tryan.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b2b1966f90000040300473045022100a9ecd998f3233ad35bff373fb53c3d52d51459eb86cfca2df3d0b9448cea9de502202eee9d0caaaccd93dacaa3d18b9e346fe50673a7d905fbac1975041fb99a8ec500750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b2b19675600000403004630440220798e7ff82d891e04424acddcf43edd4a82f23024aca1272240a475fc75a62faf022068a6d522dfc152e7cff8b5badd03ace3daaf9f73ecc4b7718ac1f910eecb4638
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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