mobio.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:9b:08:bf:c2:73:79:72:df:9e:0e:e8:46:0b:1f:36:1d:82 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mobio.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9b:08:bf:c2:73:79:72:df:9e:0e:e8:46:0b:1f:36:1d:82
Serial Number (int): 314092254164628749613054707759970803654018
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 29:d5:3a:ae:78:0e:e3:7b:01:61:34:b6:67:b9:79:42:07:5e:46:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:6e:e0:40:1c:f4:2b:2c:a7:59:fe:c6:49:1e:7d:1e:e0:8c:36:c8
Fingerprint (sha256): a2:0a:0c:d0:7c:ad:e8:72:a8:eb:af:d3:f1:9d:af:93:52:1e:56:67:24:c2:58:50:6b:35:b5:0c:df:c9:d7:69

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mobio.vn

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mobio.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

confluence.mobio.vn
help.mobio.io
help.mobio.vn
mobio.io
mobio.vn
rancher.mobio.vn
www.mobio.io
www.mobio.vn

Other certificates including the domain name mobio.vn

(limited to 100 certificates)
ck.hpt.vn
gitbucket.mobio.vn
loind.mobio.vn
admin-test1.mobio.vn
doitac.mobio.vn
doitac.mobio.vn
ck.mobio.io
dev.mobio.vn
vpbank.mobio.vn
partner.mobio.vn
sungroup.mobio.vn
ck.hpt.vn
ck.hpt.vn
admin-doitac.mobio.vn
ck.mobio.io
sungroup.mobio.vn
api-sunworld.mobio.vn
ck.hpt.vn
ck.hpt.vn
crm-api.mobio.vn
ck.hpt.vn
admin-cv.mobio.vn
admin-sunworld.mobio.vn
gitbucket.mobio.vn
ck.hpt.vn
cem.dev.mobio.vn
mobio.vn
mobio.vn
gitbucket.mobio.vn
ck.hpt.vn
api.mobio.vn
vpbank.mobio.vn
admin-dev1.mobio.vn
bibomart.tnk.mobio.vn
admin-cv.mobio.vn
api.bank.mobio.vn
admin-vpbank.mobio.vn
admin-sunworld.dev.mobio.vn
sunworld.mobio.vn
mobio.vn
admin-test1.mobio.vn
mobio.vn
gitbucket.mobio.vn
partner.mobio.vn
mobio.vn
dev.mobio.vn
ck.hpt.vn
mobio.vn
partner.mobio.vn
doitac.mobio.vn
admin-sunworld.dev.mobio.vn
ck.hpt.vn
doitac.mobio.vn
mobio.vn
api-p.dev.mobio.vn
ck.hpt.vn
admin-cv.mobio.vn
crm.dev.mobio.vn
cem2.dev.mobio.vn
loind.mobio.vn
mobio.vn
cem.dev.mobio.vn
app.mobio.vn
ck.hpt.vn
ck.hpt.vn
admin-test1.mobio.vn
ck.hpt.vn
dev.mobio.vn
admin-vpbank.dev.mobio.vn
gitbucket.mobio.vn
doitac.mobio.vn
vpbank.dev.mobio.vn
cem2.dev.mobio.vn
dev.mobio.vn
api-vpbank.dev.mobio.vn
ck.hpt.vn
api-sunworld.mobio.vn
admin-sunworld.mobio.vn
mobio.vn
admin-sunworld.mobio.vn
ck.hpt.vn
admin-sunworld.mobio.vn
partner.mobio.vn
api.mobio.vn
admin-cv.mobio.vn
ck.hpt.vn
admin-sunworld.mobio.vn
crm.dev.mobio.vn
api.mobio.vn
doitac.mobio.vn
api.mobio.vn
admin-doitac.mobio.vn
crm.dev.mobio.vn
admin-doitac.mobio.vn
api.bank.mobio.vn
admin-sunworld.dev.mobio.vn
doitac.mobio.vn
api-sunworld.mobio.vn
ck.hpt.vn
ck.hpt.vn

Certificate

The complete raw certificate details for mobio.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hn7ESAPFL90hnT42z26
oBbxu7+8CZ7vnf29p0B/gGNXlB24OuDoKak1W5HX1z+gh7ZZ7U6kJhQuBLy6lzJM
tQmkfRN9Ey92JILGOy/X6lwIJpjjmwm0ez6ZNsveqN1H1GYZATmNS4T8/Zk1X29D
5O0fnf+7UoanWg098zFhr+28Pp0Mg3xSSXWsRWia3E2NKrxpxlZI0pgTbvuIQ41R
Zz0T/JV3cVBV2ROOR2vGTbjE7nJqpGvuB36zbgcXdRljpMUmeIO1vFBHqEEgiiEK
9AfCdCSWSoYdVkpY/jEoae1WSWU3sFjVowXYqeyvwtqQXcdwlHVEepPkCgzYisFH
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314092254164628749613054707759970803654018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-09 09:17:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-09 09:17:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mobio.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27027808838223223755225379557814219908050619104817572367519202390149500509095291613209888721417385201266517024084433287932894654374486316773693013430775574441302636949947346539777381913413418217462745581460754064280829753413089194865961326839987094921815759594209216424744423549061628580133940897712565600899825102801962809642041189607302554319730134626706394981423259059624504727052736253366770091885598863572723166388399963148511219311384003504734472313955304874091199219135757440301866544467005314274158423992066539603190229533956435273588097206244396855599983787902990953944308160038651744715961510346057326872457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29d53aae780ee37b016134b667b97942075e46e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confluence.mobio.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.mobio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.mobio.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobio.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rancher.mobio.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobio.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mobio.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d8d5f17210000040300483046022100d869da8c12943a32f8c6eb22a7675fd833b1d1139b8018ae91f8729ed5a2a8b70221008213835a93aa65d9f281ddfa00a06cd786b44cc5545e7d17ed26be5c0c2126c10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d8d5f18ac0000040300473045022100939cc1366064be794d222b179c69ea4f93cb276bf0acdb18fe59e956ecd56b2502202abf001f103c371bc99fc0cb214a7be5067898ed2a53f0cccf775a30f48613e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a8e0a7528c448b576bfc4a492229a92bbfefced0c5584ecbc6a2e12152c8b9c3c65762cbafc2ba42abba605e42cce7a36686236d3841642301122537394ef5635cedb76622cd04b114f7269cf510dcc9038e684f5d67c8b10f5e838bb875e9327e3fde78fcaf3cef7f1d2e16c1628b2a8c16df466eb1386731f404ed8afc387406b693270adbc7ded3e3d1a947c87e68687bc65dd22d267c56b1f974a45bb84bbf60813bd7f42e236c8bfd4c3b1c014c9d037fb0b5e647c0103f565358292b3b4bea08d36b34b4bbdbe9bfe0a1216dea1f8fbdb2bf5ce8a4815263a65fe9af0fc5f19f1eb27153edb78620d0fc79f12c1bf90fbea4eaea19f7c84c336536debc