*.ghn.vn

Issued by Certum Domain Validation CA SHA2

About this certificate

This digital certificate with serial number 0a:35:ad:56:26:9e:b8:f5:97:2a:e5:7f:2f:40:09:24 was issued on by Unizeto Technologies S.A..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ghn.vn,C=VN,1.2.840.113549.1.9.1=#0c12626c756562697440626c75656269742e766e

Unizeto Technologies S.A.

Organization: Unizeto Technologies S.A.
Organization unit: Certum Certification Authority
Country: PL

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:35:ad:56:26:9e:b8:f5:97:2a:e5:7f:2f:40:09:24
Serial Number (int): 13570987373787226657554703905374341412
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f3:5d:ba:bd:80:9d:31:15:78:4d:32:6f:7a:2e:e0:6f:22:af:2d:7f
AuthorityKeyId: e5:31:ad:bf:3a:11:96:f4:83:bc:50:3c:d4:b7:90:9b:90:ee:de:25

Fingerprint (sha1): a7:b1:c1:19:c8:92:ac:a0:14:82:5a:57:2f:b2:5a:98:45:5d:5e:6a
Fingerprint (sha256): a5:92:de:ff:56:1a:c4:7b:c0:c0:e2:c8:bf:69:6c:00:94:66:e8:56:99:06:8a:57:99:10:63:18:5b:4a:a6:e0

Issuing Certificate URL: http://repository.certum.pl/dvcasha2.cer

Revocation information

OCSP Server: http://dvcasha2.ocsp-certum.com
CRL Distribution Point: http://crl.certum.pl/dvcasha2.crl

Check the revocation status for certificate *.ghn.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ghn.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

11 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ghn.vn
ghn.vn

Other certificates including the domain name ghn.vn

(limited to 100 certificates)
ghn.vn
ghn.vn
phukien.ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
ghn.vn
smartlog.ghn.vn
giaohangnhanh.vn
*.ghn.vn
*.ghn.vn
*.ghn.vn
*.ghn.vn
ontime.ghn.vn
www.ghn.vn
ghn.vn
smartlog.ghn.vn
webadmin.ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
ghn.vn
ghn.vn
smartlog.ghn.vn
ghn.vn
*.ghn.vn
*.ghn.vn
smartlog.ghn.vn
ghn.vn
phucloi.ghn.vn
*.ghn.vn
smartlog.ghn.vn
ghn.vn
tgh.ghn.vn
ghn.vn
ghn.vn
tgh.ghn.vn
tgh.ghn.vn
ghn.vn

Certificate

The complete raw certificate details for *.ghn.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGiDCCBXCgAwIBAgIQCjWtViaeuPWXKuV/L0AJJDANBgkqhkiG9w0BAQsFADCB
hTELMAkGA1UEBhMCUEwxIjAgBgNVBAoTGVVuaXpldG8gVGVjaG5vbG9naWVzIFMu
QS4xJzAlBgNVBAsTHkNlcnR1bSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEpMCcG
A1UEAxMgQ2VydHVtIERvbWFpbiBWYWxpZGF0aW9uIENBIFNIQTIwHhcNMTkwODI4
MDQzOTI4WhcNMjEwODI3MDQzOTI4WjBDMREwDwYDVQQDDAgqLmdobi52bjELMAkG
A1UEBhMCVk4xITAfBgkqhkiG9w0BCQEWEmJsdWViaXRAYmx1ZWJpdC52bjCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALtfWpZys5BAK9bFWyTzmCohLXdI
8S/kNTIQPo7MqsdcrLRcijqHhFx3vcIaMXhSpNt9FRHSRWLCdk35EEDWsWRFnf5n
EP2GGFaush41P5+BMOGo2i+tp6+hDJyTIJqs+m6K8KYa5vaBo70wWLlq0RSrtQKl
O16H96udBl+89uzS0Bu9F0i6RMiJ3Z9QwL4qCE3uXNP3T4dTPpAXHY9pGHJV/1vE
2TH6yjDMXhe3fMA9jBS7ZkTEAJpxrfiVWeqgHHOJzkET85skSQpPSR7lNZTlYKur
75or5dv0ZRorp6ukoB8NfXFN9aypyMPDX6kUwAP1mtvDJyI/4vy23iWQTskCAwEA
AaOCAzMwggMvMAwGA1UdEwEB/wQCMAAwMgYDVR0fBCswKTAnoCWgI4YhaHR0cDov
L2NybC5jZXJ0dW0ucGwvZHZjYXNoYTIuY3JsMHEGCCsGAQUFBwEBBGUwYzArBggr
BgEFBQcwAYYfaHR0cDovL2R2Y2FzaGEyLm9jc3AtY2VydHVtLmNvbTA0BggrBgEF
BQcwAoYoaHR0cDovL3JlcG9zaXRvcnkuY2VydHVtLnBsL2R2Y2FzaGEyLmNlcjAf
BgNVHSMEGDAWgBTlMa2/OhGW9IO8UDzUt5CbkO7eJTAdBgNVHQ4EFgQU8126vYCd
MRV4TTJvei7gbyKvLX8wHQYDVR0SBBYwFIESZHZjYXNoYTJAY2VydHVtLnBsMEsG
A1UdIAREMEIwCAYGZ4EMAQIBMDYGCyqEaAGG9ncCBQEDMCcwJQYIKwYBBQUHAgEW
GWh0dHBzOi8vd3d3LmNlcnR1bS5wbC9DUFMwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAbBgNVHREEFDASgggqLmdobi52boIG
Z2huLnZuMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuS723dc5guuFCaR+r
4Z5mow9+X7By2IMAxHuJeqj9ywAAAWzWgO+fAAAEAwBHMEUCIQDdkofpHbQNbJ96
eNaQyF8m1i477I2BAumHmH2V5MzCzgIgS6Cxr5pWfQL0dCA30Av6cOieGJULi8oG
vnuCZRT1EZIAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWzW
gOzDAAAEAwBHMEUCIFfoIG2aGUoIn2/msLZi2/wuqcwwBJ1ZyAhVpiLKzWSPAiEA
mWuHcf+dc50D8MemzYylt8x5YDRWlzv3u0ltKyugEAIAdgBVgdTCFpA2AUrqC5tX
PFPwwOQ4eHAlCBcvo6odBxPTDAAAAWzWgO3dAAAEAwBHMEUCIGtl8TEyYyZB7Wvf
bgmER0RUwdKNo4ZERXDwZ7yb8QL8AiEAxEPyWjU/3IunyK10FYf+JzOsmMrCs/y2
NEHh8OjP3WgwDQYJKoZIhvcNAQELBQADggEBAHVrIQ5k9BYSupzNn7xGy5zl7c9D
mrWqVTl9a4/egQTt2gVYQelOMHOZ/Dh5vERusmtByC+iolrsT7KEPEKyzYwpfgan
WaoBV9+Sbk6VlMsLiZi6IGrRL7eeQhIApQ6VR1s3gyh9J6xgFoeEz+Twnp1ZXqAO
grtdUppyPvrYJfgjp95g6iMFG2Mp2MiPBvwMmC36RxhwH4x0Dn/8xVrkeseE7EsS
cOHBTi+RV0VleO7S7uVHdQPTbAp4Ruy4llpwm9hfeYTgUDQXkfC7Lfd+nJ8nrWTD
ec8be341Jh/GFuCjKAlW71x4Eqs3Cz6Hbe34lcmXtQr2ChjRCwWHX5NPvic=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19alnKzkEAr1sVbJPOY
KiEtd0jxL+Q1MhA+jsyqx1ystFyKOoeEXHe9whoxeFKk230VEdJFYsJ2TfkQQNax
ZEWd/mcQ/YYYVq6yHjU/n4Ew4ajaL62nr6EMnJMgmqz6borwphrm9oGjvTBYuWrR
FKu1AqU7Xof3q50GX7z27NLQG70XSLpEyIndn1DAvioITe5c0/dPh1M+kBcdj2kY
clX/W8TZMfrKMMxeF7d8wD2MFLtmRMQAmnGt+JVZ6qAcc4nOQRPzmyRJCk9JHuU1
lOVgq6vvmivl2/RlGiunq6SgHw19cU31rKnIw8NfqRTAA/Wa28MnIj/i/LbeJZBO
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13570987373787226657554703905374341412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unizeto Technologies S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Certification Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Certum Domain Validation CA SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 04:39:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-27 04:39:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ghn.vn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23653583768596217835888734486992210296963185519930653961510815846683499952542666707484157212698533519378917258430435077348495534035657079484712628685217207991952089882360894290203016547476793725191010582674679189766959049757445987167810125407599964611419329600413420121666127979497023465618242650303489431289028055507000238043214124105696786525520086966495260007243445047519857688306918869015242505060905494870527981362834612507406170676327318998391174107686608550174707242608601424540506514904518225181727734454683755231634171395254194756842286173710107550723098882429772853963266637888137905331546477273421687312073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certum.pl/dvcasha2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://dvcasha2.ocsp-certum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://repository.certum.pl/dvcasha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e531adbf3a1196f483bc503cd4b7909b90eede25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f35dbabd809d3115784d326f7a2ee06f22af2d7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.18 (issuerAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.616.1.113527.2.5.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certum.pl/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ghn.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghn.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016cd680ef9f0000040300473045022100dd9287e91db40d6c9f7a78d690c85f26d62e3bec8d8102e987987d95e4ccc2ce02204ba0b1af9a567d02f4742037d00bfa70e89e18950b8bca06be7b826514f51192007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016cd680ecc30000040300473045022057e8206d9a194a089f6fe6b0b662dbfc2ea9cc30049d59c80855a622cacd648f022100996b8771ff9d739d03f0c7a6cd8ca5b7cc79603456973bf7bb496d2b2ba010020076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016cd680eddd000004030047304502206b65f13132632641ed6bdf6e0984474454c1d28da386444570f067bc9bf102fc022100c443f25a353fdc8ba7c8ad741587fe2733ac98cac2b3fcb63441e1f0e8cfdd68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00756b210e64f41612ba9ccd9fbc46cb9ce5edcf439ab5aa55397d6b8fde8104edda055841e94e307399fc3879bc446eb26b41c82fa2a25aec4fb2843c42b2cd8c297e06a759aa0157df926e4e9594cb0b8998ba206ad12fb79e421200a50e95475b3783287d27ac60168784cfe4f09e9d595ea00e82bb5d529a723efad825f823a7de60ea23051b6329d8c88f06fc0c982dfa4718701f8c740e7ffcc55ae47ac784ec4b1270e1c14e2f9157456578eed2eee5477503d36c0a7846ecb8965a709bd85f7984e050341791f0bb2df77e9c9f27ad64c379cf1b7b7e35261fc616e0a3280956ef5c7812ab370b3e876dedf895c997b50af60a18d10b05875f934fbe27