ptexpress.com.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:70:60:59:79:2c:f2:b1:ed:41:16:b1:17:69:b0:5d:85 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ptexpress.com.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:70:60:59:79:2c:f2:b1:ed:41:16:b1:17:69:b0:5d:85
Serial Number (int): 283604585455903043116149187756642710609285
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:f6:ac:fd:10:55:5d:48:f0:28:cb:5d:a8:65:00:18:d2:58:3d:16
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:55:8c:87:2a:0e:c6:af:a8:a1:fb:5d:d4:1a:fb:11:52:bc:c5:f8
Fingerprint (sha256): a6:54:35:12:01:e7:19:53:ef:5b:05:eb:0f:af:7b:af:8b:ef:f4:a7:99:e4:1b:51:1e:97:d5:b1:04:83:1d:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ptexpress.com.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ptexpress.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ptexpress.com.vn
www.ptexpress.com.vn

Other certificates including the domain name ptexpress.com.vn

(limited to 100 certificates)
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
new.ptexpress.com.vn
new.ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
www.ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
ptexpress.com.vn
sni155063.cloudflaressl.com
ptexpress.com.vn
ptexpress.com.vn
ptexpress.com.vn
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
sni155063.cloudflaressl.com
ptexpress.com.vn
sni155063.cloudflaressl.com
ptexpress.com.vn

Certificate

The complete raw certificate details for ptexpress.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI31ghgb+QpUGCoWPKQY
gGugHuBtFtyXEM+KGqRgkOw5L4m9GwST8qNNkN6YSEEE8Cm5bQVNVqxdJBDYVvOc
Md6N70DjgjiDPesvnmCQ+y4pwFngcmLI0vLzwTm+RnrzOGIkwGlgNrbIBkwi5E1I
3CiaWS2V80Elt7QtkubKC9F+cV7USTxap/ZvnR4PF5a0UMytoA+4ufBVfqc3yCak
LiWh4XFzGDESbM7glS2dO/Ub/fS2D8A2AZKrE7+WRlSmY0vLRAiP01NqTn/D57ps
5+CCi7Ovu/cpomQ6xIWDBajZxRHJ7goRgMqgLSje+3zLQtjef9+YbzPrdywx/O38
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283604585455903043116149187756642710609285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-08 16:19:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-06 16:19:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ptexpress.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20773084614418372098291902977387276833585148358553227418298187579821768586746492764061840066092032844829081073528882421835681474261229218629594761963865728120048035498241936308676259632489726273637415150108384327375332458570080617324094544569393560146603815508074961891073617160016182027876090152274991805007780383408721593740925870942804981594352724147923133395753499453710895991298734892713927927263902963764779787906041886253684002936064602663625603030707836188138846590206093607582962825236945169087618772312198354493599753451123336923971961674629869955604510874347426482902678878170779697730325714025418758945811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81f6acfd10555d48f028cb5da8650018d2583d16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptexpress.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ptexpress.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163e069162f00000403004730450220505e9ea2bf9ef1ace47ec44e173dfd6159a66a6e3b3a42e8a1c58a8fc7343f11022100e4124bc60cc00288865583c6600444aa9f46426a2ac4e84a3f7c142e5b0d38fa007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163e069163e00000403004630440220490c77538a23e2dc2249a432d9608a2861c93ddb88771fc13233657d14110d2c022025b697fb98be648222062d68427272df31abb6980cb8c95734c3f47e87d4a1e2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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