www.nordvn.duy5.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:e6:9b:08:10:ed:5d:d2:57:18:48:da:13:b2:b7:59:41:ee was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.nordvn.duy5.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:9b:08:10:ed:5d:d2:57:18:48:da:13:b2:b7:59:41:ee
Serial Number (int): 339807874408142781341305710908964909695470
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 72:98:61:cd:5e:ff:bc:57:10:22:15:ee:78:4b:8e:98:ca:23:ec:ba
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:9c:d1:34:12:74:2f:1e:59:78:6e:67:5d:f7:f5:34:53:72:1a:65
Fingerprint (sha256): a9:ca:ac:1e:e1:b1:82:3b:8f:f3:fa:9e:ee:31:f8:fb:eb:60:d2:ea:8e:63:d4:6c:da:5a:03:46:7f:b8:b8:76

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.nordvn.duy5.name.vn

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nordvn.duy5.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chaobanmoi.duy5.name.vn
damaihd.com.vn.duy5.name.vn
giaoduckhaisang.edu.vn
giaoduckhaisang.edu.vn.duy5.name.vn
hoathuyetduongnaonibifa.com.vn
hoathuyetduongnaonibifa.com.vn.duy5.name.vn
nordvn.duy5.name.vn
spaceenglishcenter.edu.vn
spaceenglishcenter.edu.vn.duy5.name.vn
trihemofa.vn
trihemofa.vn.duy5.name.vn
vinhomesmienbac.duy5.name.vn
www.chaobanmoi.duy5.name.vn
www.damaihd.com.vn.duy5.name.vn
www.giaoduckhaisang.edu.vn
www.giaoduckhaisang.edu.vn.duy5.name.vn
www.hoathuyetduongnaonibifa.com.vn.duy5.name.vn
www.nordvn.duy5.name.vn
www.spaceenglishcenter.edu.vn
www.spaceenglishcenter.edu.vn.duy5.name.vn
www.trihemofa.vn
www.trihemofa.vn.duy5.name.vn
www.vinhomesmienbac.duy5.name.vn

Other certificates including the domain name duy5.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.nordvn.duy5.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHszCCBpugAwIBAgISA+abCBDtXdJXGEjaE7K3WUHuMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzExMjcxODE2NDBaFw0yNDAyMjUxODE2MzlaMCIxIDAeBgNVBAMT
F3d3dy5ub3Jkdm4uZHV5NS5uYW1lLnZuMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArw/kH/raJA/rYUWI3ak0kXJBBhxI57GcM7N6KdyQl2uevP42s+ou
biDKJCezQa7raYrzuxTDKBRRLA1QyXw3BM0uWb8ZivAcxtDZ+fBMS3nEcm87N6Iu
GMMrek0BT52ETOrAgts/98F0rLZFRoE1eH7pMkxKrlk2+n9l+AftJZtzXYGn/1A7
PbDkLY33+EvCcMkSwCoeIsRY6qXzz02MIKC2GgzIHN5Qoda02TxaD3AZe+YPq4Sb
s+XHaCxjTmt972veo4nxvfGHuWgWRqe6qIDANp/WUg9xk60+saLVtEb7B7N2lL/1
WPLaXmH+MmIpULFh3FaLeKSwlWFNFYKoeQIDAQABo4IE0TCCBM0wDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBRymGHNXv+8VxAiFe54S46YyiPsujAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCAtcGA1UdEQSCAs4wggLKghdjaGFvYmFubW9pLmR1eTUubmFt
ZS52boIbZGFtYWloZC5jb20udm4uZHV5NS5uYW1lLnZughZnaWFvZHVja2hhaXNh
bmcuZWR1LnZugiNnaWFvZHVja2hhaXNhbmcuZWR1LnZuLmR1eTUubmFtZS52boIe
aG9hdGh1eWV0ZHVvbmduYW9uaWJpZmEuY29tLnZugitob2F0aHV5ZXRkdW9uZ25h
b25pYmlmYS5jb20udm4uZHV5NS5uYW1lLnZughNub3Jkdm4uZHV5NS5uYW1lLnZu
ghlzcGFjZWVuZ2xpc2hjZW50ZXIuZWR1LnZugiZzcGFjZWVuZ2xpc2hjZW50ZXIu
ZWR1LnZuLmR1eTUubmFtZS52boIMdHJpaGVtb2ZhLnZughl0cmloZW1vZmEudm4u
ZHV5NS5uYW1lLnZughx2aW5ob21lc21pZW5iYWMuZHV5NS5uYW1lLnZught3d3cu
Y2hhb2Jhbm1vaS5kdXk1Lm5hbWUudm6CH3d3dy5kYW1haWhkLmNvbS52bi5kdXk1
Lm5hbWUudm6CGnd3dy5naWFvZHVja2hhaXNhbmcuZWR1LnZugid3d3cuZ2lhb2R1
Y2toYWlzYW5nLmVkdS52bi5kdXk1Lm5hbWUudm6CL3d3dy5ob2F0aHV5ZXRkdW9u
Z25hb25pYmlmYS5jb20udm4uZHV5NS5uYW1lLnZughd3d3cubm9yZHZuLmR1eTUu
bmFtZS52boIdd3d3LnNwYWNlZW5nbGlzaGNlbnRlci5lZHUudm6CKnd3dy5zcGFj
ZWVuZ2xpc2hjZW50ZXIuZWR1LnZuLmR1eTUubmFtZS52boIQd3d3LnRyaWhlbW9m
YS52boIdd3d3LnRyaWhlbW9mYS52bi5kdXk1Lm5hbWUudm6CIHd3dy52aW5ob21l
c21pZW5iYWMuZHV5NS5uYW1lLnZuMBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIBBQYK
KwYBBAHWeQIEAgSB9gSB8wDxAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGMEjZXGwAABAMARzBFAiEA3rTjK3USML0tSqbvb2MPSMByDwDRxVxe
fvLxIxywfdICIHAZ/BxaIFVlo0NmvwBEBwQOrwt1h7OSYLzb8+O6jW7IAHcA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGMEjZXHAAABAMASDBGAiEA
seR3rocnqqa55g18wS/Ikb/glVxbgXBvDTUbAvudv2wCIQCIydqxXtXvyxCg8AbU
+PXFGpULbilht+i9lVLVO9mG2TANBgkqhkiG9w0BAQsFAAOCAQEAAUBUC732n7HK
qS68kTDawhWOO1W02GBIvBtzE0vPMMSDPtDUiwFKymlCY35DSdsSx9RWEj0Vehdc
a7xIKwW6BfQoK4EhduV79Zlk+C/kN+QxCNdLJK6WXC9GZ2051hp1c0s30xxQ+lZy
YN/2f8YAe+cZmaFUHfNzfX+im2aobDlcu25zFr6/fGDdkTJWB5IAp5CsQtxLhh+p
b4QUeqrio3+BMI9PTQLaMYsAmS0FmDBsNqQ6rqaKCZdc/2+Or20h+kiPbp/aSX8D
2LLjZOK4b8NQRDXpNtP2hd29c1XOjP0h1ZVllPYX9IrWwkYtMJLILCAFgcKmp8OH
G+vEzNOzQg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw/kH/raJA/rYUWI3ak0
kXJBBhxI57GcM7N6KdyQl2uevP42s+oubiDKJCezQa7raYrzuxTDKBRRLA1QyXw3
BM0uWb8ZivAcxtDZ+fBMS3nEcm87N6IuGMMrek0BT52ETOrAgts/98F0rLZFRoE1
eH7pMkxKrlk2+n9l+AftJZtzXYGn/1A7PbDkLY33+EvCcMkSwCoeIsRY6qXzz02M
IKC2GgzIHN5Qoda02TxaD3AZe+YPq4Sbs+XHaCxjTmt972veo4nxvfGHuWgWRqe6
qIDANp/WUg9xk60+saLVtEb7B7N2lL/1WPLaXmH+MmIpULFh3FaLeKSwlWFNFYKo
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339807874408142781341305710908964909695470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 18:16:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 18:16:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nordvn.duy5.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22099539568927110124511660170401863963378903013463981354328916654059481598996043291897977204625000494346648475864004176732285682153246084502812167137058570250516326766076010500270908549590641590109307590924974229418856706549545409771802750753636115987264414387246770488834392866061517059018287934125256557673156548169605214600694036681883698243159227455019323461237372517733103086401262451355023326383882606799641854201074852573003772819372964516107594671524786041239610768253049700991572053079832257658006645959412363007189468111443962586470225604799720369681750051952835946255739682710525090843425570181459476654201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							729861cd5effbc57102215ee784b8e98ca23ecba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (718 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chaobanmoi.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'damaihd.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giaoduckhaisang.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giaoduckhaisang.edu.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoathuyetduongnaonibifa.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoathuyetduongnaonibifa.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordvn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceenglishcenter.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spaceenglishcenter.edu.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trihemofa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trihemofa.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomesmienbac.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chaobanmoi.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.damaihd.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giaoduckhaisang.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giaoduckhaisang.edu.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hoathuyetduongnaonibifa.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nordvn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spaceenglishcenter.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spaceenglishcenter.edu.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trihemofa.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trihemofa.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomesmienbac.duy5.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1236571b0000040300473045022100deb4e32b751230bd2d4aa6ef6f630f48c0720f00d1c55c5e7ef2f1231cb07dd202207019fc1c5a205565a34366bf004407040eaf0b7587b39260bcdbf3e3ba8d6ec8007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c1236571c0000040300483046022100b1e477ae8727aaa6b9e60d7cc12fc891bfe0955c5b81706f0d351b02fb9dbf6c02210088c9dab15ed5efcb10a0f006d4f8f5c51a950b6e2961b7e8bd9552d53bd986d9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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