www.lagianglogistics.com

Issued by R3

About this certificate

This digital certificate with serial number 04:9d:e9:83:11:67:58:fd:0f:95:76:b0:2f:65:e9:7b:9a:e1 was issued on by Let's Encrypt.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.lagianglogistics.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9d:e9:83:11:67:58:fd:0f:95:76:b0:2f:65:e9:7b:9a:e1
Serial Number (int): 402183866000523683424788215261284519353057
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: dc:8d:be:a0:8d:13:1a:9c:2e:03:b4:65:7a:43:b7:8e:e8:f0:d6:09
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:d0:7e:17:3e:b1:c2:c0:5a:a5:7e:fa:a4:a0:52:ee:49:ac:63:6f
Fingerprint (sha256): a9:d0:41:fb:db:e1:66:d8:07:15:5e:35:ae:5e:92:4c:56:97:44:e9:0f:de:e4:4b:5d:d4:a8:2e:c7:66:30:57

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.lagianglogistics.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lagianglogistics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.sitaco.com.vn
cpcalendars.sitaco.com.vn
cpcontacts.sitaco.com.vn
lagianglogistics.com
lagianglogistics.com.duy5.name.vn
ojidesign-vn.com
ojidesign-vn.com.duy5.name.vn
sirohonibifa.com.vn
sirohonibifa.com.vn.duy5.name.vn
sitaco.com.vn
sitaco.com.vn.duy5.name.vn
webdisk.sitaco.com.vn
webmail.sitaco.com.vn
www.lagianglogistics.com
www.lagianglogistics.com.duy5.name.vn
www.ojidesign-vn.com
www.ojidesign-vn.com.duy5.name.vn
www.sirohonibifa.com.vn.duy5.name.vn
www.sitaco.com.vn
www.sitaco.com.vn.duy5.name.vn
www.xaydungcic.vn.duy5.name.vn
xaydungcic.vn
xaydungcic.vn.duy5.name.vn

Other certificates including the domain name lagianglogistics.com

(limited to 100 certificates)
bidvuudaitrondoi.duy8.name.vn
thienlongcnc.com.duy5.name.vn
www.lagianglogistics.com
www.ojidesign-vn.com.duy5.name.vn
quangminh.duy8.name.vn

Certificate

The complete raw certificate details for www.lagianglogistics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTpvjn2sPQo/8+jaKHQO
8aaXdSgULKj6RkBDqo7lthC3Rk7Bgmn8sDcNqhf/hf5M6AGZnMhOpfZn7eQO53tf
ePFTLMiCNUqpdF+K6/UxXU364w0RCz+BXQZwUTLah4ahWT6dkFnHUFm1f40Y4RDE
RxdXYSCdIdqW5GvSaNDhORyouzDT5R6TQdCt8wNqACZN1t0Y0uoqhXLyPr2ec4WI
/7ZEzgARvtHQUiGwRZC9bvRUUDbfUHcZItx9YGO/ubXgziq5NjCTb0vExkJuwA+U
CKZR9yk5vDQ0LkhWeUHitI5B+vESWYZISlzURrlp4o5ts3zDTNj5y1NK4JtAnqku
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 402183866000523683424788215261284519353057
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 13:22:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-26 13:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lagianglogistics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21868042510301138238103090034132245581268277961106033656661711181098659098657086059168760963165292586460079518880097341247895946258400059933932658730116892140603703932681479398752463689225175709859462096999227179117119675467800593335188461550480370438157624288092180461754031024574268424147029835023035268402394153465063348962208489284393260104063459158381439608393776411485516880766118826039558529412042122031818758171169085169031713018284535980867330970736051297299719625960755795901491088541886519075084642499255842202634926027676246900406969303937623540492394009920188602985550583872360983106034588626619726376589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc8dbea08d131a9c2e03b4657a43b78ee8f0d609
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (615 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.sitaco.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.sitaco.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.sitaco.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagianglogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lagianglogistics.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojidesign-vn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojidesign-vn.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirohonibifa.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sirohonibifa.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitaco.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitaco.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.sitaco.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sitaco.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagianglogistics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lagianglogistics.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojidesign-vn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojidesign-vn.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sirohonibifa.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitaco.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sitaco.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xaydungcic.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xaydungcic.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xaydungcic.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fbf94e02c00000403004630440220255ab47639e131ea92dad997e381bbc8c22046a0ca139d808a0b13cb22247f8602203293a88880d15d5a8023b65dcfd8a5799b2bcbf91311e4048defa18e7a2081ed0076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fbf94e02a0000040300473045022006efeeb734f346acab96217d30d1cf2b0ef4f41265672cc5726a3e729e21f8dc0221009f1e44cc6534c4cca18eff13437b32bfa6c4d632f736929f5bca7c797afa03f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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