vnpay.vntopup.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:3c:e0:d9:22:8b:5e:ba:9e:dd:4c:da:ef:b7:ae:51:29 was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vnpay.vntopup.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:3c:e0:d9:22:8b:5e:ba:9e:dd:4c:da:ef:b7:ae:51:29
Serial Number (int): 314842110560131259911964909082113196577065
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:17:88:f2:0e:24:3b:c3:6a:71:de:97:4c:04:df:2e:58:b0:21:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7b:12:e1:12:9a:e0:85:04:5d:a1:14:8f:63:e7:0d:b7:81:8a:27:47
Fingerprint (sha256): bc:57:08:a5:60:ef:23:bc:2f:81:63:2f:5e:6a:ed:e9:16:0f:5d:69:6d:d6:19:23:66:7a:ad:6a:51:00:2c:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate vnpay.vntopup.vn

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vnpay.vntopup.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abbank.vntopup.vn
agribank.vntopup.vn
bankweb.vntopup.vn
baovietbank.vntopup.vn
bidc.vntopup.vn
bidv.vntopup.vn
bidvsmartbanking.vn
dongabank.vntopup.vn
eximbank.vntopup.vn
ficombank.vntopup.vn
gpbank.vntopup.vn
hdbank.vntopup.vn
indovinabank.vntopup.vn
lienvietpostbank.vntopup.vn
maritime.vntopup.vn
mb.vntopup.vn
nagios.vnpay.vn
namabank.vntopup.vn
namamobilebanking.vn
navibank.vntopup.vn
ocb.vntopup.vn
oceanbank.vntopup.vn
pgbank.vntopup.vn
sacombank.vntopup.vn
scb.vntopup.vn
seabank.vntopup.vn
shb.vntopup.vn
simdanang.vn
techcombank.vntopup.vn
tienphongbank.vntopup.vn
vib.vntopup.vn
vid.vntopup.vn
vietabank.vntopup.vn
vietcombankmobilebanking.vn
vnpay.vntopup.vn
vnticket.vntopup.vn
vpbank.vntopup.vn
vsms.vn
www.bidvsmartbanking.vn
www.simdanang.vn
www.vietcombankmobilebanking.vn
www.vsms.vn

Other certificates including the domain name vntopup.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for vnpay.vntopup.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJRzCCCC+gAwIBAgISA5084Nkii166nt1M2u+3rlEpMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzAzMzEwOTEyMDBaFw0x
NzA2MjkwOTEyMDBaMBsxGTAXBgNVBAMTEHZucGF5LnZudG9wdXAudm4wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCupA3sT0n87kWgD9nK+Ay15YB5xZu+
3HYRW3YZMhS9/UsmkK5WtXIzqKAFptBwOwp75ncbrIyfzPoDd0wQec22SP3rIZeF
xOA9XYpA8QY58hw3vY8NfGyyf+9uxb8c/5Onm5nEZm/4ceJCuLB2sJ9bStuoHSEq
Ag+TI9+3bCe5mbaINE6jWxzMBxvtCSkHRYlwJcnKpGzaVlqwcdDBUQI42S/K85bV
x97js1rsXGOlDtQIxDMOwR+pZr3/bPAralqF4CufNqbeZR6Kd3lwhkE5bM/h0qfS
tARosxSVJiVvOqWNRJhrUgpeQLnpUZxVKv5hrak2mtNUk8+0vcB0TdbKC5rXrvht
2oaEhZJduwpW3eKeZez4LfBdwMG1HoVzkEghIr/OavzycblRUuRDrgkpBhED812C
L9SdLvijoasKhSe0sObllsmVlhz5PPkbzwYwlTWpE8h1t7hBEy/nXkyFnhOHzBvY
2oRVtoys+eafO2HRoF9Ex20N3PF+HgLLHFSE+m3T05ob1ylKhayeqV/pYWePgwBs
i1NRcrPaZ07tBUGGCyYuVSXwozKbq2FfkU7sJUAz8KR36RYLY61ywh8plSzrRyiC
e0xv08MpqO3oocC1DxxdoVjn26KN6fE6W5H5vLcKf291GtS5BAioz8X4/jsxdUC1
KtdSkh2zJmaZIQIDAQABo4IFVDCCBVAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSb
F4jyDiQ7w2px3pdMBN8uWLAhGzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzCCA1wGA1UdEQSCA1MwggNPghFhYmJhbmsu
dm50b3B1cC52boITYWdyaWJhbmsudm50b3B1cC52boISYmFua3dlYi52bnRvcHVw
LnZughZiYW92aWV0YmFuay52bnRvcHVwLnZugg9iaWRjLnZudG9wdXAudm6CD2Jp
ZHYudm50b3B1cC52boITYmlkdnNtYXJ0YmFua2luZy52boIUZG9uZ2FiYW5rLnZu
dG9wdXAudm6CE2V4aW1iYW5rLnZudG9wdXAudm6CFGZpY29tYmFuay52bnRvcHVw
LnZughFncGJhbmsudm50b3B1cC52boIRaGRiYW5rLnZudG9wdXAudm6CF2luZG92
aW5hYmFuay52bnRvcHVwLnZughtsaWVudmlldHBvc3RiYW5rLnZudG9wdXAudm6C
E21hcml0aW1lLnZudG9wdXAudm6CDW1iLnZudG9wdXAudm6CD25hZ2lvcy52bnBh
eS52boITbmFtYWJhbmsudm50b3B1cC52boIUbmFtYW1vYmlsZWJhbmtpbmcudm6C
E25hdmliYW5rLnZudG9wdXAudm6CDm9jYi52bnRvcHVwLnZughRvY2VhbmJhbmsu
dm50b3B1cC52boIRcGdiYW5rLnZudG9wdXAudm6CFHNhY29tYmFuay52bnRvcHVw
LnZugg5zY2Iudm50b3B1cC52boISc2VhYmFuay52bnRvcHVwLnZugg5zaGIudm50
b3B1cC52boIMc2ltZGFuYW5nLnZughZ0ZWNoY29tYmFuay52bnRvcHVwLnZughh0
aWVucGhvbmdiYW5rLnZudG9wdXAudm6CDnZpYi52bnRvcHVwLnZugg52aWQudm50
b3B1cC52boIUdmlldGFiYW5rLnZudG9wdXAudm6CG3ZpZXRjb21iYW5rbW9iaWxl
YmFua2luZy52boIQdm5wYXkudm50b3B1cC52boITdm50aWNrZXQudm50b3B1cC52
boIRdnBiYW5rLnZudG9wdXAudm6CB3ZzbXMudm6CF3d3dy5iaWR2c21hcnRiYW5r
aW5nLnZughB3d3cuc2ltZGFuYW5nLnZugh93d3cudmlldGNvbWJhbmttb2JpbGVi
YW5raW5nLnZuggt3d3cudnNtcy52bjCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB
5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2Vu
Y3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5
IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5
IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5k
IGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3
DQEBCwUAA4IBAQBAeqBmWv4nfIz6u5vNB5r3rMk7o7WS6vJyBhyNNzzK8adudwsc
a7FmzHrvq/iZiQYrc0w9iZQRm9MUFUwxkIEv1NXectlmjeayO45232s5s6reyLlF
idOTFCzYo2unlqL7qlmCKd/oCK6iqp1ODuiz+eZhq+z/9GVT0qldsJODoL7PdC0Z
yCE/mUb2ns/Gu+jGQgvlXyI73Ai0HPs/V/pw+ylVfVIV0Ev1vjRss1uQzKbE1xgk
1ob50ehWQD8c9JDv/LcwaPVnRtbRs7NXhve82N7bfA1Pi0M9S6NsedDdXPL99pQQ
WfbwCpY6dfRXLoe03Y22heEPr4P3MNGU3YBs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArqQN7E9J/O5FoA/ZyvgM
teWAecWbvtx2EVt2GTIUvf1LJpCuVrVyM6igBabQcDsKe+Z3G6yMn8z6A3dMEHnN
tkj96yGXhcTgPV2KQPEGOfIcN72PDXxssn/vbsW/HP+Tp5uZxGZv+HHiQriwdrCf
W0rbqB0hKgIPkyPft2wnuZm2iDROo1sczAcb7QkpB0WJcCXJyqRs2lZasHHQwVEC
ONkvyvOW1cfe47Na7FxjpQ7UCMQzDsEfqWa9/2zwK2paheArnzam3mUeind5cIZB
OWzP4dKn0rQEaLMUlSYlbzqljUSYa1IKXkC56VGcVSr+Ya2pNprTVJPPtL3AdE3W
ygua1674bdqGhIWSXbsKVt3inmXs+C3wXcDBtR6Fc5BIISK/zmr88nG5UVLkQ64J
KQYRA/Ndgi/UnS74o6GrCoUntLDm5ZbJlZYc+Tz5G88GMJU1qRPIdbe4QRMv515M
hZ4Th8wb2NqEVbaMrPnmnzth0aBfRMdtDdzxfh4CyxxUhPpt09OaG9cpSoWsnqlf
6WFnj4MAbItTUXKz2mdO7QVBhgsmLlUl8KMym6thX5FO7CVAM/Ckd+kWC2OtcsIf
KZUs60cogntMb9PDKajt6KHAtQ8cXaFY59uijenxOluR+by3Cn9vdRrUuQQIqM/F
+P47MXVAtSrXUpIdsyZmmSECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314842110560131259911964909082113196577065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-31 09:12:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-29 09:12:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vnpay.vntopup.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712472456534572706914750735022754120601467933894528653828352975842028679652233796491388006805970805451627180101128306934604838559821754951830203805765312931428660654953242845171221809810154530899625457062321767618428619657768838578183320089143545516097913041204128725801218316501634159805665212707452772932645488758816974412435163176760458378226153674155085354589792430047446646883120543144009106798884437463976204604484170563801742297256163261880684051366953092989289083864467909075047360860627287782172400165778568029948474705395540042910649327855095139068673273406397432546038556850502915753667923267464232607411684747474622672544429804111298599846814120186476120295524301673116144685421513088032491207960148626557208034079804380021892462819496972961629377599998656488376394565071083650539099047447660858948825196614488842037862885682151380690981700558132856009753037481157455380843690071108944666404113247349936086913699437623221228523673144302618879860588710256356440004370016910375863612082632627634330036141328082247863210532313140072072038415553161429834186510299075393614844776896246161549743301490347085694789921327831144276319818963951856603150208415402901295058256322955876699575480076165132203492986263824676663364852001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b1788f20e243bc36a71de974c04df2e58b0211b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (851 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agribank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankweb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baovietbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidc.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidv.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bidvsmartbanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dongabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eximbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ficombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indovinabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lienvietpostbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maritime.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nagios.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'namamobilebanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navibank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oceanbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pgbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shb.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simdanang.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techcombank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tienphongbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vib.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vid.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietabank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietcombankmobilebanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnpay.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnticket.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpbank.vntopup.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vsms.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bidvsmartbanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simdanang.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietcombankmobilebanking.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vsms.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00407aa0665afe277c8cfabb9bcd079af7acc93ba3b592eaf272061c8d373ccaf1a76e770b1c6bb166cc7aefabf89989062b734c3d8994119bd314154c3190812fd4d5de72d9668de6b23b8e76df6b39b3aadec8b94589d393142cd8a36ba796a2fbaa598229dfe808aea2aa9d4e0ee8b3f9e661abecfff46553d2a95db09383a0becf742d19c8213f9946f69ecfc6bbe8c6420be55f223bdc08b41cfb3f57fa70fb29557d5215d04bf5be346cb35b90cca6c4d71824d686f9d1e856403f1cf490effcb73068f56746d6d1b3b35786f7bcd8dedb7c0d4f8b433d4ba36c79d0dd5cf2fdf6941059f6f00a963a75f4572e87b4dd8db685e10faf83f730d194dd806c