www.covatec.duy8.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:49:05:07:d4:cf:20:db:be:0d:77:53:64:50:bf:fa:cf:bd was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.covatec.duy8.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:49:05:07:d4:cf:20:db:be:0d:77:53:64:50:bf:fa:cf:bd
Serial Number (int): 373296443314607663529653527250697134460861
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 25:0a:6f:a5:93:a5:eb:db:2c:69:a2:d2:82:31:a6:b1:c0:9a:18:5b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:21:dd:da:f4:62:45:e0:25:e0:08:6a:9f:1b:2f:a3:74:ab:97:c8
Fingerprint (sha256): c0:e7:a6:06:8a:d4:dc:23:38:4e:a8:e0:a6:e5:ec:55:c4:b8:eb:05:6c:67:ce:53:e3:8c:86:03:b1:8f:a8:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.covatec.duy8.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.covatec.duy8.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acasavilla.duy8.name.vn
banhxedayminhthu.com
banhxedayminhthu.duy8.name.vn
congtynhabacninh.com
congtynhabacninh.duy8.name.vn
covatec.duy8.name.vn
covatec.vn
heemangchicken.vn
heemangchicken.vn.duy8.name.vn
kientrucndt.com
kientrucndt.duy8.name.vn
mail.covatec.vn
osungvinacom.duy8.name.vn
phimdoanhnghiepcom.duy8.name.vn
www.acasavilla.duy8.name.vn
www.banhxedayminhthu.duy8.name.vn
www.congtynhabacninh.duy8.name.vn
www.covatec.duy8.name.vn
www.covatec.vn
www.heemangchicken.vn
www.heemangchicken.vn.duy8.name.vn
www.kientrucndt.duy8.name.vn
www.osungvinacom.duy8.name.vn
www.phimdoanhnghiepcom.duy8.name.vn

Other certificates including the domain name duy8.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.covatec.duy8.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XL3Ym+rzUUqXxNy8pPt
M4g6xyPfd1KBrCG8RLRuac9PQA5gucAHjWbVz/cSBeWljsv1zF8n47NZ4osuHb0k
wF2GILCDDiQGPQ9HrEhi8eFdeADIK4NfI2IZFjtsy5uXcIEQ2P0edfqXKwerhyCC
ZxS3XsInYzUyo+IdX3N8pgNSBCgvnqPcM6sP9xqlyWUXnu9yQlOwGcu2PGV5Qzkj
Ykyd/wJ0Lg/UVGznF/oucOAXAXwd85wNKm0JpD7ibe4Pj9vdAEOChD/4fZmbC5b7
9oe809cf7j7xXrBYhLX/F+4cE1MrKNlhMRxE9Z2UpelLKIg7QbMAgd8U1oDD263f
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373296443314607663529653527250697134460861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 22:54:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 22:54:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.covatec.duy8.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30985076734722737426513996491422165978710297342443261740547082335612782436035349802138905375991962624532309741712224266723518199869667239920708992320382927936650337339914714085923538831367142230775089446594698365524362291362913127685077415098411039677010300350998253141082728250643618672679921607940722124328063868686971873680534211712091662835034170288272870196005894542305705851324276043973281346477034667998692322324189768222648260308994176500734204200209600935095431798659980845365153793931159268303174891225727650380021440235308454228635944508321640675959941234401102933167736780596482723715568536453252903722923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							250a6fa593a5ebdb2c69a2d28231a6b1c09a185b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (638 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acasavilla.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banhxedayminhthu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banhxedayminhthu.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congtynhabacninh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congtynhabacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covatec.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'covatec.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heemangchicken.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heemangchicken.vn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kientrucndt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kientrucndt.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.covatec.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osungvinacom.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimdoanhnghiepcom.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acasavilla.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banhxedayminhthu.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congtynhabacninh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covatec.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.covatec.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heemangchicken.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heemangchicken.vn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kientrucndt.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osungvinacom.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phimdoanhnghiepcom.duy8.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e7809dde4000004030047304502210092151fe57621c60f431f08701535395fc43ff690773d99bd00ffc8009742756702202f8b68e2bb5ad35738e890d9d7a9806cc5cc2d29d25fcae29110f8d056502dda00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e7809de1e000004030046304402202770f7aaae5ad15e853190bd320e9a38d3888c48bbc1592098bf6d5bb452c78a02205b5f7e80c478959a794b6c06b9eebb0720292cd0c77c9a4d4b9c7574e7709564
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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