www.aemedia.com.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:05:51:ca:1d:e4:a1:4a:48:9a:0b:dd:29:dc:5c:3e:cb:90 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.aemedia.com.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:05:51:ca:1d:e4:a1:4a:48:9a:0b:dd:29:dc:5c:3e:cb:90
Serial Number (int): 263146986547813250927169382620816377564048
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:32:24:62:c1:89:02:16:2f:ed:79:26:5f:d7:35:b1:da:e4:d7:36
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e3:4d:8e:34:aa:67:be:c8:6b:54:7e:22:f8:9b:ae:3d:e3:ed:db:8d
Fingerprint (sha256): c8:b1:87:af:d6:72:a2:bc:0e:42:da:14:d2:65:49:ab:a7:16:6e:3e:86:71:c1:98:33:81:f3:e9:ec:3f:45:48

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.aemedia.com.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aemedia.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aemedia.com.vn
aemedia.duy1.name.vn
bdsthuanthanh.duy1.name.vn
cpanel.aemedia.com.vn
cpcalendars.aemedia.com.vn
cpcontacts.aemedia.com.vn
depchieu.com
depchieu.duy1.name.vn
dichvubinhminh.com
dichvubinhminh.duy1.name.vn
ecocity.duy1.name.vn
lipocotech.com
lipocotech.duy1.name.vn
tuyetdungcolor.duy1.name.vn
webdisk.aemedia.com.vn
webmail.aemedia.com.vn
www.aemedia.com.vn
www.aemedia.duy1.name.vn
www.bdsthuanthanh.duy1.name.vn
www.depchieu.duy1.name.vn
www.dichvubinhminh.duy1.name.vn
www.ecocity.duy1.name.vn
www.lipocotech.duy1.name.vn
www.tuyetdungcolor.duy1.name.vn

Other certificates including the domain name aemedia.com.vn

(limited to 100 certificates)
aemedia.com.vn
aemedia.com.vn
aemedia.com.vn
sonviva.com
webmail.aemedia.com.vn
aemedia.com.vn
aemedia.ihappy.org.vn
webmail.aemedia.com.vn
datbacninh.net
aemedia.com.vn
smecvina.com
aemedia.com.vn
aemedia.duy8.name.vn
aemedia.com.vn
www.aemedia.com.vn
www.ibcgroup.vn
aemedia.com.vn
aemedia.com.vn

Certificate

The complete raw certificate details for www.aemedia.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfaaNyOhMLrdGt1h3SkA
QobmmJOyygSXjnExLJ0bNsRJAKMZjZO+zMwajTUNfdYleTcHt4FVAMQJVOqyWr9K
jQiUAZXUYf0IAffVcLE/mNSL2iATJAHC+SYgwAN8up7jr53xwO2/IFrf9661orge
NwPJ43xDTcxlWTqlLHMizdPW7Nr3G6y5MGPDwE6xbdOspkXTf8Q9b30BB77xXYl2
UuGi6FZ2nytf1otCWoJa17pV1A/LpCTw3TMN1z1Gy9xogKGo/YkeDb6Fb5SPTUtj
m8YH1G2vcr47yjgJQUIIHyvcoI1eTzk9d4UBBdiks7gFeEggUF7buxMMiyKGC9Zi
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263146986547813250927169382620816377564048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 17:20:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 17:20:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aemedia.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21455877716855604866641200726980792782608577115096990730883346580907317430802686987855416475776734746878977614842189837068673047786975349286650705103870502367163431490704313821793874374444005442087748979080055584597586743708674047959763811398995551451396735072882357739628219456733471434170651066360938319649217422350434503214845232895457724852128896826995567394850784524328316177257774881661814809487585310934747835297108456582512469833241334674886898217029133555891061783274423737682194159945928996168169774328549846582888761553673076029045927785829148125099954769345666112656693353530981533792756356507416437088777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7322462c18902162fed79265fd735b1dae4d736
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aemedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aemedia.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bdsthuanthanh.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.aemedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.aemedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.aemedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depchieu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depchieu.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dichvubinhminh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dichvubinhminh.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecocity.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipocotech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipocotech.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuyetdungcolor.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.aemedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.aemedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aemedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aemedia.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bdsthuanthanh.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.depchieu.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dichvubinhminh.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecocity.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lipocotech.duy1.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuyetdungcolor.duy1.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aaeac5c3e0000040300483046022100ec794ca80284d98a259d1213afb9eb08b7339711b30e9afa9d02dbb5223a6cf6022100a613955b5a74427894e77df3da1f1ac7884b1af2c10d2384121b9e1072ce90b1007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aaeac5c350000040300463044022047d530672fa4b3b896459e999a862de0fc81fe4afbb39c0ed76a440edd7b765502201acbb76a68b5f54aaac627a7116a1afbb2b4acc7bea5a1c69a6f700f2da30e1b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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