maychietrotthucong.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:60:9c:56:b3:7e:33:1f:6a:61:1c:c1:69:c5:08:fe:d5:23 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=maychietrotthucong.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:60:9c:56:b3:7e:33:1f:6a:61:1c:c1:69:c5:08:fe:d5:23Serial Number (int): 294211774765113002548714570833420445734179
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 14:79:2f:68:a2:97:84:6a:42:ad:f4:d2:33:49:d0:b8:d3:96:71:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 31:0c:d1:c3:49:3c:9f:31:42:cd:3a:43:f1:e9:c0:2b:ac:62:35:a0
Fingerprint (sha256): ca:5a:bc:7b:65:61:5f:51:c7:21:3b:4e:36:77:8a:f2:cd:09:69:66:c3:02:e5:c9:cf:a9:92:33:ef:ed:4c:57
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate maychietrotthucong.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for maychietrotthucong.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
maychietrotthucong.net
www.maychietrotthucong.net
www.maychietrotthucong.net
Other certificates including the domain name maychietrotthucong.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for maychietrotthucong.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISA2CcVrN+Mx9qYRzBacUI/tUjMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTgxMzA5NDFaFw0x OTAzMTgxMzA5NDFaMCExHzAdBgNVBAMTFm1heWNoaWV0cm90dGh1Y29uZy5uZXQw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOTA31lGC8YIn1FRY3h1k4 yIjYfFt04KTgyz5tAy3z9qF+cqrne48VgWxOPz9esh6AXMVDbP/Bxs5lNZGW7kh6 AK5Pza4EsDegz+O+HcYjwSTljZxn1+C/HMWLtHTIdlS8itnqba95GKqffBJ+nzKz GU1hlfMScfrcu8iotlK9GCxys4OCXMdMNcNiuF7KofsMBe1YRI8q+wej/tOGsF5V QoDUMpGCDDWcYuGvJ+E8knLaPlS4sNdaKzJeNhtXlZkGRE9RlGZAddot4czHALgb hfJ+YzqacYpsAdeOuGT6a7pScUcZdN3www1UJykDPw6kTsIh3hL3n2tcwOR9nFP1 AgMBAAGjggKHMIICgzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBR5L2iil4RqQq30 0jNJ0LjTlnFLMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl bmNyeXB0Lm9yZy8wPQYDVR0RBDYwNIIWbWF5Y2hpZXRyb3R0aHVjb25nLm5ldIIa d3d3Lm1heWNoaWV0cm90dGh1Y29uZy5uZXQwTAYDVR0gBEUwQzAIBgZngQwBAgEw NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j cnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQB0ftqDMa0zEJEhnM4l T0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWfBpqFTAAAEAwBGMEQCIF/KGDLBn0Jd3b+k QxUQXUMJgA0jB+cOK8mlRvm3Opc1AiAEs8/CReMRpbwH5TnP3T4EFPiEOMb+htTd MbDqDjwy8AB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABZ8Gm n2wAAAQDAEgwRgIhAJD2CzqKrTXusx5ArIWVucrJrcl9FQf1o6siR5OyAGEBAiEA qfwbZNf+OPFjpD4ZUj+MjFOrnyqUC5dcbcuZz0T7B+YwDQYJKoZIhvcNAQELBQAD ggEBAEecpdG2lLmvthHX6VDwsGIRwOovradj9ik7W/Nsg0p1pkQIKSJlRvM3qiKq bK1G7u5HacwwNtjTP+fUCchILEdNixnpC1IcDa6RTNzY+iefQKg3TPADoidbL8vZ gvVxrvITLjMeYjXsPnftTsUACd6WOcHCB33uaob7huZFqIHJSCHqdgGTv0E3tKo0 oWInzOzhEHbYVdfVU72RdpsFO8QpRV1Xpmlchw0K7mYxKOHGjD5uv+icxsyH5R7Q F5ncr0Qn3N2deFwEjBXkI8hha7DYt0N/9MC8QGhGWF6leiIZGQDjWIA1gVVPzPWJ +r/DsJIL5Mdlndk18InhLq8LpK8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkwN9ZRgvGCJ9RUWN4dZ OMiI2HxbdOCk4Ms+bQMt8/ahfnKq53uPFYFsTj8/XrIegFzFQ2z/wcbOZTWRlu5I egCuT82uBLA3oM/jvh3GI8Ek5Y2cZ9fgvxzFi7R0yHZUvIrZ6m2veRiqn3wSfp8y sxlNYZXzEnH63LvIqLZSvRgscrODglzHTDXDYrheyqH7DAXtWESPKvsHo/7ThrBe VUKA1DKRggw1nGLhryfhPJJy2j5UuLDXWisyXjYbV5WZBkRPUZRmQHXaLeHMxwC4 G4XyfmM6mnGKbAHXjrhk+mu6UnFHGXTd8MMNVCcpAz8OpE7CId4S959rXMDkfZxT 9QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 294211774765113002548714570833420445734179 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-18 13:09:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 13:09:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maychietrotthucong.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26042594708799075573528354851224353662732974213274543317803215002597756729250058874800675296626071359683213994253481732168408543746436309736737015620411747185857368434514319393125751588381148861712016297416308043722220466419524103374251945078257486634460497907477761779706041859673099482173107233552439277576099249339719444374081500036554486557430871006119879898915987855129367076858370304160808601025478394807566136778969562032003400525764393894928038387875198123636740136896552167947313187115894496382454023486713750543784879573369016579056704346939247572520893417676530326530117055558402440667814778265102150554613 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 14792f68a297846a42adf4d23349d0b8d396714b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maychietrotthucong.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maychietrotthucong.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167c1a6a153000004030046304402205fca1832c19f425dddbfa44315105d4309800d2307e70e2bc9a546f9b73a9735022004b3cfc245e311a5bc07e539cfdd3e0414f88438c6fe86d4dd31b0ea0e3c32f000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167c1a69f6c000004030048304602210090f60b3a8aad35eeb31e40ac8595b9cac9adc97d1507f5a3ab224793b2006101022100a9fc1b64d7fe38f163a43e19523f8c8c53ab9f2a940b975c6dcb99cf44fb07e6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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