DV SSL/TLS Certificate for mail.thaypin.vn

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the mail.thaypin.vn DV SSL/TLS Certificate

This certificate with serial number 05:02:ce:b8:eb:ec:5b:22:13:06:fe:32:23:a6:6b:00:bf:54 for mail.thaypin.vn was issued on by Let's Encrypt.

With 3 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for mail.thaypin.vn provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:02:ce:b8:eb:ec:5b:22:13:06:fe:32:23:a6:6b:00:bf:54
Serial Number (int): 436516775527489080778882583572393146498900
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: b0:d9:6e:c2:b7:cf:2e:b5:d1:52:22:98:4a:62:f6:b5:7c:1f:7d:c9
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): 48:22:33:b6:c6:b5:57:d7:9a:29:08:c6:77:24:53:dd:7f:41:41:f7
Fingerprint (SHA-256): de:31:27:ee:0f:3b:61:6d:dc:52:98:6c:09:fe:2b:83:13:d7:68:83:dc:74:e1:61:4e:c9:81:c1:55:9a:70:8d

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r10.c.lencr.org/85.crl

Check the revocation status for certificate mail.thaypin.vn
3
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for mail.thaypin.vn

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for mail.thaypin.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkKxCWeBB0M6j9v/VQ4W
MLwo4GCk4sx5KGzUP0ya5YWnOCZQe10PYi8ooV+ho3qWY00YNgI4Mts8eBS9RjGc
npCQqsBsncTi8ydb3zo0DnXF7Biy4bxbWtqyHdFaqXctv8l54jdraYdKHGYPrIX1
cAsJlTJUV4Q98o6gEANui/0ImgYBUGdFyw1DxVv9hyl3ZDkNuJimsp6dWTGfM/mV
UZSGsrMv3Q4UJfyGNf6bdXtl25Ll+gGpXQIiMWaYN1McwAZxC0mAok08Vb86Zdxm
5j9wIBMlmxkzaMKM0bPj6ptH3eqLBIxtb7fvhp25FsexCfC3rWhluM5Pdqe11AXm
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 436516775527489080778882583572393146498900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-01 02:24:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-30 02:24:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.thaypin.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23008258332712514303165275976576652018049227193076613385681076184773061528126057346703701701327939161828861913721183138677490832119283212517476903094543714692554740347990055933551043848755377639310162567678453790415032659133627827433569677352530279754822441683804082120483815807968907329756284218534640026371818152268400373998493362609746537326205849296466369227728326852164295832056160507654529321448016318645582559895087548177967174420571995812602496712748266725127602518157517751122945894417734861549911699138924791998257871662784567563188686932611319971896565341592363180877109675868389555036157042238895772002041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0d96ec2b7cf2eb5d15222984a62f6b57c1f7dc9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thaypin.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thaypin.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thaypin.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/85.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a8454000001972983cb270000040300483046022100a6de4849b0e383d9ae67f3840390331b11fca42a3126da3723dfec930c8325b7022100dc92f92a34a887044e1cde9065b4970b590569a9d2c029887a48bf15190bcdda0076000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001972983cb2800000403004730450220646f3c8b87b425f8819cadc554fffe3cc0754404fd7be74c72e46786faeb7b4f022100d0fa82253824c97f4ce84b1a4dae87869deb8e6f4a0d3fcef57367a7c84f8f09
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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