tgh.ghn.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8f:6a:31:f7:60:62:89:6f:7f:8b:be:ab:e5:84:ee:d9:7f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tgh.ghn.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:6a:31:f7:60:62:89:6f:7f:8b:be:ab:e5:84:ee:d9:7f
Serial Number (int): 397250679804226027534507004331177446136191
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ac:11:37:4f:d3:85:b0:f3:73:35:d3:11:ae:07:17:84:09:44:cb:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:2a:a1:f8:46:b0:27:e3:e6:4f:22:e3:2c:13:f2:ae:eb:5a:a6:c6
Fingerprint (sha256): d0:74:0a:06:c5:e4:47:a0:69:56:39:c6:87:b2:ec:e9:a9:04:c9:30:fc:60:8f:e1:0b:2a:5e:14:23:ce:d5:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tgh.ghn.vn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tgh.ghn.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tgh.ghn.vn

Other certificates including the domain name ghn.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for tgh.ghn.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuXvz8versBNGhpdV120L
dmKLII7QlF3bBn/1nOWVp9msAlBgaQ0o2qs8wrkwBQRzQnW7GBQD+skzRbxQ21DR
8BQK0Okhb33DGjv0kKZdpXcq9JymOM/oiFjnlzi2CF7vnFDOYeZs8Rx8MPKmt+Ai
YBYqazUI7GES5XRpV/TcsEzeLnKIU0WTnQbNyB9PYdow8NTPIE/ZUgDAMUXfeKeS
xbV0sI/K0FuRdn9nQiKVL4jLjXm3MCPu3ovqjRxgjVlNqT+PclgEyUO1j9kWobMl
jWQlq9YBDLBk/V0vn7Db0XQpVaU3PDhVt5o+mpqI3QSNx7/hGgjZ7DviwnJAfOLW
fSUDymFMUTeggyF2C1CUkVu8wM4eiT4UhlaxQrWMm6hibuLj4R7R9dI3URyO/Hy5
cobyFJ2LfXCMui+nsyCe29wN5tVT3e9gK0nvHvKAPrw/Fbx2ev4r/ZMGFumdg/iT
GKPEvjnVQpeYADYsHxWuatvPuW9MOnB5pA79w2f+TnA+qC+FZd6vkwtN9c+rnsqK
ji/kFypncigef6jyxEGcmDkaOAV2UZL4VNi8s37jDyB2TDGo9ls6QYpxUlVLetzz
tmcFS6G9bLhj530isoZTShjt8xy8FUkmbdar8PbMG46c0POsdEKulW4TeKpJhP2s
EuUPO08K3FedxltB1p9GhIkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397250679804226027534507004331177446136191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 05:48:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 05:48:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tgh.ghn.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756709480004965008411490059717030593546675942664622319311468230943132164468469265075063074483888793559861382061137088812201135290144739999891486492283894102694242786895248446291663419409506803985220326753897251866083586352714182469912074581816979336056101510354742428199066645797105013850458911424295763811186944232319271173787615175683696232411346309941394995076612791162260165903717191203623061004268687314232311869349686077304672987788759829300413350591151296863751518012160536638974593502375711200757267289489422945851670842742867845918445641734230454751960597268459405601088227543259549219298833117210936680953178386479544949674447059896162651095813151733270397545371676917832026109479746146403695386453165365037144925083819425275884386508605887806038221390974326178162135987719413134304183027477216288999078985580589609267395659299522547426363896947466506408192504161080376785905857905670473740668782694578114684618941508201952492010377109581177181034244066950681219133380368234353558946361220356271245488159154853219360191553073092359570804806020363482141432285885241188060330539445592431302838759837657667791268374576445979440940051457772318455919699088286268551707677787601337461819731986477638105940209511257517292282872969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac11374fd385b0f37335d311ae0717840944cbb9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgh.ghn.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b30b23ee000000403004830460221008b72a39b9c4c8edb462f311e9b9c08fd44e570cdae8a806e70fc87108a362be80221008e9c83a0ed9643609deab05feee2799cbaae8eaf94484153a936972a61931f9600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b30b240a100000403004730450221008016c4b7ca91592e6850cae04ce54d7525f341c62af9473b87ef2fbe08dafba502206e1d13b63a11f4480e3b75e30b635f64f55a8638a53932850b9c3405aea8cda2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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