vietgianguyen.com

Issued by R3

About this certificate

This digital certificate with serial number 04:87:ee:c3:c1:7f:96:e6:17:9b:db:17:b9:bd:9f:fa:3a:21 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vietgianguyen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:87:ee:c3:c1:7f:96:e6:17:9b:db:17:b9:bd:9f:fa:3a:21
Serial Number (int): 394704635946865634483174977090438431390241
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:92:83:ce:9d:be:4a:9f:db:f6:d1:dc:71:7c:f0:09:75:47:c6:f8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a0:c8:71:27:3b:12:94:db:7c:65:a8:06:48:dd:7a:a7:84:7c:17:b0
Fingerprint (sha256): d0:e5:6b:ac:a7:62:a1:08:71:b6:26:32:de:cc:60:be:72:67:c9:bb:c3:36:68:c7:3b:04:b4:59:dc:fc:fa:ea

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate vietgianguyen.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vietgianguyen.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vietgianguyen.com
*.vnmmoringa.com
*.vnmoringa.com
cpanel.xn--trangmnghay-wt9e.vn
cpcalendars.xn--trangmnghay-wt9e.vn
cpcontacts.xn--trangmnghay-wt9e.vn
mail.xn--trangmnghay-wt9e.vn
vietgianguyen.com
vietgianguyen.xn--trangmnghay-wt9e.vn
vnmmoringa.com
vnmmoringa.xn--trangmnghay-wt9e.vn
vnmoringa.com
vnmoringa.xn--trangmnghay-wt9e.vn
webdisk.xn--trangmnghay-wt9e.vn
webmail.xn--trangmnghay-wt9e.vn
www.vietgianguyen.xn--trangmnghay-wt9e.vn
www.vnmmoringa.xn--trangmnghay-wt9e.vn
www.vnmoringa.xn--trangmnghay-wt9e.vn
www.xn--trangmnghay-wt9e.vn
xn--trangmnghay-wt9e.vn

Other certificates including the domain name vietgianguyen.com

(limited to 100 certificates)
ihappy.info
vietgianguyen.com
vietgianguyen.duy9.name.vn
cpcalendars.ankhangxanh.com
www.vietgianguyen.com
sotaville.com
*.vnmmoringa.com
vietgianguyen.com
www.vietgianguyen.com
thienlongcnc.com
vietgianguyen.com
vnmmoringa.com
xkldnhantai.vn
www.vietgianguyen.com
vietgianguyen.com
vietgianguyen.com
vietgianguyen.com
vnmmoringa.com
vnmmoringa.com
vietgianguyen.com
sotaville.com
vietgianguyen.com
dhqe.vn
vietgianguyen.com

Certificate

The complete raw certificate details for vietgianguyen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH6nIYYbc8iuXwYk8Icr
iHoHmx8FcANHo5Qx06sHgZncWjRkGG6QTMGTBuc/x8Iorue+//hhneiHBJWMZtiv
tWipXmGbDaDKTIrD8FFxxD5POVDa2La2gyxXkqq3tkGdoUGE4wThc9L7p/zsSltE
3joAgtK/hCjYb3DhPRcgHIFoEhCGMZudUawyc5aQVgTpPXi7B3w8vU/p/oijoxTY
3EWLaE5rzgFf0AgyioWLuycp3oXYrlL1WJhljBkdYFE7hr6vgcRSOXasmy/yqaTm
mM3LpfdAostEAL4HBvqY1KHc1NJbEwvkaXv6K5WiGgZkzAaCXCHMkkfmzt6l2PhD
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394704635946865634483174977090438431390241
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 16:09:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 16:08:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vietgianguyen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24805162624011922204592300289259936827769482469670029484361533266459277141742739473565330937893467265851829080224864481195293089622583623311640213269612176602733266290860640037554429290128396241623364590328328167859071187524753939249495516189554753596140972134653244011545204674882970125009113241018915962586106562050551972387589813313337807634245507913591946821643495308089764722002092164810233600005583513909079229859205263660846212974899510594045559351286323812591235859492715443826020222694464999206623332041377818176241103000334522058392896770535186607591195631558953731131952912370414827218707502231245658014493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a9283ce9dbe4a9fdbf6d1dc717cf0097547c6f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (597 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vietgianguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vnmmoringa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vnmoringa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietgianguyen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietgianguyen.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnmmoringa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnmmoringa.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnmoringa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnmoringa.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietgianguyen.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vnmmoringa.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vnmoringa.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--trangmnghay-wt9e.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018698ffb5e6000004030047304502205ac99ccdda1edf9ef3298caa42955361569302774799e23acf81bbdcdb089953022100fba95139a95ad1a1df98e4f2154bc64c5f435d7a0e5523783a8314898a56940f007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018698ffb7ba00000403004730450220009377f3c494527d9547ea775786347b83d2317d6d86ca4100bac046d46ccd1a022100ed078d40fad6380b0c39bc08673fd20e5eb0768e820594635e663731a5de695e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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