trihemofa.com.vn

Issued by R3

About this certificate

This digital certificate with serial number 04:70:89:ac:eb:57:21:f6:ee:68:d8:1b:b2:7d:38:8e:e4:11 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=trihemofa.com.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:70:89:ac:eb:57:21:f6:ee:68:d8:1b:b2:7d:38:8e:e4:11
Serial Number (int): 386743770905937914483150015982431800058897
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0b:63:67:20:36:57:08:fa:40:58:55:98:5e:1e:9a:a4:93:33:47:27
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0b:68:9b:bd:84:67:9d:7f:14:5a:3f:d2:84:38:98:96:2c:b7:ad:fa
Fingerprint (sha256): db:a6:b6:b4:7f:eb:73:28:9d:a4:dc:e9:71:d6:a2:6e:cf:e6:9c:af:5f:4c:3e:75:f4:d4:78:eb:fe:c7:30:56

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate trihemofa.com.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trihemofa.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gammatech.com.vn
gammatech.com.vn.duy5.name.vn
lavishdecor.com.vn
lavishdecor.com.vn.duy5.name.vn
nhathongminhgamma.com.duy5.name.vn
nicehairvn.com
nicehairvn.com.duy5.name.vn
sedu.edu.vn
sedu.edu.vn.duy5.name.vn
thanglongedu.com
thanglongedu.com.duy5.name.vn
trihemofa.com.vn
trihemofa.com.vn.duy5.name.vn
www.gammatech.com.vn
www.gammatech.com.vn.duy5.name.vn
www.lavishdecor.com.vn.duy5.name.vn
www.nhathongminhgamma.com.duy5.name.vn
www.nicehairvn.com
www.nicehairvn.com.duy5.name.vn
www.sedu.edu.vn
www.sedu.edu.vn.duy5.name.vn
www.thanglongedu.com
www.thanglongedu.com.duy5.name.vn
www.trihemofa.com.vn.duy5.name.vn

Other certificates including the domain name trihemofa.com.vn

(limited to 100 certificates)
www.sedu.edu.vn.duy5.name.vn
www.nicehairvn.com.duy5.name.vn
trihemofa.com.vn

Certificate

The complete raw certificate details for trihemofa.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9iFcflX9E7Vr2gGNRgi
AV9HDSHYkckFStWTGsEgUFaQWBYvlQVPCuINEFC2AqexIjEGk66kzleroOnnB3EC
xK3jRn93fTxKO3/oE8xZ5clQt4PrIvdVgUMSVWoISye3FJveOlKXQRdLLMXcxJ2Z
kLAskzYWcvjvCvlb+lqNeXN24WpDZUr+0LtL+bt6OTd2WjZ5sgYBSJ7SY8sFUXeC
3rT7yw9O7TxlaC2gJxP2VD4pqluqSM2qHrM2pEL0FsEElS7oEOn1k9y5JzOFzmYf
AXKsP1PSxyhusPl2ZwHJ+xxqtrXJBGqXG0McTpqfGu8EaS36EywxztbA19sXYP1K
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386743770905937914483150015982431800058897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 13:22:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-26 13:22:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trihemofa.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23208380426596298378479919089004764872486827380577468404310011903781959964051576618231265939350124634422813389296494250183779134222185310965891903525242523130512954926240287825677813258252345654985630293480631827906037401869506522644645751628800310657853328407367954270686490696356954635964824806339336837832623201301089445580145704761278256210905941778022930393050564923499062295971557529651456675504849073826320868003730361663668471547012976101260791348856528253283307861753612485645723527847089538339807896680883091096474752470335867465313694609435612343538431588736614370257360636717361392148896552248655294057047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b636720365708fa405855985e1e9aa493334727
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (650 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gammatech.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gammatech.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavishdecor.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lavishdecor.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhathongminhgamma.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicehairvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicehairvn.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedu.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sedu.edu.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanglongedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thanglongedu.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trihemofa.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trihemofa.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gammatech.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gammatech.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lavishdecor.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhathongminhgamma.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicehairvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicehairvn.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sedu.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sedu.edu.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanglongedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thanglongedu.com.duy5.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trihemofa.com.vn.duy5.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fbf94d41200000403004630440220272042f7f7d2aaed4cbff9faa5f859586782af0ef2191703f948e6566ccda6c402200a125f1460ad744570a774b843c2a3372695c75764f09b5eccbd2ba95f58a57f00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018fbf94d440000004030047304502205a22de2a58f6a7adef4ea808036aed7a29218ad8d4ac848b4f0514441d63341d02210081cbb95a72c386f66e7a6769ae1e9c799522e77b126c1641d8b0174eebe86df1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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