tiannenggroupvn.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ff:13:7a:5a:e0:51:2a:5b:25:9c:e4:a2:2e:da:e9:fb:8f was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tiannenggroupvn.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ff:13:7a:5a:e0:51:2a:5b:25:9c:e4:a2:2e:da:e9:fb:8f
Serial Number (int): 348134751995445794996542763809746576866191
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cd:a9:64:72:18:58:fb:82:1d:98:80:c0:8b:71:99:6a:ce:89:2c:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4c:1c:54:e3:2f:f0:dd:df:b9:f0:42:42:26:7f:3c:c5:ca:b8:43:5e
Fingerprint (sha256): dc:cf:1e:01:b8:23:53:74:b9:3a:6c:6a:39:21:46:ca:1d:bd:60:41:5a:ab:a5:02:48:c6:ad:e4:69:c7:ae:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate tiannenggroupvn.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tiannenggroupvn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

668jsc.duy6.name.vn
668jsc.vn
datvangtiemnang.duy6.name.vn
grandeurpalace.duy6.name.vn
grandeurpalace.vn
mayindatehc.com
mayindatehc.duy6.name.vn
tiannenggroupvn.com
tiannenggroupvn.duy6.name.vn
tonmatpan.com.vn
tonmatpan.duy6.name.vn
vinhomes-vuyenhaiphong.duy6.name.vn
vinhomes-vuyenhaiphong.vn
www.668jsc.duy6.name.vn
www.datvangtiemnang.duy6.name.vn
www.grandeurpalace.duy6.name.vn
www.grandeurpalace.vn
www.mayindatehc.com
www.mayindatehc.duy6.name.vn
www.tiannenggroupvn.duy6.name.vn
www.tonmatpan.com.vn
www.tonmatpan.duy6.name.vn
www.vinhomes-vuyenhaiphong.duy6.name.vn
www.vinhomes-vuyenhaiphong.vn

Other certificates including the domain name tiannenggroupvn.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for tiannenggroupvn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xAgS1xAujzIFwYHFrkN
7ypLmbdCuU36J/7j96SugDoa1ZOYroR/64oUdxVkqj+pV9RZM1FX+ggSKY1jBhp0
hSGJoTjXdKcWX4E5rdX2B95VRGmsE3RiyAuFZVas8Egc1qVG3fqI5rh1QpRZJbo6
QpgZxwN8+lneDWXsO2Jedy3RYCc8Dnv/XoCuOG4S0PfvNBA7EZLSea51qf6FreMZ
SL/dkMXeJeRp68+T5EVX/TbUwSm560Ono6D7zN3HnHKdgUHYvc+aXq2b1bcuaMq7
TTmTzh9lw0F7Kkofd/4vFz6hGK5tZG9/JRZJHT1Y9x7n6N0AbXCCXf2+KUkBuZgp
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348134751995445794996542763809746576866191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 18:05:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-23 18:05:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tiannenggroupvn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29673953767922209921797430291997611869981484493369110235587624094551459517533039663113555461034806104358673178882504497126844134780068255256493457860519841795735174017483208030750277614929165679677966758564439337247572850154793053984913356003025882586251391001169877100532221802603103650005572407383117039366461513974447972228982433746872261949075655945503708129432870788727752935259306209248024476306552164549780383302664829306655517003435219378466079833465623626022011738190721119419406930483908821832893706051881173085500969471354278897216303162376336719985202383008998705281923743721643438904683424215189237016849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cda964721858fb821d9880c08b71996ace892cdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (636 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '668jsc.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '668jsc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datvangtiemnang.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeurpalace.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandeurpalace.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayindatehc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayindatehc.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiannenggroupvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiannenggroupvn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonmatpan.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tonmatpan.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomes-vuyenhaiphong.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinhomes-vuyenhaiphong.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.668jsc.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datvangtiemnang.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeurpalace.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandeurpalace.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayindatehc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayindatehc.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tiannenggroupvn.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonmatpan.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tonmatpan.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomes-vuyenhaiphong.duy6.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vinhomes-vuyenhaiphong.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018fb1251985000004030047304502210088d9d74a0adb560439b746ac8346a5e412cdc89d1b41494a744efcd545b55ace02207a1dce4ffd005f30f685de8ad5888f4daee96abe9fe1c22a881e1716246f5e8f00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fb125197e000004030047304502203969b970dae614fe59c693047ea40d80833cfb630cb7bcabc36271ddb0d7ffad022100f5529f12a56a0965978e62883dbce17be09b8ba9cb6d9787e9fca86292c0a651
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00920e0a2c7251ddefa8a800efaabd59f28636452840398114deec6efda31e9d4b196cd0378950afa40a6d20f3e18c93e134bbeb31ceae5c93f77fa19f32b57acc017a9e74cfe54c7f3158a8326c2ed9cebbb14779df9bde8c1f213e53cb70524ffd7f1d86a9fe2e3ed91c7b313f50b824469cfb9527e9f95d2147cb1108aec0bbf68d3773a1362d86b8a11361182481e0d14eb0f5d8507869341eceb214079f3938a35caad25165f246f97e9c20215156f47fecee696e7054aed9ab0fae2d292f26d6d649cfcdf9c969e6f06c98ae47024f4cb47f9effc28233cd4cc0f11832798a3b3ac2e5cba6a11b29a7aa65b19da82554f4c5c73fe0bddacf8f87c8f65cb6