*.vnnic.vn

- Vietnam Internet Network Information Center -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 52:73:f2:88:55:73:62:56:42:c4:53:57 was issued on by GlobalSign nv-sa.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Vietnam Internet Network Information Center

Organization: Vietnam Internet Network Information Center
Organization unit: Technical Department
State / Province: Hanoi
Locality: Hanoi
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 52:73:f2:88:55:73:62:56:42:c4:53:57
Serial Number (int): 25517942602209399707336463191
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 10:71:0a:de:ba:e2:8b:04:3b:14:55:fb:c9:9c:ec:14:e8:7d:3d:8e
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 50:6e:f9:0e:8d:57:3c:b9:03:67:66:f4:b6:12:5c:2d:f8:b4:1c:58
Fingerprint (sha256): dd:30:54:ea:ef:2a:40:50:e8:0d:ca:8e:e4:df:25:ce:66:c2:70:79:d7:4e:de:80:4c:0d:c2:18:e0:16:ab:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate *.vnnic.vn

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vnnic.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vnnic.vn
thongkeinternet.vn
thongbaotenmien.vn
tenmien.vn
vnix-nog.vn
vnix.vn
vnnic.vn

Other certificates including the domain name vnnic.vn

(limited to 100 certificates)
helpdesk.vnnic.vn
helpdesk.vnnic.vn
www.vnnic.vn
*.vnnic.vn
www.vnnic.vn
www.vnnic.vn
sc.vnnic.vn
www.vnnic.vn
www.vnnic.vn
www.vnnic.vn
academy.vnnic.vn
*.vnnic.vn
www.vnnic.vn
*.vnnic.vn
academy.vnnic.vn
*.vnnic.vn
www.vnnic.vn
www.vnnic.vn
www.vnnic.vn
helpdesk.vnnic.vn
*.vnnic.vn
www.vnnic.vn
www.vnnic.vn
*.vnnic.vn
*.vnnic.vn
www.vnnic.vn

Certificate

The complete raw certificate details for *.vnnic.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CtOg0ke1HpcAHmU9a84
CP7JZ/CiKY9px+hAOwGcL1omkNLV+3ouI9YZ8p33tReRg/BxukMzwQpJE/HtjLR4
V7UUWQyYacS0uCMQd9TFztfHRS1ERvyy/uZTWb9Cod0EvIh9Gl9Pah0O8+MusPA4
PWvJuNGcVu5dOY1e7/5eLdkAQEOfpKUVnw+stLWKl4oCz6Q9frIbVXWkmBHZCznG
ES8FrXMni1agRCb40M25Da8lb9S+PSyuWn2aN+lB+FAxLP6HaOFVjQlWgya1J18N
mZHymxSq2TasN3aouAaetHmXBcOAg+1HTG7u+Rhvq5NrQPCsb5y2q+YjkbVbtuab
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25517942602209399707336463191
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-15 11:26:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-16 11:26:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hanoi'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Technical Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vietnam Internet Network Information Center'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vnnic.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29813595297127302961380748755955606155479968843325440859493099969530728976097752769133685963377706216149164256153296602880008288279174698858768975251693860429031525000438771121497093692927483190762903575782900012261563722745559244759627283542290086167424826597047686574342611047704915517971309402219304529650083443529001229517788243493646419787640551427731232036778972206751649596277853968874981110488775724291874121937705668120447505362119900599524966329527090117625485034049960755796138793660126074907300756692644420201714950988566800804799565624003791681344657267425178436102527882762858152543752614927223035960081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vnnic.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thongkeinternet.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thongbaotenmien.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tenmien.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnix-nog.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnix.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vnnic.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10710adebae28b043b1455fbc99cec14e87d3d8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000176662700020000040300463044022048a2f9f92676914f7c39d0ceff42721c996d7acc347017c0d4212fadebdfa62402200cf1037b7039128d1f95c62086a452e42f06f68d50429fbe1467e6f1e592ada500760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e500000176662700260000040300473045022100bfb9edd1e50a7383ca2959498ed0c59de563787ee7570b4a9ccc66bdcf42b30a022048c59ef6a9927fea808e49cb63a99610a771208c4eed031f50347e2ec6e7f3bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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