safure.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:24:2c:34:8a:db:a6:35:82:33:9a:4a:27:82:bc:05:4c was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=safure.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:24:2c:34:8a:db:a6:35:82:33:9a:4a:27:82:bc:05:4c
Serial Number (int): 284864422847422290391064228735707774715212
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:3f:c1:86:15:45:89:88:de:7b:56:3c:b7:1f:88:10:37:f3:3e:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:af:29:55:e2:a5:5a:02:ad:b9:64:79:70:c7:a0:69:d0:73:24:f5
Fingerprint (sha256): dd:71:a9:60:c1:77:cc:a4:8e:3a:95:ae:e1:34:68:56:55:d0:b1:98:9b:6e:ba:e7:da:be:09:9a:3a:3c:18:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate safure.vn

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safure.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.safure.vn
phimdoanhnghiep.com
phimdoanhnghiepcom.ihappy.org.vn
safure.ihappy.org.vn
safure.vn
vietkobio.com
vietkobio.ihappy.org.vn
www.phimdoanhnghiep.com
www.phimdoanhnghiepcom.ihappy.org.vn
www.safure.ihappy.org.vn
www.safure.vn
www.vietkobio.com
www.vietkobio.ihappy.org.vn

Other certificates including the domain name safure.vn

(limited to 100 certificates)
www.legiagroup.duy8.name.vn
aemedia.ihappy.org.vn
safure.vn
safure.vn
www.covatec.vn
kiovietnam.vn
www.safure.vn
vinako.edu.vn
xulynuocbacninh.com
safure.vn
safure.ihappy.org.vn
phimdoanhnghiep.vn
catechvn.tu1.name.vn
www.zoncn.duy1.name.vn
safure.vn
safure.vn
safure.ihappy.asia
catechvn.vn

Certificate

The complete raw certificate details for safure.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jkR+y6DslEAZByyPteK
EAvw2Ikz95Rsxn/a1FJxIxDjDMHKQxUrDsVA8UGV2/E7CsjspUN5wItzBGMZIw4f
OEyKXV8S28Nh+lXu/iYFhAAi15XpzTDn/MpWSbbRWqNYSkG1IyyPqhPQpJg4vh7q
5xrqyGtBXrJpR1PzxLvRby7G9IM5tS3ImTi4K6l+CEP/saQCNSX1b7MY1zWTMPpq
SpRSbk2UdjxALgsNyK5S+rBo8O4XJw60cP6rSTQ1AhP5Y+1056HJelTXPspbIBxJ
nlx2t2xtRxvH/nVQE8PmNp9wPqPD4V9jH1zadXnhyO9NAzNLPEBVn6/puwdzXCHu
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284864422847422290391064228735707774715212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 16:00:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-02 16:00:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safure.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27043139646457864247967045988764271169391347786594121791431655511009081657356678929958172077001197311659751207427502456735630060316584744300280777119040207421219578871179587698572303183275776275914224893764764878351026897458360519396691895503199311275489502862397813026015128921879178053968680221087610039277614999695015988676398994323942170419050013321727063894207212085964098585755835971898100700054258190478572413610353021806772721294216808946355062733950545781279489059520998297430802834367418331210874190845309282470144251092250551709525183326883658706609184011058281486020591656500536232525646318349696523955887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab3fc18615458988de7b563cb71f881037f33e6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.safure.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimdoanhnghiep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimdoanhnghiepcom.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safure.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safure.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietkobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietkobio.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phimdoanhnghiep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phimdoanhnghiepcom.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safure.ihappy.org.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safure.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietkobio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietkobio.ihappy.org.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d97b775be0000040300473045022100ddfe3a54a6ef3a791a76666cd5802dd89a1324ae806606d6ef56191fe0bfe4b802205de55dd5169fd13053b19f38a40f3eb03ba13a9dc328bb07778dbac8d8bd37ae0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d97b777970000040300483046022100fc51c7f8a0f022ee9ed969073e2f3cf2652eabf22cdd65889305dbededf5c7a9022100dcf4fe959d0b5ee0a28bde5628216441c598e3f54a68ef87392cc5e6c9941403
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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