tgh.ghn.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e8:62:8d:dc:83:6a:b5:a3:b7:76:41:45:80:02:68:4c:03 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tgh.ghn.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e8:62:8d:dc:83:6a:b5:a3:b7:76:41:45:80:02:68:4c:03
Serial Number (int): 340413367850924465722095349683600172272643
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3d:f4:82:2c:91:b5:03:e8:16:9e:8f:d9:4e:c6:a8:b3:4f:9e:66:47
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:39:40:00:71:9f:89:55:21:03:18:58:6d:d4:ad:e4:67:b1:10:af
Fingerprint (sha256): e5:86:12:6f:82:5c:5e:b4:f2:b3:17:38:ae:76:c7:29:ed:34:50:43:da:c9:7e:8a:09:df:f4:1b:3d:a5:8b:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tgh.ghn.vn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tgh.ghn.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tgh.ghn.vn

Other certificates including the domain name ghn.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for tgh.ghn.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISA+hijdyDarWjt3ZBRYACaEwDMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTQxNjEyMTRaFw0y
MDAxMTIxNjEyMTRaMBUxEzARBgNVBAMTCnRnaC5naG4udm4wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQCTkFY8fqE+3AkW69fa7IxRc7CtjubbQqVnNrjw
ba035gm1X8n5i2hbNEMQ46IR4BdVwzXGWYHfMCmnKyTqJMTquVSU8Ec/7wa7FPKb
ApnUuFXndO8Tbuy6bBeV1IGQUzKMk1Z9nmRHTi9Ln1k7Odu1z5hzUS+iLal5gP/y
h+RVvezNXvJKhhBlUOddp56vqEIV0W5J8FWxgwEYJCH2bmphRQ6pKrxbCTV7j8Ry
UFZXsjnbrbu7D+QLtIqdHp/Xm4QjTNJuuMk0U6yf2jJrs94L8S3Qygs/V9lcX6ul
92QVoItE/TV9WBxR/by2TEuH1lyUVtQWvdBx5Aa02GS9buFYE6V4s08Vqdc8R5hx
k8CePUvPWT9JbRiI58+dvGHKkQ7O54jPldylz6cPPpekPP8NCW6YKYzQUcenme1E
OMaYw9G5UqJHbkkWYbr0/5aD83uZopXWr3izdXxEIVWhl2tuObF5a98g3G5zWjcN
n/Ei6x6OiCO5twmiOYFw2kUQQp3shalcAsLlf7Kh6N0BUHax4E9uNlaNksGAooSF
rO9eywXqHXkFVx3xGQwVwt5EJfZk64LUUNKW6nsMEBsV8OS6LVScQkfpZGfBjJEV
pbeLSKA34BzHAySdEtJ0Rt4NyxyCkDaKYxw5FL66mmerCXq2Srzod/ewV9XY/S+1
U+bB7QIDAQABo4ICXjCCAlowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ99IIskbUD
6Baej9lOxqizT55mRzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnRnaC5naG4udm4wTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDw
laRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW3LQY6hAAAEAwBGMEQC
IEv5OH2255Uhpe5PwBNNv/Qh3wLlsycuTjizMddR5lNeAiBRTEspy5Pu+8ayvJbF
uwlfVOrt1zqwlqow0LcvV5aEawB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJ
Uy3vi5BeAAABbctBjpEAAAQDAEcwRQIhALGS3FLP24l5Q6IbGwjb2SPwrRiO4QBl
abz7MaTEBtPrAiAf9altHxEzJp5p+bBiHOCDF9AFkKPIXGAee4KtOJhZHzANBgkq
hkiG9w0BAQsFAAOCAQEAJmEKjhAe7ZBMiGiSGx1YCZfAmcf+o56gLg+hLqSeTqki
kS23kIpKUzvfz/fbt0IPqhVIos65duhcnuiXo9Vjk67pDgQ0AaOFrJUhuARcIQhK
ueoUhiHgj9UN1s56K/Z2VRTidzvt3lKgh7iRb4+rYNmdFjhWIqawEViFaiihAmSi
Y5onqxWG07Vf4H2onm10M2sk/zv1FOepIPCWYQEI4DtvWjLmV0Oj1oMLqGz7dY9k
BHEa1Pe0SAiEm4PL6jSCX5D24OSbb1c2Wp4yQjAQAVj1Yh2BZ+maSdoFG0/DI3gf
dAArLXv/68cOiKJ+vaPIjhA8qMRLsC5Q2AcmKZWEnw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340413367850924465722095349683600172272643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 16:12:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 16:12:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tgh.ghn.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 602007846034277963581031123959818601698062518211462818750941225362104768112843265793841977865578975495396510892568721182821144178113010005834075415105873255357253645744217640454006271127947996960681581539195210250808739177413163596549823343449659994675654595465903163615347475331649610674477671915939988641799800295787158725533352244273093364346784570319563171121095212951013553178935604134110336217658909530191964763996153139601934653242743144475150303848527743442680943701661320143304277618048638299537544963507802411781171989651194195514535999759182645163137425178870882941900622362584949036996603590275274857629598515116215758635161140608776303504173482561103386987195608394876170477042898614787954048095146697308792715389104923702317522917424547480365259365223417689711661530778243938599405164248286741818735429087265964049436679565049266126132730932031681033559718723498710693409669564046792792346999911682573293132852569991200982385407964759937913125493698953356290369276043613930080704907038375029144984039171702809417708375112000388829574263185189656069964913316030182487486382477510710325516535753549220268512930953451592090745403892426764661758030909814501690874181264967173713082338877726618009728975111940003982832222701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3df4822c91b503e8169e8fd94ec6a8b34f9e6647
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgh.ghn.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dcb418ea1000004030046304402204bf9387db6e79521a5ee4fc0134dbff421df02e5b3272e4e38b331d751e6535e0220514c4b29cb93eefbc6b2bc96c5bb095f54eaedd73ab096aa30d0b72f5796846b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dcb418e910000040300473045022100b192dc52cfdb897943a21b1b08dbd923f0ad188ee1006569bcfb31a4c406d3eb02201ff5a96d1f1133269e69f9b0621ce08317d00590a3c85c601e7b82ad3898591f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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