giadungducmag.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ba:b5:52:19:a9:9d:8f:78:d5:3e:4c:26:f5:d2:f7:78:75 was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giadungducmag.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:b5:52:19:a9:9d:8f:78:d5:3e:4c:26:f5:d2:f7:78:75
Serial Number (int): 324870394598653325922674717226091985467509
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:55:c2:b6:92:c6:d0:d9:94:9e:7e:0f:a2:16:5a:b2:07:bf:00:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9d:dc:b2:ac:51:54:f1:f3:2a:54:f9:07:1a:9d:f3:89:0e:da:2d:11
Fingerprint (sha256): e7:fb:70:d4:3f:3e:d8:af:5d:ac:bc:0c:2f:78:b8:54:b9:e9:17:83:89:c9:0e:f1:58:1b:78:d6:a0:cb:15:71

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate giadungducmag.com

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giadungducmag.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.giadungducmag.com
*.ihappy.info
*.ihappy.vn
*.otochuyendunghanoi.com
*.simicon-asia.com
giadungducmag.com
gioithieuban.vnpay.vn
mail.meyluciabay.com
meyluciabay.com
otochuyendunghanoi.com
simicon-asia.com
webmail.meyluciabay.com
www.giadungducmag.ihappy.info
www.gioithieuban.ihappy.info
www.ihappyvn.ihappy.info
www.meyluciabay.com
www.meyluciabay.ihappy.info
www.otochuyendunghanoi.ihappy.info
www.simicon-asia.ihappy.info

Other certificates including the domain name giadungducmag.com

(limited to 100 certificates)
caobanlong.duy9.name.vn
*.otochuyendunghanoi.com
mail.meyluciabay.com
*.giadungducmag.com
altaisibiri.com.vn
mail.meyluciabay.com
www.giadungducmag.duy9.name.vn
www.profilecolormedia.ihappy.info
www.profilecolormedia.ihappy.info
giadungducmag.com
*.otochuyendunghanoi.com
ibcwines.duy0.name.vn
*.giadungducmag.com

Certificate

The complete raw certificate details for giadungducmag.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07WtbdfDaqj375JfT6d7
w1HOkZtpjcTFgLMBX85d5RXhNFVSxiaZPs1MNSUGrmF6hAhKNn/ggUjsyJIC2b8a
z3CyWRkI1JjDbzeG1YQxkcmhP0PyiIdfQHp3W2HdZNMXiL4ARkT/PUw077fjV98K
6107ek2mDyPpdbpmlO5eOCVLCHakyMxtFwJCjalEqWgp9lNKniOG7XvzhJQWe2XL
2pueL0Vf+RoqDx7XzLc2mP96Lf6oZCjbCAV59qxzMtWsGM7Md3KBOFLg5tkQm3Z+
/07w2vwlAe5H+6bIMMCUZOa8E8KJorERfwf4p+OOS2qOnNCQ/ZTLBZAlg00c1nsH
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324870394598653325922674717226091985467509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-08 12:09:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-07 12:09:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giadungducmag.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26725870841050992682752604996667125709472264024950927063842945803899951846685865191226277380878175192595688405356831789025112966088978769245414970996509363840415336855731705389579559634438256053231150307217984172337804841855885288273666632780404478824069854175219435420362969817922077933105942293053759690697924025830576595975950184748873940028660156000109661304433299939410573539649591793775561092865392851816247093915802551558309147295310945411162962807650772716522440246046402460310461778880781746070815788415320898341669940637514896358828203343785971235191601211103975732778077763008078432696279836274103424845597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c955c2b692c6d0d9949e7e0fa2165ab207bf007b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (450 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.giadungducmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihappy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ihappy.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otochuyendunghanoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.simicon-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giadungducmag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioithieuban.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.meyluciabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meyluciabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otochuyendunghanoi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simicon-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.meyluciabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giadungducmag.ihappy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gioithieuban.ihappy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ihappyvn.ihappy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meyluciabay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meyluciabay.ihappy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otochuyendunghanoi.ihappy.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simicon-asia.ihappy.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000180094b51b20000040300463044022024a610e1d2df395a1ce95f406c6120c1c0ea9ab3d7b793290eab534aa0a7e08802206b210c8cf19101c3248006f13628e89297f21bf3aece1a7af794f6787a6603900075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000180094b51a7000004030046304402204f002b8ff3fa770bad9f271c56ac23e021079e47d90eceec666950a50d2d35c1022011e74d49ebe1425a6603e45b693959bf112f60901507f6029c9ea99719234d68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0078b8e5810f8e71419bd4975c5c6b4fd964c685261c39038cea68a6cc0ff36f1571b1b6c5a69f921ab75a8ac43f2379bd9486f5a3638a4a38e1df0d9e24f07d8b9b4331f9a474eb9d51fffb255d56017a4add8f3a5c4173fbbe68057822a86300cb786b27cae40bf69a23e597e888fae4e5cfb02bcc5af5cf0eeda64b5b3d4b4c3f56a32253ae7a678f3855f3d5171d39454f6ff4f25df068cf57711326932e87a2f07e186a1fdc25736a5480fcf1015225bfd60fb90dbcd00bb49ec91770f836544daf475975163e51e0bbbb10c2c657482aae11ce565f35c2c8e596d9aed7bdc59b44ea656eda58ac5e317f726018656d4cec81920c9127a02f17e2f17bbed9