tgh.ghn.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a1:ba:28:16:cd:73:f8:b5:f8:33:77:ff:9e:aa:4f:23:3d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tgh.ghn.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:ba:28:16:cd:73:f8:b5:f8:33:77:ff:9e:aa:4f:23:3d
Serial Number (int): 403482049362893090994384651427726201135933
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e8:bb:91:fc:9d:79:c0:00:1e:0c:dc:e6:94:96:59:c9:93:e1:36:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 42:e7:52:30:e8:02:d4:16:3a:93:45:f4:8d:6d:39:b6:55:02:a9:f7
Fingerprint (sha256): ee:4c:23:96:77:a9:09:4c:3e:90:9e:8b:db:70:4e:bf:4b:66:de:3d:4a:d0:43:51:62:dc:8c:81:58:de:52:0d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tgh.ghn.vn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tgh.ghn.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tgh.ghn.vn

Other certificates including the domain name ghn.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for tgh.ghn.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403482049362893090994384651427726201135933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 16:16:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-04 16:16:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tgh.ghn.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880063975663768048879665856070686841528326119389422189567253191938138965526232563180730884162759405036567249439726077534737613396425819026617028809084167341353672756545522951815345852427750929562122191375517433459432238191064016940910845211473057162657343572160565835865116984370943890710263543006793337804575890942719722504684037617144199158690350938432485774532122619868759116532041950224528785657426823976751134320292251859922775241368308563477211626786079176733689854397331020360701119760610999278004616115139579494052675340289643008460164111941697028356616447905170748297570656354485363328790569184874952115094795983706358566709917870841039434128765007132700256927974332888141377707839508434898553127357257277597360493109403440209652096688866207186784447602933697407738611396739179417316829724924931707763516152016491766322795099502082788135836570853228773745249088657153855150839574789666072332605227272466500460861953168276523351707919537460050120258464413117586636714247553917722869482809068426022898566517995351334990174151955258859914494279794666856009397836289277509113847713946785011469241126003785174785043238106902378430370724150137314711722877508504278527106465826137271726330393411487384073353243461703566222987747671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8bb91fc9d79c0001e0cdce6949659c993e136be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgh.ghn.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c67eea8350000040300473045022100fd49b8106f4a96600e97a102ac0264374088f0cdbd29593befbd711b8b4e7bb202203e1e1812c2958c1f97df048f81057d5d4c7ad95a203a6d87b3759aef411ced03007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c67eea82e00000403004730450220158ccaa0844a835009d35d1ba590d86223a36a6dabea78d803d9a5a6d7de09a4022100c1cf49effe12b43659cc343804ca0ee9531a1c2b92189f0f051a303701546f9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0011c76111205754da57c08b9959abae8201a760cd13d558c0d47363d8a8b46d0aa8b088f6f0aa88aff54c2c8d0eac1b56028ec2367814509bc484a3bcb228851a7ccaf0c78100e107be3efcfac0dcd09f0b1db7496cd998c04fb46a676cc85da65fcc02f16f7e50382dfa1d67f65022d6584f29a86db674811639fc75d2c792e6e00f5aa54fb3c0d91905b14b01ba5989984161499f591fcb7f6ed17cb383f9d07dcf0f870d85b045db6f0a04bae99039a1961744eaa54e4f473d6080eb870d6413cf31b887289a5eda34e6e849d53de859c1b59630f6585b1a70bae2f341501fb2f7556f01e2f306090acd7aa7b431ea0d5807cf2c5875143398121e5b3e6be7