www.quangminh.duy8.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:ca:09:0f:69:4e:b2:02:56:69:62:c0:0e:62:27:e8:55:9e was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.quangminh.duy8.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:09:0f:69:4e:b2:02:56:69:62:c0:0e:62:27:e8:55:9e
Serial Number (int): 330085938985613148041949324285806775915934
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:91:e9:f4:75:7f:83:0c:d9:92:9f:d9:04:73:6c:9e:ca:94:2f:b8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 0d:7c:d0:08:c5:06:4e:44:fa:d7:fe:33:18:12:ad:c9:77:a8:85:28
Fingerprint (sha256): f4:12:1f:77:30:7e:eb:bf:3e:76:52:7a:2f:5b:e9:00:ec:85:7b:42:e1:a0:7a:a1:da:5f:4e:b4:dc:66:b3:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.quangminh.duy8.name.vn

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.quangminh.duy8.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nicehairvn.com
bizgotadi.duy8.name.vn
ginzatea.duy8.name.vn
ginzatea.vn
gotadi.duy8.name.vn
nicehairvn.com
nicehairvn.duy8.name.vn
qmjsc.duy8.name.vn
qmjsc.vn
quangminh.duy8.name.vn
thienlongcnc.com
thienlongcnc.duy8.name.vn
www.bizgotadi.duy8.name.vn
www.ginzatea.duy8.name.vn
www.ginzatea.vn
www.gotadi.duy8.name.vn
www.nicehairvn.duy8.name.vn
www.qmjsc.duy8.name.vn
www.qmjsc.vn
www.quangminh.duy8.name.vn
www.thienlongcnc.com
www.thienlongcnc.duy8.name.vn
www.zhnordvn.duy8.name.vn
zhnordvn.duy8.name.vn

Other certificates including the domain name duy8.name.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.quangminh.duy8.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oeb0nOep8hUyUqdP7f7
/PwbcaVYOed5qrPwbjDLB7CznG6THFdM3FJVt5TRqGLRTuH2gHvZYsIejWgdWhjD
OA3EE9o2Cpv6XtpO5G39GvRrVNUWLvjVkhK2MXy9MIKDZ63qaQqK+iT8BmHaKVR2
gugqGF5cSj4uJUUOEj3/K48jpDSs+vF/SJ2hA6VsEkp01pAZ9QT6H1FPQl/iN+yr
HXgdRml2XZB866fZd4trKr/iqOdX3JYCtscNGeNgobSq303IdCF2wXTO+IPJ2hBM
ff+HlC5ZuRiKchq2IHw6S3EzYQK2Yn4nOVjSm1vHb7f+xLn+ItbDcMwRgKCnpJeg
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330085938985613148041949324285806775915934
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 16:18:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 16:18:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.quangminh.duy8.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29101681274616396852494864649760046586037983333892681790886378990520174061473977546963246721100598105349591252469227022147332645090394318596509279038419053119323240456421213639780234703406670288970060803890114177409151701675040448886539856738867771151987315002146682359352255351802262805846444066416115896910999770718587592286334195794144561953032026272033295981046332332546253405898019383672034483033703977263309810429112636811149171973916433578563984632074317127781600268505239406353207287052880615606707236862628509708351309078158082681811031857468961269514704442771352895077911665159886460792098875556540299321471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3291e9f4757f830cd9929fd904736c9eca942fb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (538 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nicehairvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizgotadi.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginzatea.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ginzatea.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotadi.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicehairvn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicehairvn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qmjsc.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qmjsc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quangminh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thienlongcnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thienlongcnc.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bizgotadi.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginzatea.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ginzatea.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gotadi.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nicehairvn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qmjsc.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qmjsc.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quangminh.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thienlongcnc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thienlongcnc.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zhnordvn.duy8.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zhnordvn.duy8.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aa426644500000403004730450220629d1a4baa9cdc8341058a421a7b9608ab1afda86d88f9500a00f39edeb152bb0221008c02a3a40e698f300d4669a5b453da48f7276643eb9ebabcf6f062edc2534b88007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aa42664870000040300463044022028298a9952cc8ba0ec7b0c5b608d29afb7ce6fd31644f99ba72a8fc911c2940102207cb5f1ae5756eb4ade8e090a4082e4b85d9440a0d83d554a48ed0326849ca2af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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