www.congnghegiaoduc.hust.edu.vn.duy4.name.vn

Issued by R3

About this certificate

This digital certificate with serial number 03:6e:2a:22:68:30:39:d9:94:7e:29:72:f3:9c:36:00:ac:25 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.congnghegiaoduc.hust.edu.vn.duy4.name.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6e:2a:22:68:30:39:d9:94:7e:29:72:f3:9c:36:00:ac:25
Serial Number (int): 298823924383691581835802836532301966388261
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:c5:38:c1:8e:e4:d9:fc:f4:5a:ee:13:79:bf:be:ff:bc:c6:e2:73
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8c:51:30:45:79:b1:17:61:d4:e3:64:11:14:21:b6:28:06:91:23:12
Fingerprint (sha256): f6:7b:e7:92:9d:e8:78:3a:fd:2b:86:22:eb:b7:00:7c:fd:aa:73:66:71:72:ea:ff:7f:23:c3:2d:51:3e:0e:87

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.congnghegiaoduc.hust.edu.vn.duy4.name.vn

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.congnghegiaoduc.hust.edu.vn.duy4.name.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

congnghegiaoduc.hust.edu.vn
congnghegiaoduc.hust.edu.vn.duy4.name.vn
gioithieuungvien.vnpay.vn
gioithieuungvien.vnpay.vn.duy4.name.vn
luxury.drhs.vn
luxury.drhs.vn.duy4.name.vn
men.drhs.vn
men.drhs.vn.duy4.name.vn
ngoainguatlantic.edu.vn
ngoainguatlantic.edu.vn.duy4.name.vn
www.congnghegiaoduc.hust.edu.vn.duy4.name.vn
www.gioithieuungvien.vnpay.vn.duy4.name.vn
www.luxury.drhs.vn.duy4.name.vn
www.men.drhs.vn.duy4.name.vn
www.ngoainguatlantic.edu.vn
www.ngoainguatlantic.edu.vn.duy4.name.vn

Other certificates including the domain name duy4.name.vn

(limited to 100 certificates)
www.digimindgroup2.duy4.name.vn
www.shopbanhcuon.com.duy4.name.vn
locnuocsmart3.duy4.name.vn
truongtinland.vn.duy4.name.vn
webdisk.vaihoalam.com
tonmatposhacocom.duy4.name.vn
baotinlogistics.com.vn
cpcalendars.duy4.name.vn
xenangsc.com.duy4.name.vn
locnuocsmart2.duy4.name.vn
dailyfordbacninh.com
vaihoalam2.duy4.name.vn
lidolounge.vn
canhdieuxanh.duy4.name.vn
www.asiapacifictravel.vn.duy4.name.vn
tuyensinh2023.uwebristol.edu.vn.duy4.name.vn
www.congnghegiaoduc.hust.edu.vn.duy4.name.vn
www.saotech.vn.duy4.name.vn
www.congnghegiaoduc.hust.edu.vn.duy4.name.vn
www.bidv83.duy4.name.vn

Certificate

The complete raw certificate details for www.congnghegiaoduc.hust.edu.vn.duy4.name.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BtvcENGBgsLS0Zaqeqg
X1jPgIjOEss9knldJmP+esoXCT0mKoXsZ2RIRerVx48DrmbzF+MQVUtz/E9ur4jV
KXw5XWH/T6V0cg1HrT/yRndu8f+aa5WpiJ4wDbg0V2FrtA+zDhRFTjACtK0unuAI
35xrM1v76hIB3LX34yWkJiIhmIU/1XRZFWp1P2OUK71YkwPFakN/iFWhk+OHDVtJ
3ACR6mT7KKDvKDHr9IAljOONv/ktqz0tJFWlrs/9rsrrh0bts37DBXcM/PyTXJuz
0jGonxHjptKW5J5Rta//derxd/3qV3Q48gSicXFgiZhNFUGZ966b5C6vVZeZAPcA
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298823924383691581835802836532301966388261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 17:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 17:19:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.congnghegiaoduc.hust.edu.vn.duy4.name.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28795862386244219010181229415083831462288077027362733380215260375673633868878540149993349811635869786052197532913739454459779001781378343182724739515030135322459958522438805262187136295361499469494114553008010243571652599800079361307355094347939487082382976771423206180246668990509383634810269307158099924083441811963094906899382208691873803161946779997885025239647304373645096315006099125440787637453486706174525064386529140017640112530999578864373669239412006714052670692737417537479542053868248420606097841924840904603765857498076745393026865078804510871854273557458436416297839328022673855772361569317132839616723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2c538c18ee4d9fcf45aee1379bfbeffbcc6e273
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (513 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congnghegiaoduc.hust.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'congnghegiaoduc.hust.edu.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioithieuungvien.vnpay.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gioithieuungvien.vnpay.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxury.drhs.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxury.drhs.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'men.drhs.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'men.drhs.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngoainguatlantic.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngoainguatlantic.edu.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.congnghegiaoduc.hust.edu.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gioithieuungvien.vnpay.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luxury.drhs.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.men.drhs.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngoainguatlantic.edu.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngoainguatlantic.edu.vn.duy4.name.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f4f2254a1000004030046304402200e1dd460fafb99224854d4fc1f27fccc27af9820c23540660603824c5a1bb47202204f6c4db1b53c59259da32f5a23736a1b2d1ca1494170fc87f161acd8a81c428800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f4f2254e60000040300483046022100f53ce60cdfa721c69d2c39be99c21168f207fa40486981152528c6ff42eb766f022100fa09cb14a3f97c39b23ee02373d51d2a47de2806025a8d975b1f2738c3b0ac64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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