DV SSL/TLS Certificate for golfworld.vn

Certificate has expired

Issued by Let's Encrypt (R10)

About the golfworld.vn DV SSL/TLS Certificate

This certificate with serial number 04:dc:e4:c2:53:d7:95:d5:5f:11:d9:4a:f4:6b:2c:84:be:52 for golfworld.vn was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate has already expired and will cause a warning or error message. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for golfworld.vn provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 04:dc:e4:c2:53:d7:95:d5:5f:11:d9:4a:f4:6b:2c:84:be:52
Serial Number (int): 423615337438797388384292518790304463371858
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 8c:2a:25:93:82:5a:8c:52:eb:23:e9:88:b3:12:82:ac:61:7c:eb:5e
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): d8:7c:cd:d3:6e:6c:f5:d7:0d:95:0b:aa:54:f9:b8:73:68:82:e5:50
Fingerprint (SHA-256): 32:bd:b3:57:08:bd:5a:e9:e0:8b:f7:ee:ed:6b:7c:a1:ce:8e:59:49:0a:c0:10:f1:60:b0:40:f3:d9:be:d8:fb

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate golfworld.vn
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for golfworld.vn

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for golfworld.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S/MqlnlOTM4wvi2S1UT
5OS0ByIjuWK036gaKkotimEpqwYhPMUNkntJbfjBL/IkD/HkC4ycc3zeM2vS2vUF
0GuzdMYJzpaFs26Q989vYG140swiRcOYhdonxUO1B9Zcst0iBH8i/VTJbnLpD99i
CUWFeXPZubiasvDGovGcWkpc4vwubeFAsq//dcUYFyPVrermDx2FJMqlq9eg+LUk
EcEMz2Mx1AaPAWwwlumysD8cZOKCSD0WL+U0LmJFeIpSb7b8Hsz/yv7rLlu6ou86
mmKyGZhWOsMFr/JCKX7Hnk4sAGR1Uv3JBxbHwjQXlZW3GU8hYT3lzv9cVgo/Wts3
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423615337438797388384292518790304463371858
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-21 03:38:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-22 03:38:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'golfworld.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27417282976933572618923665642939437949362932444009933829711042029766417009809364577345380819543106499607679914438375946478656991288998828026266662972448451708402990027839664457619110160505992035248909234456103464210449164106883838749003895085080243341891560291834467380121191121271265981189174268148327223974149384526013628043153996775124565038332863023271364917579972142790758106995525133164571552882683185616917365577403403857837850105648111306578066622132561864611672308615101126936843141892738570155997089115324459342594969826907543692617799426733102196486455507048831044126167211487117233601567891928662775904163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c2a2593825a8c52eb23e988b31282ac617ceb5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfworld.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfworld.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e092b3fc0c1dc8e768361fde61b9964d0a5278198a72d672c4b04da56d6f54040000019526cba16e00000403004730450220080d0d3aa716e205921d1f7b2b665948ff850eeac269f8a1425dfe9bc3cebd68022100c365be92adf2fd3d387d6e9d5f5790c272cfb6667e65d162c8ece36afb740740007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000019526cba55b00000403004730450221008a8e1f8d8633e54612043f8cc466c05d189703ee7f00e0addac609a1766ee5b4022033c465b4e6ad06728069686971947e51ec07f4505d756605ffff7a1bd143ca1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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