ghn.salekit.vn

Issued by ZeroSSL RSA Domain Secure Site CA

About this certificate

This digital certificate with serial number f5:31:c5:f3:d4:50:2a:ed:e8:c3:fb:64:ad:5a:e7:23 was issued on by ZeroSSL.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ghn.salekit.vn

ZeroSSL

Organization: ZeroSSL
Country: AT

This certificate has expire since

Certificate Details

Serial Number (hex): f5:31:c5:f3:d4:50:2a:ed:e8:c3:fb:64:ad:5a:e7:23
Serial Number (int): 325919296466215744636275753673473845027
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cc:da:c4:7e:1c:52:1a:43:9b:d4:a8:6e:9a:0c:61:e6:74:0e:13:5b
AuthorityKeyId: c8:d9:78:68:a2:d9:19:68:d5:3d:72:de:5f:0a:3e:dc:b5:86:86:a6

Fingerprint (sha1): e4:c9:0a:b8:32:d1:a0:40:cc:90:e9:41:80:9e:70:16:55:9f:3d:2b
Fingerprint (sha256): fd:a0:e2:53:ac:0a:f4:88:c4:1f:10:7d:08:04:1e:6a:77:25:dc:46:22:5a:42:ba:8e:99:9b:c3:b0:6e:7e:79

Issuing Certificate URL: http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt

Revocation information

OCSP Server: http://zerossl.ocsp.sectigo.com

Check the revocation status for certificate ghn.salekit.vn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ghn.salekit.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ghn.salekit.vn

Other certificates including the domain name salekit.vn

(limited to 100 certificates)
salekit.vn
push.salekit.vn
salekit.vn
staging.whatdosquirrelseat.org
*.salekit.vn
push.salekit.vn
ghn.salekit.vn

Certificate

The complete raw certificate details for ghn.salekit.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd1DyrOnVMDFDKn0BTGi
KIighS/L4iAv02uzHJQhpMy1+GgeVCr+Owt4Ecp0UQkUIX4A8w9FlNtJkn/aCXMR
/RGtRT8hFz16aU4Qcd6rqweM9XhT/447INyi3Am+i3jPplB2WJTwakZ9Pz932WVM
jTbKHpnYPba0xyKZsTRBpymwkwGP9YlDokrjjU2JjCHlTQjd+CQ5ka/RVs8/+yyL
qtzFRAC4JVec1KpNRRnIpo7czeYqnoB1MCk6R++qjRpfIEJ5XQSYui7wPTlqqxJk
+OpuMhd71zmG0/kieHm/57qa3NdQtwkLg+VY9z9SI2xPexPgTFx51hNsZLX+JA75
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325919296466215744636275753673473845027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZeroSSL RSA Domain Secure Site CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ghn.salekit.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23968149383826804024622351951566599220722106945457505534731470720817163628142862512317923782830523022324313889930958503867554695339964739294660013844045708048336283298027162517321397165965500433583330795656219274993332471407703117207166221715480299560808149621070717713316864821077470739610561381751494125232101660723068507326695379885296745024904670642059436549879871509399478129172800394117251992004930702572966945226796169610381696804169499322063140519815899803713203843649172472301327282498531674818280747413914887697917298706197036934922175332530512233048583512757030127568807380808284574784468039553367327832451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c8d97868a2d91968d53d72de5f0a3edcb58686a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccdac47e1c521a439bd4a86e9a0c61e6740e135b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.78
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://zerossl.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018db8a85acc000004030047304502203054dba48332bf57c04f3f92532044e3026ec82da88defacaf80820e51d800aa022100865293eebb6f0048f29830c3f2b7bd4508425676aeacc50c608008ca06970ccd0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018db8a85b0b0000040300473045022100e73afa928270c933aa428e54e1b3c1d916e4a5345a3cc1976504938e70e9cd3002205128e84b84a615ebcb6d290be348d953099e47c62625969f21b19788ffcdf79d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghn.salekit.vn'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0052b51b4705a58d4da7d0c5080f2286b8e15d4a778b54bbc4ffe5f80ceea390025ff2739ac9a2d97aaae638db75123b88cbcf19ad1121815e884cd406a4c8eb1353771c6ff545b8c92b5d9f6939327354fd97f4107e05fbcefb27cd19c4b24cbde5734c111cb20e03a60bf8ae36ede1f85c0788e7a1357b6519bd5de2830f280051b31052ef9a5fa094a137dea1508c5a492450de744f0947dc4d5ba06a2daac803d67eef97d76b87b3da5d01f6f4bb4677e6b7a442b2cf815e75c00f6122441cc94e678d81e0c973a108152f01cea1bac2bd1df97507b31369ee91e8706d398a15d5b6f5475023d2ceeb3aa5681f54301ff87b21cdbed23f74ac6ad6fce5ab07e580a587b80356f0b844bddd76e16f0c180af2c2e9a946ed49a469a8750f526926e5d1bef308cd8717c80c018b00ec578d0cb0ef5714afe9795e3f4f85e0a1d01ba0f0eff1dcad3eeb40e6757972b436ea3902cafd42ce9379e549ed3aa9f91b8da5bf917e7f8be9029a060ec71a5d8c0518d10ba61e494cf762d78e94c44bda4a2c1122ca543c6f994bd67ba7a71eb3174dcfa53d98accef0b4b464399922e8cf888904135bffa151afcf37ea928a6eaedee1c15ca25664fd16d4cdbc31a8f1f54126c7cb35ab4f9e769a0d3778c08c85513d30849d5b1fa162706e896bf6489b9378764af39fdf42e8689c0545e81888a9b0809876e1fbe3d9329b6c1332e4