shop.hcmpost.vn

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7e:12:88:b0:58:7b:ee:d6:10:c6:94:2a:87:47:ac:ef:f9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.hcmpost.vn

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:12:88:b0:58:7b:ee:d6:10:c6:94:2a:87:47:ac:ef:f9
Serial Number (int): 304237071860330399493924882114691426217977
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:f3:6c:89:02:e1:a2:c3:d7:76:8a:16:7f:81:de:b9:89:09:37:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:44:b9:fd:35:54:9a:39:b4:23:13:da:d5:57:b4:05:bb:92:56:4e
Fingerprint (sha256): fe:3f:b7:0a:54:36:d8:f9:f8:7a:c5:54:99:e9:9b:3f:93:d8:47:b5:d5:08:ca:38:2f:ed:85:4c:10:4f:4f:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate shop.hcmpost.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.hcmpost.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banhang.hcmpost.vn
shop.hcmpost.vn

Other certificates including the domain name hcmpost.vn

(limited to 100 certificates)
kotakamal.id
dashboard.doopage.com
iluminaihealth.com
stp.hcmpost.vn
globalcredit.ua
sentiparser.com
sotuphap.hcmpost.vn
dashboard.doopage.com
www.laylow.beer
shop.hcmpost.vn
dashboard.doopage.com
pshop.hcmpost.vn
krbikes.com.br
www.amritjeet.com
cdtbigdata.com
mea-api.itxi.aero
shop.hcmpost.vn
kotakamal.id
krbikes.com.br
globalcredit.ua
login.aadpay.in
iluminaihealth.com
shop.hcmpost.vn
play.yooz.plus
shop.hcmpost.vn
stp.hcmpost.vn

Certificate

The complete raw certificate details for shop.hcmpost.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuK9fjamrkQmhBwTq95z6
aSW69UngUZJCbWMP2MDe7gn/94b00DH9oiOnzAK/2LTXipuaQgqzSJ2wPiWy982x
nuG/YMpZKBM1dkv7yST51NA+hD06k1R0144cqBGsr4SPEs1CTfLYm88jSO9/rcoc
LGT5wezfBb+cWv16JPexSVmIGE4Oc9W+0sL39Fx/ztLagZTXdWNftFKbyCspsPpl
Fr0AoaZmGrrvzv49BmRnzrrv3tSDhYP1Z5H/57duJ+xeRaiEE4PL26nRHAVZF13z
ixThzZGg8Sfvi0dILbhW3s/6dSuo/YbiO9K1AWJTr7YUL39HJ9OW0ZLIYeawmJRi
UtH+GNV7IjifZlwZGph4TiDMD7bzo8Y2R6r1T55BE90sVexzO9ayowtmSVW8D1yf
6JolNTc8uKdDf9/uJ0bDwIv0HGoUEelpUp0HATAa22gWT0WVfU7g8/K/D4M67AnK
tT4CVaFvBEHd6Y9AQywaN6qxcqTf18viZqQaAgk6PC2g/JwhrbWTv8d6kZrK+kE7
5MUap+4R4mWwE0vDh5IX/Sq6bt7f4VYMX6SztI5hWTX9EYA5jUQ6lyVLziyFhbRX
usnPZBzYJIghr5bX6gvk4/r5oFKPojdmMcq6RJVO2HTE6amDaDSgXBD3a8ELOpPI
2120Jm0jJQcSdqRtzy2bexkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304237071860330399493924882114691426217977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 09:25:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 09:25:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.hcmpost.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753449275941046144138130841826406108564217154327029384344431483584065732136909974672479713704082085175255691853815686241644065442797094650223567669518684497820395815666637714196435160052301459148450852467518938910697973260390328751621367423457208634998612036146345372359647098684420610977407581189245701919636614031750389137365271173082245450051332852838919154572889876934625604172446085542974706572656059986989118505044418133158007876691101401567338389637128665371779463836628376874780501239171003108992886326941728130785220238087306351698853267543549652310262893499241336585941067328638269028562213455077562829485411450662876413099802321314864540605002020630635236722772453036242788856666908992817608901451338255486882021798320316562351901766972978225809511995059216197996640034242583980312691032573407900533178342790590838854026829985982584044075592210791261631354417082177731226255579862373554970574780408699367433018804703912497554066523619448513874293413886172842016884393010222969694185099232003992787772940786633854940647115054750581779804315998278315592384288311271127610017140977650962008811372210926865367355810061640261751131112212216050364220383054172243401907678593986687755357814752522178552461053254057831100399188761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99f36c8902e1a2c3d7768a167f81deb98909379e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banhang.hcmpost.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.hcmpost.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db00dcce50000040300473045022100b1823d72b400799f85185ddeaaa49109782a94013bae41f3a3cdb85bbd79df2402207899d8d11e8e654cfdd9c5120df29b362b942153e308820d720e1213e2527e11007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016db00dcccf0000040300483046022100e04a00f7001bff2d37ffc8d7d665006cb0b2ed6685744b95b8f553b03d7a652a022100eca4c8263c468fe8aac772de0c5520adff84f5e0401810f52ab8c614ea8951b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004939a06f20555180d023af27a3bfca5f3360a4770a195bfe7484e8c4d36e40bfe114ca04b5a7527ed7d08fe802f119e5479371fb53fa20e2a439bcee91eaced1dee9bbeee6c36beada7218f2b38900bb38ab96cd6743b2e7a49a003a5a64771b866f7a0523b3bc086433fd89ad08a6565aa2321c93dd07a16afed44727bae6d71c3f356e07644c24d63e3b071ccb049a8086f2b41b97ec5604d0d2c955c0c3d2995f74b9d662b5fa8b7fd8542846bfeda0989b3bfc71d6769ade355ecbaed880c1dc0400ef7ee1d46f2654c73b685ee403976a140654241c390fc0a8c752713dd6a71efff9ab369f27242077db524c1ad97ad2106cfd4f1ac5de638c95619aa2