clientservices.pga.mu-sigma.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:8e:6d:45:bd:df:a8:03:5c:c6:b9:af:5a:35:92:21:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=clientservices.pga.mu-sigma.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:8e:6d:45:bd:df:a8:03:5c:c6:b9:af:5a:35:92:21:b8
Serial Number (int): 300998930108398243691554597234592311288248
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:9b:24:f9:9f:8f:da:97:fd:42:53:aa:c8:df:ff:3a:b3:8b:53:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:25:a4:d8:20:90:0c:66:e0:5f:b7:bc:db:68:83:a6:56:80:fc:f9
Fingerprint (sha256): 01:47:ad:e8:72:f6:16:34:18:13:30:38:72:2c:54:de:fe:1e:b2:23:55:21:9e:50:bc:15:0f:35:a2:59:d7:1e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate clientservices.pga.mu-sigma.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clientservices.pga.mu-sigma.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clientservices.pga.mu-sigma.com

Other certificates including the domain name mu-sigma.com

(limited to 100 certificates)
eam.mu-sigma.com
help.ummeedhfc.com
clientservices.pga.mu-sigma.com
mu-sigma.com
blog.mu-sigma.com
sam.mu-sigma.com
muerp.mu-sigma.com
helpdesk.geeksforgeeks.org
aops1.mu-sigma.com
servicedesk.nykaa.com
helpdesk.nlbconnect.com
wiki.mu-sigma.com
dev-mumoments.mu-sigma.com
muerp.mu-sigma.com
support.oneaston.com
welithelpdesk.wipro.com
support.oneaston.com
ithelpdesk.niairport.in
mu-sigma.com
helpdesk.nlbconnect.com
mulearn.mu-sigma.com
mugenesis.mu-sigma.com
hris.mu-sigma.com
events.mu-sigma.com
helpdesk.doyen.co.in
itservicedesk.mu-sigma.com
eoc.mu-sigma.com
support.oneaston.com
helpdesk.mu-sigma.com
sam.mu-sigma.com
aops2.mu-sigma.com
eu.munet.mu-sigma.com
support.oneaston.com
*.ird.mu-sigma.com
thesherpa.mu-sigma.com
labs.mu-sigma.com
eoc.mu-sigma.com
iot.ird.mu-sigma.com
ithelpdesk.tatanexarc.com
help.ummeedhfc.com
helpdesk.hcgel.com
blog.mu-sigma.com
columbus.mu-sigma.com
mu-sigma.com
qa.ird.mu-sigma.com
mu-sigma.com
remote.mu-sigma.com
think.mu-sigma.com
itservicedesktest.mu-sigma.com
events.mu-sigma.com
mulearn.mu-sigma.com
servicedesk.linkintime.co.in
support.oneaston.com
support.oneaston.com
iot.ird.mu-sigma.com
helpdesk.radico.co.in
support.oneaston.com
remote.mu-sigma.com
ithelpdesk.gmmcoindia.com
think.mu-sigma.com
hris.mu-sigma.com
munet.mu-sigma.com
ADFS.mu-sigma.com
support.oneaston.com
support.oneaston.com
hris.mu-sigma.com
adfs.mu-sigma.com
ird.mu-sigma.com
muerp.mu-sigma.com
support.oneaston.com
info.mu-sigma.com
helpdesk.geeksforgeeks.org
remote.mu-sigma.com
helpdesk.geeksforgeeks.org
travel.mu-sigma.com
mucheck.mu-sigma.com
support.oneaston.com
helpdesk.gmmchennai.com
about.mu-sigma.com
video.mu-sigma.com
servicedesk.ascent-online.com
vpn.mu-sigma.com
support.oneaston.com
support.oneaston.com
help.ummeedhfc.com
helpdesk.nlbconnect.com
aops2.mu-sigma.com
itservicedesk.mu-sigma.com
iot.ird.mu-sigma.com
columbus.mu-sigma.com
mu-sigma.com
sam.mu-sigma.com
colruyt.eoc.mu-sigma.com
servicedesk.kushals.com
eoc.mu-sigma.com
helpdesk.radico.co.in
help.ummeedhfc.com
dev.ird.mu-sigma.com
blog.mu-sigma.com
events.mu-sigma.com

Certificate

The complete raw certificate details for clientservices.pga.mu-sigma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300998930108398243691554597234592311288248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 02:53:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 02:53:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clientservices.pga.mu-sigma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820826887506729321572069458102377289149742194317233720193487118477728716004213828775067888072205814344467671481722468730129498808884554438910745025712726058312049519480391423644374938586887583937055686988666202565376597577540464230608358001942199689220146264089220141884727941592608461084060368708758632567860231142927228026432296738830654795850139100385558765915057299734552895187611941161253420390336472735690479337507506551730195643220206588351517399414492711403546863086652964464974540108512153716737998405004946207761831027284481896034129273105944868029179908163222575645729063981560551463665286239170418662864223736272870926385750887104912142050965054453749585058867772250634279317669961709422567880819594164456868349081528694058934473261560732983220031060186370908328647381764639436560679814412465208761278549367245305036116682456455516232646866883952078726480422407478094319236801918284747320666782658503495781643975788777239783268150052694390457455914642210318885736418162739926777074987545726007871314101507565870086459865096443011510575430087906294450316110020979611986705426506729662659670236018943191021248513372750433533894025121173077146492341032706023304962807854940662558456757424684727976696762660544870309203765221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f9b24f99f8fda97fd4253aac8dfff3ab38b53ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientservices.pga.mu-sigma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ee8c9fa2e000004030047304502210091a72f1bbffbdd7e03aa1f6d79daf4ce225c5e65a5a7346de29a7ad6469bdcd402204b1df32a8d67a9573d7c2deccb1fda2da83a719e6c11ad8825245b1cd95c122d007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ee8c9fc440000040300483046022100a5e1558489c3cb392b268fc40f6a8db5d883c78b6c133e2ddbe99a14c57f2f02022100ceec1fd9450cb0fcbb2e9d1b405a94b98d9aaa56722f26c569c2040ae3d12217
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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