dev.sig.ma

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:b3:3e:b9:d0:88:95:56:3c:49:8a:27:00:96:1c:10:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.sig.ma

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:b3:3e:b9:d0:88:95:56:3c:49:8a:27:00:96:1c:10:49
Serial Number (int): 319082835307337574342789214938928726675529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:dd:ad:c0:96:c9:2b:b3:bf:6a:71:b9:33:d4:dd:8a:a9:d0:4e:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:61:56:8e:a6:43:c0:c7:50:1c:16:68:32:fe:fe:80:81:fc:33:b5
Fingerprint (sha256): 08:21:60:91:07:81:a9:d5:eb:df:b0:76:07:ae:99:cc:95:54:b0:0a:48:f3:e2:db:2a:c9:dd:9d:6a:88:85:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev.sig.ma

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.sig.ma

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.sig.ma

Other certificates including the domain name sig.ma

(limited to 100 certificates)
s2.shared.global.fastly.net
dev.sig.ma
dev.sig.ma
help.sig.ma
dev.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
st2.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
bigthings.info
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
blog.sig.ma
s2.shared.global.fastly.net
try.sig.ma
*.sig.ma
go.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
*.sig.ma
images.sig.ma
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
urna.net.br
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
help.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
blog.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
dev.sig.ma
s2.shared.global.fastly.net
help.sig.ma
try.sig.ma
images.sig.ma
s2.shared.global.fastly.net
dev.sig.ma
help.sig.ma
www.datanta.com.ar
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
try.sig.ma
go.sig.ma
s2.shared.global.fastly.net
images.sig.ma
dev.sig.ma
s2.shared.global.fastly.net
*.sig.ma
try.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net
s2.shared.global.fastly.net
images.sig.ma
s2.shared.global.fastly.net
try.sig.ma
s2.shared.global.fastly.net
s2.shared.global.fastly.net

Certificate

The complete raw certificate details for dev.sig.ma in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319082835307337574342789214938928726675529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 23:42:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-28 23:42:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.sig.ma'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742155828311914363427772466487285259490511751362690835658889908196366149825361780349429657987782105352838418352140772769925143543353666634889310926869501876713394354269617149390398146213205611079281492745976486541071006327499281939408504268337931401657002683816291360513489578025013782842039107118167902469208978943847512236359912554539458226174795269989546984853976678350090312004235732442967166923595270250761111893295708335380320655613524613629508465290198294204678277828146903009816207961973686180255293101610149341486325460362987107367786450555821015485563915138406234688980446528882369591159018328062325864528931712192049310533998899844989264309046736466413397650473712937865912533435549418030944814812073170481128707942460634247297005539573045171520108520710842610864474691716586183119609038152549352912387806844245456228274393649864130800004599109273026390847308818515703779204396004298553723952442067776431443926144983366354950750589842738792707213432827552905518448250103229154062977516136828751208417262143498950365221678704763021988825097097162918504750450219797124913848920595362912833090576045108030433026262575006278749094438174581239981792960944742861060387457714572592625957372440988698060216008378621020106561849233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8ddadc096c92bb3bf6a71b933d4dd8aa9d04e9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sig.ma'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168970e4bbf0000040300483046022100a90aec4903311e4035f15236077af9ca80fc5ff2280e58cb7a82bb1eff55b0f7022100a1b57af627d34514e69fb8f10f9a69a21a201086702b954eab3acbfc2aeaf14800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168970e4bf8000004030047304502206bb72a045aeb7d3769c3e8759c55b382d1e4bc6635d71ab19259eb7b27dc61b5022100d5b1f25bcb8c47082691478a86393d5fa60b17aaddf235fce4e81061d7977430
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003996765017dbdc7de391f8d238b4a566a25a3f24c965013bf974b5cc3a12a11e72a5322e1bb5b437c470dfaa704fca15874261621cf943adbfad4d00793d81a58aeed816759465ee3397f36a644798aad54c088b62d60ce7a2a0fdfa3d541f019c01d22c3355c3636e7ecfc85585c895f21a34450222dee6cd3348f460205c9ef6efeff5bffe9786cda4c27ca5e45f7cbca5b0d46e893ba9b0e37be3ba7a56eb2e02aec66b576345cc71de031cc0285344b22e2c866cfa6fc6107fdc833b0f00ecae1d7353ea0523dd74cb1b82a06e725b176803dbdfd469cb9a90e1e950e4e50bf86769e896a1cf571b2407130d11e276b3679bd9a9fb5ecd66393b5614b741