dev.pigma.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:7c:25:dd:ea:de:33:d6:5e:66:bd:e6:79:50:f0:4b:85 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.pigma.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:7c:25:dd:ea:de:33:d6:5e:66:bd:e6:79:50:f0:4b:85
Serial Number (int): 268307526021181285341083500604452888398725
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:27:28:4a:2e:2a:ae:61:5d:46:60:81:97:ca:a8:e8:7a:4a:6c:d1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:20:6f:63:8d:c8:e6:ea:67:ca:2d:d8:6f:5b:c8:0d:d4:e9:40:9d
Fingerprint (sha256): 0b:35:9d:52:3b:49:c7:f1:71:f1:1d:03:46:a4:95:7f:0a:f9:61:20:94:2a:5d:6e:05:27:d8:21:cb:4d:8b:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev.pigma.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.pigma.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.pigma.org

Other certificates including the domain name pigma.org

(limited to 100 certificates)
dev.pigma.org
pigma.org
gipatgeri.ovh
gipatgeri.ovh
dev.pigma.org
dev.pigma.org
pigma.org
dev2.pigma.org
www.pigma.org
pigma.org
dev.pigma.org
pigma.org
pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
pigma.org
gipatgeri.ovh
dev.pigma.org
dev2.pigma.org
gipatgeri.ovh
gipatgeri.ovh
pigma.org
gipatgeri.ovh
gipatgeri.ovh
pigma.org
pigma.org
pigma.org
gipatgeri.ovh
gipatgeri.ovh
dev2.pigma.org
pigma.org
pigma.org
www.pigma.org
pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
pigma.org
pigma.org
gipatgeri.ovh
www.pigma.org
pigma.org
www.pigma.org
pigma.org
www.pigma.org
pigma.org
dev2.pigma.org
gipatgeri.ovh
pigma.org
pigma.org
pigma.org
pigma.org
pigma.org
gipatgeri.ovh
www.pigma.org
dev.pigma.org
portail.pigma.org
dev.pigma.org
dev2.pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
dev.pigma.org
dev.pigma.org
pigma.org
gipatgeri.ovh
dev2.pigma.org
pigma.org
www.pigma.org

Certificate

The complete raw certificate details for dev.pigma.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwEpSTmUPn3T1qvlin2lh
akADwjrs5HSDxfc8Uu7ThfJwE7NU8Lyc2SANhs1EoM3zcxGBW57kHg6oSmG31x/e
dQGHilcjI6kN45uvX0B9/hyToDP9q+nf313g4GwjvuxK/fBnW+TBH83RHCZWInI9
TGlPT9cVk9d/aTRR0OTaDLzu5YTeWuH7MA6nxs4MkjPhOazO7DrejIX8aeBKRGm/
6phAflGl5mJJAJ4et7dQKQsfpYYvW/N0UaA6ZdOxPsZzp450tXZMfwXURqUT3Gj/
m5A/085NRovh2r8oi1Cny0LpokKe06EczQoAbp4YRkCuJZNdS0bEoTOeis8l58L9
b8DTyXTt1VCfGksYT5AWWkkF7j3/xbnk7wLB9rC4pXJFRLeDcj4Y4bkbnqEFZZyl
RIzbYDiM884qnv61lycrP3HZkgCPRNF6PYogpffrBGe+sLzU1803a9OM41eI8VLZ
baDz9dzm1L99J19tJRPZJ4OCtFroGCwqY+4b5Eh6EsqXv7Ohk+aPUfb7Wjcxr98D
egHqQMBIuXIDIwnxIJDZBOPXG6IEamtx3lf4aw9xy6UFtzEn6VljMYVw9QW2s+eD
Hvm8aLcdAb4+s1UUm9qcM+Uvh8IQKXktuIQDox3Q8AdfOnQijki2LxIlr4tpcq0y
eDcjeqdRnRZkKKhBd4t7TasCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268307526021181285341083500604452888398725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-12 13:42:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-10 13:42:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.pigma.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784476056771317552568151260616254079468246179997932916550038062679636546551127644199259801453497714586562135727019826756295149906987772025353122863558577054360766491842824882111826963541511619304071766909346993031731170925086233121879886201150980237266135308957581057096184547353581256541710801422511614505551140920642499638851945359300844488374075660954183827197058008692434628551496690014381106295406805214083788990742359192163932887962781510683292537433273619681379574447692595679041328226612355802663128035267907868359717095158198920859115765590152926609103019956723377826487439626328513495236067428849087978493677507507009457844097541254080859840592143592321354778885023832740692824407594231967654341628610300578931544903324583092833243959630680886817317166096879005220260563421338510594843947493017357074065054404599020684954114052009226598095529631438790618290841466260710625471701898452788356978264174514891914827539228366968231858165139215912922065640892740103640236694772696933253472431087600202875959420099604957338760103905264997127550004134474671638928495457537944035710847586106897993186329768294879665585954432085760962715791485316886441494606970595881863340736687564959926931483339127041172641405149569338973531884971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1627284a2e2aae615d46608197caa8e87a4a6cd1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pigma.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016668bafc5d000004030047304502203751219e204f8887a291ccfee0a98b10563a5395c8043ac1b71d313eaf8021db022100fddfd77ed0d85e25a5646ac0d3d477e7abda77a1d30e24d2258041119b1d61a1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016668bafc770000040300473045022100e5a70cb57106896c14cc1c40c56d124b45c09333400a543c30731877bed3a291022077b8cda0d45294f245ab28e49c54aa16b0f5fe478608a176fc75d3485fc398c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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