pisigmainc.com

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 10:a4:1d:10:38:e9:22:06:82:4e:65:67 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pisigmainc.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 10:a4:1d:10:38:e9:22:06:82:4e:65:67
Serial Number (int): 5150161239435075030361204071
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 74:fe:1f:31:3d:ec:42:6c:39:5b:45:a6:46:53:25:df:8e:d2:79:b8
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): 15:7c:ec:cd:25:a8:78:48:3f:fc:3e:94:2b:ab:0e:a8:04:5d:cf:0f
Fingerprint (sha256): 0d:fd:aa:de:fa:88:6d:1f:36:e4:0f:b2:b7:5c:ea:8c:b9:e0:01:6b:e5:7d:27:02:d6:14:c8:fa:d1:82:7d:33

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate pisigmainc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pisigmainc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pisigmainc.com

Other certificates including the domain name pisigmainc.com

(limited to 100 certificates)
books.quidditasfarms.com
billing.bluetideconsulting.com
books.quidditasfarms.com
payments.labspot.com.au
books.quidditasfarms.com
pisigmainc.com
pisigmainc.com
pisigmainc.com
billing.bluetideconsulting.com
www.pisigmainc.com
pisigmainc.com
www.pisigmainc.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
pisigmainc.com
billing.bluetideconsulting.com
client.pisigmainc.com
billing.bluetideconsulting.com
pisigmainc.com
billing.bluetideconsulting.com
pisigmainc.com
pisigmainc.com
billing.bluetideconsulting.com
books.quidditasfarms.com
books.quidditasfarms.com
billing.bluetideconsulting.com
pisigmainc.com
pisigmainc.com
books.quidditasfarms.com
www.pisigmainc.com
books.quidditasfarms.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
books.quidditasfarms.com
books.quidditasfarms.com
myaccount.silverfox.net
books.quidditasfarms.com
billing.bluetideconsulting.com
pisigmainc.com
books.quidditasfarms.com
pisigmainc.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
pisigmainc.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
books.quidditasfarms.com
billing.bluetideconsulting.com
books.quidditasfarms.com
books.quidditasfarms.com
pisigmainc.com
pisigmainc.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
billing.bluetideconsulting.com
pisigmainc.com
billing.bluetideconsulting.com
books.quidditasfarms.com
books.quidditasfarms.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
pisigmainc.com
books.quidditasfarms.com
books.quidditasfarms.com
books.quidditasfarms.com
myaccount.silverfox.net
books.quidditasfarms.com
books.quidditasfarms.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com
billing.bluetideconsulting.com

Certificate

The complete raw certificate details for pisigmainc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8v5lec9s040vUH/g4Q4u
Xi/aTzsvDv4JuAIFf5yWX5UJnUCLjsKJwpI5riyN2nlgclMUhKThxLsldBkc5R35
dkJnPqyWOqvbSvCFuxhsHxI1OvcXn/2wh7WGoiA5c3IvLqy2SFlcUrgLopXus26l
W2+5b8hrM+ol2wcUrOwbHKODxYCkVupSAsM1Vx0DbsVlSpExrBrep35WEF5xqje7
UalaD+NCGxVsHVo/YW7vjjWMXANskF1gU89zKOpKzzlj4QNRS+KkB6YfCWV8kmpi
uq5IZaVBdkBgFToGkGhzbhWtp9siQ8EZal3zcnLPGKdH/2BmUTzfkxmHWhFEk0cj
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5150161239435075030361204071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 20:15:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-18 20:15:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pisigmainc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30675117337152850567153343488659278129943291121011815494969038923538049005223141410784616151262736290656632979828347779604511403875935542369764403379945497997865837501005332059941707012133812515408659312523181242190180903811063500632334005400836989712699943417529587657450659954821767569554441482605487828939903325110144095676628586375328007159952991443504096685533175839372437304549758681994625040799947153895299661596830929996617080658423247217630404142528381945634254609618382501503218763917365065797897185165238669468946934184173963071840246108413507739124803007263278407029999083814339102309309665283952817415163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pisigmainc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74fe1f313dec426c395b45a6465325df8ed279b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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