blog.mu-sigma.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:bd:2d:35:b4:d3:f0:14:f9:d0:4d:9b:cd:0b:a8:f0:5d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.mu-sigma.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:bd:2d:35:b4:d3:f0:14:f9:d0:4d:9b:cd:0b:a8:f0:5d
Serial Number (int): 317734907171091939402981315453297273401437
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:56:f4:a6:c9:45:be:fe:f7:01:e7:f3:a2:3b:e4:bd:85:bd:1b:31
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:e6:a4:3c:07:39:f2:47:99:dd:91:34:77:4d:bd:f1:41:f4:28:9a
Fingerprint (sha256): 1c:5e:f5:fa:1c:7d:d1:2d:58:13:f5:c3:b4:47:95:42:a0:01:52:95:40:f5:c1:ed:f1:05:41:78:2d:48:bf:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate blog.mu-sigma.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.mu-sigma.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.mu-sigma.com

Other certificates including the domain name mu-sigma.com

(limited to 100 certificates)
eam.mu-sigma.com
help.ummeedhfc.com
clientservices.pga.mu-sigma.com
mu-sigma.com
blog.mu-sigma.com
sam.mu-sigma.com
muerp.mu-sigma.com
helpdesk.geeksforgeeks.org
aops1.mu-sigma.com
servicedesk.nykaa.com
helpdesk.nlbconnect.com
wiki.mu-sigma.com
dev-mumoments.mu-sigma.com
muerp.mu-sigma.com
support.oneaston.com
welithelpdesk.wipro.com
support.oneaston.com
ithelpdesk.niairport.in
mu-sigma.com
helpdesk.nlbconnect.com
mulearn.mu-sigma.com
mugenesis.mu-sigma.com
hris.mu-sigma.com
events.mu-sigma.com
helpdesk.doyen.co.in
itservicedesk.mu-sigma.com
eoc.mu-sigma.com
support.oneaston.com
helpdesk.mu-sigma.com
sam.mu-sigma.com
aops2.mu-sigma.com
eu.munet.mu-sigma.com
support.oneaston.com
*.ird.mu-sigma.com
thesherpa.mu-sigma.com
labs.mu-sigma.com
eoc.mu-sigma.com
iot.ird.mu-sigma.com
ithelpdesk.tatanexarc.com
help.ummeedhfc.com
helpdesk.hcgel.com
blog.mu-sigma.com
columbus.mu-sigma.com
mu-sigma.com
qa.ird.mu-sigma.com
mu-sigma.com
remote.mu-sigma.com
think.mu-sigma.com
itservicedesktest.mu-sigma.com
events.mu-sigma.com
mulearn.mu-sigma.com
servicedesk.linkintime.co.in
support.oneaston.com
support.oneaston.com
iot.ird.mu-sigma.com
helpdesk.radico.co.in
support.oneaston.com
remote.mu-sigma.com
ithelpdesk.gmmcoindia.com
think.mu-sigma.com
hris.mu-sigma.com
munet.mu-sigma.com
ADFS.mu-sigma.com
support.oneaston.com
support.oneaston.com
hris.mu-sigma.com
adfs.mu-sigma.com
ird.mu-sigma.com
muerp.mu-sigma.com
support.oneaston.com
info.mu-sigma.com
helpdesk.geeksforgeeks.org
remote.mu-sigma.com
helpdesk.geeksforgeeks.org
travel.mu-sigma.com
mucheck.mu-sigma.com
support.oneaston.com
helpdesk.gmmchennai.com
about.mu-sigma.com
video.mu-sigma.com
servicedesk.ascent-online.com
vpn.mu-sigma.com
support.oneaston.com
support.oneaston.com
help.ummeedhfc.com
helpdesk.nlbconnect.com
aops2.mu-sigma.com
itservicedesk.mu-sigma.com
iot.ird.mu-sigma.com
columbus.mu-sigma.com
mu-sigma.com
sam.mu-sigma.com
colruyt.eoc.mu-sigma.com
servicedesk.kushals.com
eoc.mu-sigma.com
helpdesk.radico.co.in
help.ummeedhfc.com
dev.ird.mu-sigma.com
blog.mu-sigma.com
events.mu-sigma.com

Certificate

The complete raw certificate details for blog.mu-sigma.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317734907171091939402981315453297273401437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 01:47:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 01:47:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.mu-sigma.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780028698856163808095352652891031408936696406002416775621285987467199183155805515832117285914827913851590710420697272908424578792892576656701180947050206607169830763109795586869657468810337039808702052175192979141439096031372799249148158906710860143809443583366256111893705865745350366281336314580820559496764308119037965015600645033159693938709254822992599331760509786996234360938563592706484465160303466226463090028018753851456401403512847315897256545939531754019483559599829681763966387311154676241764678355529074082191086464979684181839752689579862018835386638185852353218538770215417950029729266795174847556130926267656531020009248650719043151366597658879262966447830611123125652431649009230330217988941509632803282983127661531861397505322830972589822665315424958705419731698969718117023324867209727565954783148134173515314197209216983248406701805637583336065672403998022889909003416178232635655865835967934392331483433076536659127426659235310854474184250950500895420108270030961300635251108884931352282998679713129075745363372515533782554935122573860615348215184750282812483255115026711955995177766697916709205897763850794927202877152881904564642097206179356266142089396065690341381250348006461972562778313356327964757010301377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8956f4a6c945befef701e7f3a23be4bd85bd1b31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.mu-sigma.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f694cd37c0000040300473045022100f835ce08016bb9d6737fb8e1b46f6e77db7cdc8a98495744f23973c01ac10b580220452c069b460044de8ba8058b3bdee4481ca85433ac0c427c74b631cd8520495e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f694cd3a4000004030046304402202915c0d218ad837649dd63810901ac8fed81d0f82fd0d4a72370092479866824022060b2127afe0c0c67531e91befa964373e0d52cc0bad74ba0b68b4deeeeed76ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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