dev2.pigma.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fe:58:be:f8:66:de:19:86:fd:4b:c1:5b:90:fc:56:25:a6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev2.pigma.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fe:58:be:f8:66:de:19:86:fd:4b:c1:5b:90:fc:56:25:a6
Serial Number (int): 347886542631418894688498454855402997032358
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:78:cb:2d:55:63:ba:01:a7:3d:b9:b0:1e:c1:af:30:da:8a:ce:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:c3:91:65:b0:e9:53:73:90:ea:61:2e:6d:73:f3:19:97:5c:4e:33
Fingerprint (sha256): 72:0d:01:3f:0a:46:59:b2:3b:48:7f:d0:30:51:73:c5:11:8e:6e:46:c2:ac:05:f4:4b:e5:69:e4:c1:3c:75:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dev2.pigma.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev2.pigma.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev2.pigma.org

Other certificates including the domain name pigma.org

(limited to 100 certificates)
dev.pigma.org
pigma.org
gipatgeri.ovh
gipatgeri.ovh
dev.pigma.org
dev.pigma.org
pigma.org
dev2.pigma.org
www.pigma.org
pigma.org
dev.pigma.org
pigma.org
pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
pigma.org
gipatgeri.ovh
dev.pigma.org
dev2.pigma.org
gipatgeri.ovh
gipatgeri.ovh
pigma.org
gipatgeri.ovh
gipatgeri.ovh
pigma.org
pigma.org
pigma.org
gipatgeri.ovh
gipatgeri.ovh
dev2.pigma.org
pigma.org
pigma.org
www.pigma.org
pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
pigma.org
pigma.org
gipatgeri.ovh
www.pigma.org
pigma.org
www.pigma.org
pigma.org
www.pigma.org
pigma.org
dev2.pigma.org
gipatgeri.ovh
pigma.org
pigma.org
pigma.org
pigma.org
pigma.org
gipatgeri.ovh
www.pigma.org
dev.pigma.org
portail.pigma.org
dev.pigma.org
dev2.pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
dev.pigma.org
dev.pigma.org
pigma.org
gipatgeri.ovh
dev2.pigma.org
pigma.org
www.pigma.org

Certificate

The complete raw certificate details for dev2.pigma.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347886542631418894688498454855402997032358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 11:00:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 11:00:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev2.pigma.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744744090742299843520951168437579528157156277979247573929073745190679674352425345008357279379421786007900319075749111295287564635374529880879329741156928312070021525528053500378091407668361381057496339799178089470238109344129292688965849655210145618159263058462622456155532752981802416964041639441698545126194339839566962199863671911588069635048560758561935518289904819743351412448294562568887315119703653160206219304335137733594521319700807209396765153060499463665645722019234599901930494369511712234254955141944048050689411290136209051838985487194309994797127236272748062487947001777473778247522873192426305509176645189619255318056019444587592284254021887442329079716468475739638931385450641684799801646655766914534401992061939369869041017001171793598352121026812124898446151275370803491552604934051034757686241251333184445275599852066039347279580357048343946408601176685778967888238129171529355043264541444784612948756517064468849228517474118267765506962696514910710030577633526859717561154695925472096507220240423634269568806656980157360844934580448785683242475451369940964990798340006556688431071248211129955236341446440056212405386512952920841542241388640426423012874690404134130260263965915621776047944381872124556113171805497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d78cb2d5563ba01a73db9b01ec1af30da8ace73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev2.pigma.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016db58a4d860000040300483046022100a705f6530861a39e61e227a6db7f3099e981f2121a9f19ab9a37a9b98686b02b02210081d3e991053ab7ee7a37e86702a6e3936b95bdd1e66f3a6606b7bd012516b3840077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016db58a4dc90000040300483046022100c9de28b783b1acfecb0f3c0c0687bf201b966c93a95a2d85c7b19b798e494de2022100dfa4c37edd76f544e288f4e1e58f7779a49c497c99b61dca96e1ee15df967b4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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