pigma.org

Issued by R3

About this certificate

This digital certificate with serial number 04:38:73:47:1c:fb:4a:42:1b:ec:fd:b9:1b:a7:02:27:8c:fe was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pigma.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:38:73:47:1c:fb:4a:42:1b:ec:fd:b9:1b:a7:02:27:8c:fe
Serial Number (int): 367658186735022481343623743524037286399230
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e0:75:6f:ea:d8:23:ec:4a:b5:52:62:89:f7:38:20:09:c5:50:4b:22
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 95:12:b1:4e:6d:8a:e4:f6:57:76:3f:94:14:18:23:45:0d:f6:f3:49
Fingerprint (sha256): 8e:18:b9:d3:39:1a:90:a3:cb:da:e3:5b:c4:5c:12:89:aa:c8:68:a0:e8:e6:4e:0a:88:ea:89:6a:49:a3:63:d4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate pigma.org

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pigma.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beta.pigma.org
enseignement.pigma.org
obs-enseignement-superieur.pigma.org
pigma.org
urbanisme.pigma.org
www.pigma.org

Other certificates including the domain name pigma.org

(limited to 100 certificates)
dev.pigma.org
pigma.org
gipatgeri.ovh
gipatgeri.ovh
dev.pigma.org
dev.pigma.org
pigma.org
dev2.pigma.org
www.pigma.org
pigma.org
dev.pigma.org
pigma.org
pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
pigma.org
gipatgeri.ovh
dev.pigma.org
dev2.pigma.org
gipatgeri.ovh
gipatgeri.ovh
pigma.org
gipatgeri.ovh
gipatgeri.ovh
pigma.org
pigma.org
pigma.org
gipatgeri.ovh
gipatgeri.ovh
dev2.pigma.org
pigma.org
pigma.org
www.pigma.org
pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
pigma.org
pigma.org
gipatgeri.ovh
www.pigma.org
pigma.org
www.pigma.org
pigma.org
www.pigma.org
pigma.org
dev2.pigma.org
gipatgeri.ovh
pigma.org
pigma.org
pigma.org
pigma.org
pigma.org
gipatgeri.ovh
www.pigma.org
dev.pigma.org
portail.pigma.org
dev.pigma.org
dev2.pigma.org
dev.pigma.org
pigma.org
dev.pigma.org
dev.pigma.org
dev.pigma.org
pigma.org
gipatgeri.ovh
dev2.pigma.org
pigma.org
www.pigma.org

Certificate

The complete raw certificate details for pigma.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03cDUltWp93XoBjmFl1r
2eIwBB322Ao0jhQny/Xy0aPt+aqLc3F+MgnFLxPO90Uwm8GsH1KLqs5li3Mxs6OW
3qroaQZpukurTAYAOL2ooXGLTZLLK2yhqRMMtDy9wmjpK8ueGBoYw6FI2NeFBWP1
SMliX+4uB0LQpLHGLB9zSbi+MvIP5Duo3lujeGzMJ9fYK3A+ldlxjNYIiOnEnftK
0gUvjpGtI6rkYPtsjt/74qhbsh06pGVKJvgsVOu/w3EQGC1YAarog6oKRnsh0oS4
0uVEmx00GBV80f3PFTZiev4OThwV2o038AD4UqsKr7c1mY0jbyV9Ajc9uvp76lOR
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 367658186735022481343623743524037286399230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 17:27:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 17:27:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pigma.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26694969833327995956208410988598609892113427277375472156558193659404033583610066630502339101612468429054535418725713075564856883829017948131330242027803821257673971441032894547307312567600126579959263153305405910487817165981307916636514133391228480616069581286540922780767563034802871509325450801910184231670771088950020497494590871608323898861658548240753763963804095982089397133644924136830464311292613592592840838649610150011365768699514496074880321141162581210926995698085951681572387066685572318675491920615894724286257467296591724810033417026720938410209688824058193861374852323741799779123137431263829938114991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e0756fead823ec4ab5526289f7382009c5504b22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.pigma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enseignement.pigma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs-enseignement-superieur.pigma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pigma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'urbanisme.pigma.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pigma.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e1f5260020000040300483046022100983f5b69887bff92851c848a9a89499186a3041bb1c96c8b500eb7e8645ef926022100a11e34c429718e8b5b9032da13b1b63f133a037a3f9fdd7e75d61225899084c6007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e1f5260070000040300473045022027dbec83dfaa8c377eb0fb34dfaaf21ca49728ec0fb4b763d8ad2187b00cdc40022100f9a73744f95d6843e563ae54c1440b2ad71887541b76a52583519be377a051e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008d61c08e6a8f35b8024330beea49f633c4c54ac4e410a7f59330458eab59d8002844eb9a9ef3f16224c738d641d2b52187965dbf6330929f7e539d7d13cd24a8031ade37757bff2b0e16934a0f945fe85a7853953d121d1e1239d40a5b3f306eaec3cb8ee5e65c356545a53a97202a436d490ed1843dfcde16b9bac634c87f1f93d848bf620164f11360b84575098654e575f9802289bb825dad3aeda7f83fe0cf8ebe8a54bb8634e3dcb761c527315103d62d67a272e1713de360734906a55a3b403b1f3703ac2bd47e28fc70c8297d72bd1698377889ff629fed5d6e0fd20913346d61e7f886e8eb79ce20e9bf972e9643a46ff8cc8ee6b32e3d34760053e4