www.sidekicks.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:31:36:80:9e:8b:1d:62:2b:1e:e4:57:1a:40:3c:8e:29:63 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sidekicks.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:31:36:80:9e:8b:1d:62:2b:1e:e4:57:1a:40:3c:8e:29:63
Serial Number (int): 278083139915819528274743737640593207994723
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f3:7c:ea:5e:dd:2c:4d:49:4d:15:e9:04:82:dd:e1:86:8f:b6:d3:3b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:91:a9:6d:32:4b:ae:2a:a1:cf:9b:91:1f:62:3d:ac:60:e9:8a:09
Fingerprint (sha256): 02:51:e6:0a:47:7a:4d:d2:a0:15:3e:c9:a4:30:21:32:81:f3:df:19:a3:3f:2d:53:93:23:e8:8e:f9:71:ea:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sidekicks.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sidekicks.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sidekicks.ch
www.sidekicks.ch

Other certificates including the domain name sidekicks.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sidekicks.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278083139915819528274743737640593207994723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-23 04:33:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-23 04:33:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sidekicks.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659178884676332784918343813189088414107599129752698653987751180356307361919729254131089653381626634274043048137327151429407168274056899759776803651000688430841556042292313768302988248442420405257662154765532306177517277085866829854377009838991901015344137134681013791911758279417429198955896642827571882202524583845984697930122055743224207032025504006001841137587606586634149569501250803933239608694483737759404223751259655833723446594021155139835213267267188714170032199795833621402524296742347888453705842114649272590709977070090854404818801168497878676484703913057596050273636521919274470440770658883586676967572945565759289975020613098918535862521214829076261167581171852172036660320004150989040080157823621981792784516221912114522344420376012277296158293063199192160908416445355292048437243057372675478254599859853756893128499463319135968011730752594645506244955767916740489436299977076813587014395642569713201721142858776815041354235768321135206961266198757708535819649717204088747609914636710683677378149901946205012924849244713943458738120847015626076632321553246509914962801326892326737521863922152869377323423521502963121271508813824286029067742678634871297364429363394039991867620430839164002287032434324461978381928560307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f37cea5edd2c4d494d15e90482dde1868fb6d33b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidekicks.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185dd1ded24000004030047304502206b3e3d7beb35d0d2cc3b479507947646f5abfa52a1bc1b2139d0f8c5a32c19b2022100f96525eece6b0ebe51ba101aced9318d920d117fafc61f50f9d9380686a79315007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000185dd1ded2e0000040300473045022100ab42a3f4e011169ab122e376b01ce4c86481f74faf49bc0a2e38e855d5be767302207af4bb1a53f4d668454d6430aac9736fa350c89de897bd4ebace8e3868885e1a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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