sidekicks.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:6b:a0:40:50:a6:7f:69:02:64:02:fe:5e:5c:6a:94:ab was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sidekicks.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:6b:a0:40:50:a6:7f:69:02:64:02:fe:5e:5c:6a:94:ab
Serial Number (int): 315244531236299364913856227987596279190699
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:04:69:23:15:6f:b9:d9:01:c7:34:43:4c:42:93:f0:a1:f5:4e:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 38:67:6f:fd:f9:ff:d2:a3:e0:53:22:23:4d:a0:38:4d:91:9d:d4:91
Fingerprint (sha256): 22:5f:74:19:e0:3c:7c:ae:02:b1:10:01:70:88:52:91:9b:95:58:71:03:b4:6d:26:53:06:30:79:d0:d3:bc:23

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sidekicks.ch

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sidekicks.ch

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sidekicks.ch
skik.ch
www.sidekicks.ch
www.skik.ch
www.yoursidekicks.ch
www.yoursidekicks.com
www.ysidekicks.ch
yoursidekicks.ch
yoursidekicks.com
ysidekicks.ch

Other certificates including the domain name sidekicks.ch

(limited to 100 certificates)
www.sidekicks.ch
sidekicks.ch
sidekicks.ch
sidekicks.ch
sidekicks.ch
www.sidekicks.ch
login.sidekicks.ch
sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
sidekicks.ch
www.sidekicks.ch
sidekicks.ch
sidekicks.ch
sidekicks.ch
sidekicks.ch
www.sidekicks.ch
login.sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
sidekicks.ch
sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch

Certificate

The complete raw certificate details for sidekicks.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEA7Lp2L+m8bDD2RK3Yl4V6
ofdmkhddKmv1Rjz0AXEQfB5KkyhOdmZhupFbvH6EFIp0/+IKRz6ot9dGpb17HEov
hE62zsIJaymj+7ra4xenU2aY7P+SsWUPZyaOQR+WR+bpX+3LMbk47ABJV4jV23ze
gm9EfCpSMO5FHWK6NPBCJT/J3f9qYvuqN3FISG1npghKs0cEDAluccKURCiFiyEa
vs9DlMd4/4s44GN7Uad7/dYucPHvySQW8tAukVZZJxtwNTDciYOjDE/go5+S5QUA
+mZdxRMM0dZc7vDSSTA4hknWiL/r28mphCUg9H40CNW1zew3KPnMqxE4awnAi5kr
RoSEuTN/YcHhqB2QbLb3YprV/QTjcEjLYOgTFsd1p/zcmVBtKkSHgjyg0IoD9n7A
TbPst/lxlHZBsKUpL2yAXZHjiacvvrP/x4seXeK/1/Y+nN8UuH4MaD/UI0xUCh97
PCHJsZ8/wRdJGVKK1tmZ1NOyQWpc9r6gNsgOBpCZFOLrAgMBAAE=
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315244531236299364913856227987596279190699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 22:40:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 22:40:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sidekicks.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 5372259897522684442725894611290466314165395896397333543678209426551165266469184829871136326243907539921365406459638789594273988681193488359291112368624998463153976708954605047700584463026322931299471237121750593957310841161519114257703618564941859608662517877065189704378549686697146681866754914920283981920660651871539327681737656295480959820626029626782757382647125147894159631166560383875930795687239538953826349999858714191404604427030292602449217874297838732563067098608931436472109303196362777869065276533041868208546663000847482874061600708819823387471998080524429419020879371972258526130057455694883409962391399145398103867836156868390419095739659008118657010470491881212013254452304722393935762111521082505033412114355067047841362767326861416294793227861190433510540832623602105684191850227270426132067197715096282565535036316339413208674375598082896064570936776472140757676090141728932777274441129457056990419542763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e046923156fb9d901c734434c4293f0a1f54e97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skik.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skik.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoursidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yoursidekicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ysidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoursidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yoursidekicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysidekicks.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d1866565c00000403004730450220028fcb6691373f94c8bd8ce09d7d16da9586bb19e9dc0384ed775fc1b1f8127f022100e25868283bacdfdc8c66ab5d0a835d8d9eadfdcedda229cf7cd51f4a9c8f62b200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d1866564f000004030046304402206c78b10584a4a6d4cd5255e9d736ce93b9aee7ac33004624d3cb46a8621e5bbb02200282f63df6c64a8d5753ba2db3a3e5c01279402df1f9eae841ba814cf52e8a99
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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