www.sikla.de

Issued by R3

About this certificate

This digital certificate with serial number 03:4a:02:41:cd:f3:ad:8f:72:33:23:01:10:47:5e:af:96:29 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sikla.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:02:41:cd:f3:ad:8f:72:33:23:01:10:47:5e:af:96:29
Serial Number (int): 286520753079917687393646135397273620682281
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:ab:30:89:16:77:bc:1e:b9:16:a2:98:3b:55:01:ba:a2:1d:a8:85
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:81:c6:a7:36:b8:46:fa:56:15:e8:3a:67:ef:50:81:37:e5:1a:b5
Fingerprint (sha256): 46:96:29:70:e9:07:7a:70:c3:1f:11:ab:60:5e:7d:f3:74:a0:1a:e9:88:60:75:4c:55:9c:cd:44:62:2c:5b:c9

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sikla.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sikla.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sikla.de
www.sikla.de

Other certificates including the domain name sikla.de

(limited to 100 certificates)
sklint43ww.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
www.sikla.de
webmailer.sikla.com
webmail.sikla.com
www.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
webmail.sikla.com
www.sikla.de
www.sikla.de
webmailer.sikla.com
webmail.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
www.sikla.de
webmail.sikla.de
webmailer.sikla.com
webmailer.sikla.com
www.sikla.de
webmail.sikla.com
industrie.sikla.de
www.sikla.de
industrie.sikla.de
sklint43ww.sikla.de
webmailer.sikla.com
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmail.sikla.de
sklint43ww.sikla.de
blog.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
www.sikla.de
webmail.sikla.com
www.sikla.de
sklint43ww.sikla.de
webmail.sikla.com
webmail.sikla.com
industrie.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
industrie.sikla.de
www.sikla.de
webmail.sikla.com
www.sikla.de
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com
webmailer.sikla.com
sklint43ww.sikla.de
webmailer.sikla.com
www.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
webmailer.sikla.com
industrie.sikla.de
industrie.sikla.de
www.sikla.de
sklint43ww.sikla.de
industrie.sikla.de
de-neu.sikla.de
industrie.sikla.de
industrie.sikla.de
webmail.sikla.de
industrie.sikla.de
webmail.sikla.com
webmail.sikla.de
sklint43ww.sikla.de
www.sikla.de
webmailer.sikla.com
www.sikla.de
industrie.sikla.de
webmail.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
sklint43ww.sikla.de
smart2biz.sikla.de
industrie.sikla.de
webmail.sikla.com
www.sikla.de
webmailer.sikla.com
www.sikla.de
www.sikla.de
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
industrie.sikla.de

Certificate

The complete raw certificate details for www.sikla.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8BSYt3P1i+mcd28tNxCm
QG1PJpKr274ckHb2uhcESEBva1AZVRsSyhH7zw0odU1o9AH2iXsBrl5sMqMAihQ4
vABXGhHanFRog6Nxbu1uIRwHKvJ7qY+gIk9skUDXNN35mc3srA9X2+f9lt6YerbZ
p5gqvsH0OGsRmcd5UtoR3y46vO6r6f5uhuYLBjQyQue1yKewwzH9QLULM77tsFL3
OClULsmyQhTYW+OMMBxyhKXJp1Oou59ZWfDYaLhBCfsFkJTC9IANwQOuLst/YDG2
+8SVUVMi5JH9J5BVtqOpAXLrraRITElD3wbOuNbv03WZLiNVm3qdP/RiQfTbV/cb
+N8N2a6LJ3Hbh7OiwC+O6RwyvfENydAjYK0oVesORbsOmedneNN0QCQdbZo9Kqe2
NRiKjoz6jK7qCBhlB2KU0YFrg5OFGRo2jb6JUT/zjN0exYydMdPwE+bjVYKT3UP6
gMfVzgT0p4Ytluhjghi1OeFmUvmt+J+vI4bd33id2uFz7vRaFPj5NcXSvBX4QbLZ
uPASOX3hMIw+6/eDqmrdfNmbiIkcMuPQWXK1xLCq/X53Agev0PJoKRXCHkNDUi7i
APLraULVC7cTtoYRpRXSFqCj60GXyU0pjgtv6lkz3XnwhBMxLTHJfpAmMs+d1sTk
HKkc3SOBAiUhokqcjkkT1OMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286520753079917687393646135397273620682281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 00:21:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-03 00:21:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sikla.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 979442805192218996053801986269249954096705377671404085274552031497082838131705955984471769263234753003878426581065074968559102939507637577946693538551432093775883323215290184031355843574523886978079518203318678133878395468710518743519467524361294186286019660757336694735192914710070615757520566401262860460508612734385230249432627189507624983215173466297153823230483105952334405830857375929603240576852093155745009425721611222701727945775559191848402802551702166062945490582255697755821144982059323989428187687064108794477497868823072651791087085874543439208516445190891688996092594567652327309968813560599196635406853735233797353389728069299419323160065271040072546061348013767813766557306183824017171218347879945381911433340455222990367802984944790010084752598739613820536163516996047605159840332199430830922938696170575884506643961275966225396607345222238348794854744932864184405652390217410592814326551902763017090838953355783888063963961259992107831569935013687681362441573437929853144786869044805543034896597901991420226367049345648933729399533285967366179357359769252487066477652487657915157816146706904806563870718458335420472667965161981327999949316232400571144644054945829535808571002061501696932789180626704836159117448419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6cab30891677bc1eb916a2983b5501baa21da885
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sikla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sikla.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001888925323e0000040300483046022100cf120f1987652407629c60157749064260b74747a57034ed8114da128bee9b0d022100da91545450950867ed7ba71962c7fde8a95f0e32bdce4aff941b08a504c166e60076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001888925325c00000403004730450220425ed7f44a6a4c6279bcb0b1abcde504beac689ec49ca7730f030c989b00353802210089bd85af29bbb82963b173bac0c3f92c8abeb34cae9e9be3b54886f99be9e595
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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