www.sidekicks.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:35:86:96:b2:e6:df:06:f3:e1:84:6e:92:b4:4b:2a:03:51 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sidekicks.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:35:86:96:b2:e6:df:06:f3:e1:84:6e:92:b4:4b:2a:03:51
Serial Number (int): 279550722266614847845262268649107096208209
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:d1:37:89:c0:0b:bf:56:63:11:77:7a:e9:77:8c:e8:81:f0:0b:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c9:ab:a5:4b:58:7f:7b:ec:9d:11:77:37:e6:26:3e:d4:15:a1:60:0c
Fingerprint (sha256): 55:63:70:fa:cc:6d:53:7a:d6:41:ba:9f:ab:4f:ae:1b:19:e5:88:b4:76:65:18:9c:ec:b5:17:c6:27:51:60:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sidekicks.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sidekicks.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sidekicks.ch
www.sidekicks.ch

Other certificates including the domain name sidekicks.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sidekicks.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279550722266614847845262268649107096208209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-06 07:05:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 07:05:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sidekicks.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 561217728795898682025202185161976145076468123275616191487363833700490211484253564391493779888753163364029104895596869827191866911631609233717182133603460089998318942387045687693718843633982663893656683274066857682794053597527393357448117225735381294467348524266082705123967574328934771576521030762628723069259397942093612481617072022770644556256035712353715229365625874062219230875671329589741401937179822402646895173200807903479633507439051674527361686352344304029644754383375488393819012942750198265469229019256358277348923966157504286213359209565944393352583464315244830890410393524618811434472802728456263422699401205497013407673726561750715540911370876445399691350169783991700480342470243594233819808633064430008792434131215304327466713142888147476396108711587725895539104262503190246729988701269813715209535752056421305504517333833227407480389838695413984373833272267751992225423043239663002077953466128803156120936389148744461758665227801953298950063487365716297954295691498710386834841356122880546771465041499722590043337823512442496292668726092355690343325354520158354751199829391106258180696263091086599217783630349142145008511383299948306664832366347835298482330932217280353770477302906937201082324308296704967989982373817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34d13789c00bbf566311777ae9778ce881f00bfb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidekicks.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f79e373890000040300483046022100bf595686739a51c685ee051c39a7a5a25fb21dc44adc3ad93bc03ff85e7e42fe0221009a4d754e3eea9b6124e5af61adaa62149d9632987d8a59c2f4772949653464bd00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f79e3738d0000040300473045022100a36970abde113e65cfe21c3138366c334327d76602c7e176e4cfaceb75353c3902200b38ffab579452426dc5d3b514771068d6824818f7b81eceb69a984da45dd169
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007040243aa8ab0d9dd0a1885a8618d7acb1892560444ba99c4cc966edb1cf5c798a7fae048301e54e3f7875daefab11cb79bec1762c9e51fb77ba77e8b757094c5fdad2ba6e6e6cab7f1ee93fae0b8854d93892f8367fea217375aa915f7149f35c1a3b58c00ee8e3a445cca8a8d1aaca0995ef4a943e81efd9628aaf2a16e2d77a2f65fdb55bb2e7fe6b81db26498ce207704dd95a2f7a503d8a40d2c92ad02e1f082625956e87db928a349f7d176449339cfb0dd27664730bb25eab828cc9ffda26e9810a45f60eefe191ef0b8ed182cb73a3a561c29537774c01993d4839701deb040bdd3c9fbee2f147b41154451421d66dabf64caabfa77f93fe7b1537eb