statik.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:bd:f8:42:e1:28:4a:96:3a:a9:d9:d0:15:d1:57:8b:8a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=statik.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:bd:f8:42:e1:28:4a:96:3a:a9:d9:d0:15:d1:57:8b:8a
Serial Number (int): 324881891179877399858350422440739815787402
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:72:9c:e1:60:3e:04:a0:23:f5:24:02:b7:fd:d2:0f:42:a1:34:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:29:68:2f:be:72:a7:5e:e8:16:d0:6e:a2:f6:00:d1:14:ec:69:5d
Fingerprint (sha256): 70:3e:fd:21:df:72:e1:6c:be:69:0f:a1:0f:31:2c:18:6a:7a:34:35:b7:c3:9c:1a:2a:f5:88:46:42:a3:fc:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate statik.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for statik.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

statik.ca
www.statik.ca

Other certificates including the domain name statik.ca

(limited to 100 certificates)
statik.ca
statik.ca
statik.ca
webmail.statik.ca
*.statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
portal.statik.ca
webmail.statik.ca
log.statik.ca
statik.ca
vtm1.statik.ca
statik.ca
webmail.statik.ca
ssl4565.cloudflare.com
statik.ca
webmail.statik.ca
mon.statik.ca
vtm1.statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
pma.statik.ca
webmail.statik.ca
mon.statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca
mon.statik.ca
vtm1.statik.ca
ssl4565.cloudflare.com
webmail.statik.ca
pve1.statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
gitlab.statik.ca
*.statik.ca
statik.ca
statik.ca
vtm1.statik.ca
mon.statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
statik.ca
ssl4565.cloudflare.com
statik.ca
webmail.statik.ca
webmail.statik.ca
mon.statik.ca
cp1.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
statik.ca
ssl4565.cloudflare.com
statik.ca
client.statik.ca
statik.ca
statik.ca
webmail.statik.ca
log.statik.ca
drive.statik.ca
webmail.statik.ca
datapro.statik.ca
webmail.statik.ca
ssl4565.cloudflare.com
webmail.statik.ca
mon.statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
drive.statik.ca
statik.ca
statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca
statik.ca
ssl4565.cloudflare.com
vtm1.statik.ca
statik.ca
cp1.statik.ca
webmail.statik.ca
statik.ca
mon.statik.ca
statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca

Certificate

The complete raw certificate details for statik.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324881891179877399858350422440739815787402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-13 02:20:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-11 02:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'statik.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 839119607740710257798372437776605969047729869668846131557394961089044484645361128723404260106184386836801483970801405388989771864393653938072690393462398490082143589472961269582487985946507697992225635293319030142703772259312436242861746695189045687116529661953369076487758900057051441984994599487488675990323409182127473381523036725650410719312536297152927066372981568428109049982824407873585779164992087820170524391858862769997399485628580617146960853198437740017725904968141305854676281033249671803965846015294389888570792807589415607788699383658238805350391359395897539129573490478221534654211389748534715209743944137064763487303648552552448473776251858866378048080149414410242555152230633103132118789710162131992922445285429563590495327807513380931240432732690685020256896818182344695474932664149803918668652093488887016251990862683179946226188235632651413198381123785837244937329505857050435863477512546206533930272269168336347700841977195424981621644664582583234846550086846473787033310257922778172697065924146251236273468323225505901733647170421519706380599299981076721124928857667289010627047333431721529999400084438888821536964920646988552129583422542440780397562178385382155841215835511492705501244368379750233446194642177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48729ce1603e04a023f52402b7fdd20f42a134a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statik.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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