statik.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:a9:18:f5:a8:91:11:78:14:29:bb:e9:15:a9:49:0f:37 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=statik.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:a9:18:f5:a8:91:11:78:14:29:bb:e9:15:a9:49:0f:37
Serial Number (int): 342548830251421930504813294347198172565303
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:49:5f:9f:4d:b5:43:6e:3f:d0:a3:ac:3f:74:f0:f8:47:1b:2c:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:d8:67:90:60:17:bf:99:3b:d4:64:31:f3:77:21:8d:63:35:1f:b7
Fingerprint (sha256): 9e:4f:a8:0b:66:31:06:f2:dc:10:05:40:b0:2b:6e:09:11:7e:ee:bb:db:13:f0:c1:5e:09:dd:2c:cf:da:21:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate statik.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for statik.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

statik.ca
www.statik.ca

Other certificates including the domain name statik.ca

(limited to 100 certificates)
statik.ca
statik.ca
statik.ca
webmail.statik.ca
*.statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
portal.statik.ca
webmail.statik.ca
log.statik.ca
statik.ca
vtm1.statik.ca
statik.ca
webmail.statik.ca
ssl4565.cloudflare.com
statik.ca
webmail.statik.ca
mon.statik.ca
vtm1.statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
pma.statik.ca
webmail.statik.ca
mon.statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca
mon.statik.ca
vtm1.statik.ca
ssl4565.cloudflare.com
webmail.statik.ca
pve1.statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
gitlab.statik.ca
*.statik.ca
statik.ca
statik.ca
vtm1.statik.ca
mon.statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
statik.ca
ssl4565.cloudflare.com
statik.ca
webmail.statik.ca
webmail.statik.ca
mon.statik.ca
cp1.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
statik.ca
ssl4565.cloudflare.com
statik.ca
client.statik.ca
statik.ca
statik.ca
webmail.statik.ca
log.statik.ca
drive.statik.ca
webmail.statik.ca
datapro.statik.ca
webmail.statik.ca
ssl4565.cloudflare.com
webmail.statik.ca
mon.statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
drive.statik.ca
statik.ca
statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca
statik.ca
ssl4565.cloudflare.com
vtm1.statik.ca
statik.ca
cp1.statik.ca
webmail.statik.ca
statik.ca
mon.statik.ca
statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca

Certificate

The complete raw certificate details for statik.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342548830251421930504813294347198172565303
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-13 00:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-11 00:36:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'statik.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825849577217337446730059929933708243028201485044621552796368393832848283192270037747595122964881430168794878639537165702334474404031834884507497161466872891319326049497309018575792858930771331886167594054565657116908181834257047785888704552011578596311994338440532519918654602288623274686056641029545025908230781600225228938732170671656166614552149090113403605386191205540522878621033331474695459684494813956499008957246469083635965203354041741219134426346267454160838348679810159480036721285954687982340245102947208690981979997294024014750231191596398748831801761488893895170779224235474116561460878409170734281351200961172037883665140282849887535536131590294108719086981002027595949324750242114961157231853550709437120040005295090788252250033868557269759382051870846275200648135554779479436036290851162375755529124268822201740744867088692942950285386445739371013365463809689814476481500141401973886110092961498385707340151953605025879734886862210796309954777172268753532646078864887225119146969430299406539309876900703572510242176676144124043129324008841340695343912316658181993531296712039865121612164075118421173019274935334942016890270038268922653536860769801621697954913442761641302172084701787205718486438180830048725445774693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11495f9f4db5436e3fd0a3ac3f74f0f8471b2c4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statik.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0069b246727c86fc2113e38671cfd429e21e0259f9f0c1302472fa71f95a8c145862594f327ec07bb299c118f1e106239eeb1031c53d3d460cdfa41ffe3871e940fcf29bafb9b7f570658e6b05e32f63e5996751eec1913868cd356c5bc00a13b537c1a351ffc6fe878236ca480f823efc6f55db166ab4a68cfb899e70401731863fbe55fd275bf1a10514b3f04c7ed7b0168fc22af4515a5d9b1148408e9275dd8d63e38f400e0e52f04cac804c0b68b01df832d6db93aab9057dff17018d63471bdba1669951b0619ffec3979f6fe562de5e04142496e0fe3ac8512045bf58669fec4bc554a4c2f5bd0fb1fa5f09cfe14993819d2aec099a54d63bc1a123a190