statik.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:cd:07:d3:c4:53:65:d6:c4:00:78:78:59:79:6e:2c:cd was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=statik.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:cd:07:d3:c4:53:65:d6:c4:00:78:78:59:79:6e:2c:cd
Serial Number (int): 273859555384791398717115109957302892768461
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:2e:e6:e9:32:0d:70:ca:6c:a1:e8:02:90:20:59:6e:e9:65:60:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:0b:57:d5:74:16:e8:2b:1c:26:2c:8e:79:be:f0:0d:b5:57:ab:0e
Fingerprint (sha256): a7:85:e2:63:36:1a:e9:3b:3c:fb:76:e5:69:71:f2:c4:d5:64:c9:99:7d:fc:7e:8e:1d:1b:b1:62:90:b4:48:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate statik.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for statik.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

statik.ca
www.statik.ca

Other certificates including the domain name statik.ca

(limited to 100 certificates)
statik.ca
statik.ca
statik.ca
webmail.statik.ca
*.statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
portal.statik.ca
webmail.statik.ca
log.statik.ca
statik.ca
vtm1.statik.ca
statik.ca
webmail.statik.ca
ssl4565.cloudflare.com
statik.ca
webmail.statik.ca
mon.statik.ca
vtm1.statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
pma.statik.ca
webmail.statik.ca
mon.statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca
mon.statik.ca
vtm1.statik.ca
ssl4565.cloudflare.com
webmail.statik.ca
pve1.statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
gitlab.statik.ca
*.statik.ca
statik.ca
statik.ca
vtm1.statik.ca
mon.statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
statik.ca
ssl4565.cloudflare.com
statik.ca
webmail.statik.ca
webmail.statik.ca
mon.statik.ca
cp1.statik.ca
webmail.statik.ca
statik.ca
webmail.statik.ca
statik.ca
ssl4565.cloudflare.com
statik.ca
client.statik.ca
statik.ca
statik.ca
webmail.statik.ca
log.statik.ca
drive.statik.ca
webmail.statik.ca
datapro.statik.ca
webmail.statik.ca
ssl4565.cloudflare.com
webmail.statik.ca
mon.statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
statik.ca
drive.statik.ca
statik.ca
statik.ca
statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca
statik.ca
ssl4565.cloudflare.com
vtm1.statik.ca
statik.ca
cp1.statik.ca
webmail.statik.ca
statik.ca
mon.statik.ca
statik.ca
statik.ca
vtm1.statik.ca
webmail.statik.ca
webmail.statik.ca
webmail.statik.ca
vtm1.statik.ca

Certificate

The complete raw certificate details for statik.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273859555384791398717115109957302892768461
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-15 16:17:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-13 16:17:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'statik.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1004790335815192171936949843196891854580015272447922020934010696657543380817915931221771618795258737895760667325914667203521071871646458583826361400433144432632794781746803219271718611159923175632703644769461438527328353042230843560817289029663844810469954363335903406459163730255537642030137721371847742191294128794439606542802588632489587572188538869159800311598087205376531562377031169099825191839039243272079515122364088211721432923858451377757467297843860039595948026144126839360212100035175675499931562871506636566641208410028646295611070758264181570931832772047535036858658520302754180238597385342421474763645324391689921841081978766303438212645877867485594977603424681786483840002347267456232995087656887242317708507209070657349530054330296309035683909457275609854655351797869695213104831411679835276961401076143061631772037401806275169829391851295058129270777663582420560962866044771926130972298892154303827995171816192256473137708268207812301341613846546138969535578230601527049534453228605811240452774280416184231200022155277089609287949887484917796579199382706922464058305357909609185744195129229535430109076005444029528821432990601651848757279049993389171627285362194732526772466755964222709877451391545907109922782143499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							022ee6e9320d70ca6ca1e8029020596ee965602b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statik.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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