www.sidekicks.ch

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:4f:f6:ad:47:a4:3a:20:54:7e:35:53:9d:60:d3:69:fa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sidekicks.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:4f:f6:ad:47:a4:3a:20:54:7e:35:53:9d:60:d3:69:fa
Serial Number (int): 265186253662638157741759176221963855292922
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:16:db:b8:a5:e5:19:80:97:34:e2:89:e2:c8:cc:fe:1a:a6:8a:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4e:6c:cc:a4:1d:05:b5:b2:af:39:1d:51:a5:cd:4c:c8:96:a5:7f:83
Fingerprint (sha256): b9:39:30:b9:f0:de:b8:67:8b:9f:51:50:ce:ef:b6:39:fe:53:e4:ca:fa:74:57:9e:45:f7:1c:53:0e:17:f5:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sidekicks.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sidekicks.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sidekicks.ch
www.sidekicks.ch

Other certificates including the domain name sidekicks.ch

(limited to 100 certificates)
www.sidekicks.ch
sidekicks.ch
sidekicks.ch
sidekicks.ch
sidekicks.ch
www.sidekicks.ch
login.sidekicks.ch
sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
sidekicks.ch
www.sidekicks.ch
sidekicks.ch
sidekicks.ch
sidekicks.ch
sidekicks.ch
www.sidekicks.ch
login.sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch
sidekicks.ch
sidekicks.ch
www.sidekicks.ch
www.sidekicks.ch

Certificate

The complete raw certificate details for www.sidekicks.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265186253662638157741759176221963855292922
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-08 07:05:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 07:05:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sidekicks.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708311947037447179851905103168677014254985960360111199984132797004033241782217752611314168852407924683858141078970462612614403451961718993154664204967596117627536896628679127605957705734476529013712619375475484302934641964217822289080712962164367696746339018047404502604402766062486104223081725583387993286456887396555746703662418913626397698068723961647148394420621979800061916629143377917345781600708912935689115984897530499490494998702168357915162319648983797861399936836001610002805108483197377324259223333493018578140259083123017162249044097729118825464972211380373940870492699856650483764209704991008646931339969442355537694248704912940236605046567023225920579993400166355958038968581472720035220500705588539493711127531943855734082438677420740555997881548078385648890237292680870864505073963584824283841919649626166391540472569465136088174275493992636732260326947559747762895516518607142550893431480532089776363629695136973717447983125430065855295337151203584922831204657689435212185783314594926097941245728471135888214636777837369370561688618968138303890880646691644601649827656194071869521084374163058261733026309942841939461428068422949154086475610574763145088297009343592826710812979803662279228520486610556891510588764021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8416dbb8a5e519809734e289e2c8ccfe1aa68a97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidekicks.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d0fe835b800000403004630440220011f346a033b4b8de22c1417a057d57baa8b427a656edf389ea07fd83fd7468602201a9cc4ee78520f39716f8d0680cee8b922ef7227bc6388676d1b98507fbb4841007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d0fe835db000004030046304402202c8a910e3480c73f321ae0c0f424401266e2945f6cccc1e3dcea5935af17b8e102200f3171b91beda8e5228e6176b98dc102688cfb97e660b4fe5bfd0567b8b01a94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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