www.sidekicks.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:6b:92:3b:4c:99:8b:c5:f3:9b:c9:97:78:a0:10:7b:87:0d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sidekicks.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:92:3b:4c:99:8b:c5:f3:9b:c9:97:78:a0:10:7b:87:0d
Serial Number (int): 297941446242348703270096674431685764024077
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:49:22:46:a0:12:4f:6d:32:b4:d9:35:65:da:a9:9a:74:dc:a0:80
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dd:66:18:01:6e:26:d9:bc:be:6b:47:9b:d0:db:3c:17:d5:4e:06:3d
Fingerprint (sha256): cb:d0:20:5e:3b:ea:e9:44:9e:c5:22:07:e8:c2:7f:4b:79:15:26:12:51:f7:db:32:96:f3:ba:2f:0c:88:3d:fc

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sidekicks.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sidekicks.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sidekicks.ch
www.sidekicks.ch

Other certificates including the domain name sidekicks.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sidekicks.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297941446242348703270096674431685764024077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 03:43:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 03:43:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sidekicks.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 908264167626395984105715412418027433467953344181629847373947858894212708136138226851949653767333555605721570026626947386377402042324498120636975433972504069658502025367428438008746731935301810483871423136191505130514014590710619659646460708041953909591631126348399167151025352809028949915850511755208898364158365721315858380937800385663801182955835389676364025785852389703599912503862358186140197646898102076833036756556762046341229527317185705919784971613651629757395051400854154394872021839269722017003881060428443935148246903146867453911365924093987969807375816530475054824739728645407978707547907683113595981368689792083942296692679403936959252256141808637697320578697158157250833593771716855324141279628175138045019309593521480968968961124677593349949789717833169718063217154264186540205378243938346548103717975074442151924789133734328987064921346840233169757065372341713450712552183561981183881792055506848242248908001920101297753240856744337205665684247877865889155010228235625807679651802460609305676061037459137678006366018129526844297866035485108552048256792895365326649018304878526205985730570342240231429239363803884700059634753948595649439573668393985109634199190869961754713446910601301985460253747596841945128808329729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11492246a0124f6d32b4d93565daa99a74dca080
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidekicks.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018711edaa2d0000040300473045022100c09a676491db62c24065eb6287619f8fa743f079c7065828a4ed71d489e5ebbb02207f90847baafc12bb5d1a7238dc11ff9fe4e982132f5ba303814b1361ee143ae5007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018711edaa1b0000040300473045022100be4d081b0fb40570ed3fcf47ce646ed6bf2112db910c04491ab805576161bc0402200beaf7d6761c1d39b0ab65067479c5b637af11fa189b313a6958a71659960194
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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