www.sidekicks.ch

Issued by R3

About this certificate

This digital certificate with serial number 03:18:5d:42:f8:79:a4:5f:13:c6:29:cc:d8:61:93:7f:a5:85 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sidekicks.ch

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:18:5d:42:f8:79:a4:5f:13:c6:29:cc:d8:61:93:7f:a5:85
Serial Number (int): 269627600536258983390580470645385974490501
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:f2:a5:7d:ce:15:72:f1:72:a0:38:53:15:78:03:70:8a:f3:ee:e1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:64:55:7f:f6:17:b4:1d:cf:c6:2a:b8:f2:50:2b:69:08:2a:e6:4c
Fingerprint (sha256): f7:af:17:13:b3:68:09:75:e1:36:ad:66:3c:b3:87:d9:ca:1d:29:78:77:d9:58:53:18:8c:ad:00:f9:ff:2a:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.sidekicks.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sidekicks.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sidekicks.ch
www.sidekicks.ch

Other certificates including the domain name sidekicks.ch

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sidekicks.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgISAxhdQvh5pF8TxinM2GGTf6WFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MjIwMjAzMjZaFw0yMzEwMjAwMjAzMjVaMBsxGTAXBgNVBAMT
EHd3dy5zaWRla2lja3MuY2gwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQCojPpgcq0845mBByWtsHlFEOojXpGMklon/lDi4XB3NjsNNEtq3VABwDAZkB/I
nqcof611XoHF9q6iTR6nL7yk6DfeCyyh4rzIex5F/7bfe2nEoG6EIv4cQ0vkCKAz
iFFn/Jc9hzwCOMulCkQvtz9pMwX9AKol/Vhd6wDRRXVtJvuWeBh9jgR+sgRKJ70t
JSEb3Kgekh6Gvvii/AMqrCXh2WbkYjDaPtSKv12ZQX7LCtpxuao/VQtwsO0xlIVr
l7GNYzaej3OReiZ2zbcHin5xqYUX1G0XKFl/fg1inO+uH/E/1rADnF4aUiiSXWf8
pPpzw4px53iLFkhLcrR9eDDU2bbixnnJWYjfyqLxTgpFpz4bPB3eCEKBHl+kcqtm
t2ur0GE3oiFdQ06bksDH7OkbW3gJ34I2U5apXtbP/j3VTFFRnv9v6py7XntiQvFF
9SiAvYNgU9SQ6pAn4Se8aml8CxVdnalZotFDIVYLIeLg2odAED7lRECM0XwqvtLI
5KHT4HmcitIJR9HK26aX9KBIQRde8qkfW8G0u+7oFXwizGHHqQHALP5NSAdiZy4w
4tLMbcJOr0U+tTnqLG486nNfYqqoNzxYn2tocrCfI7QzGcCTr3owkCNO2aiyZ/Yu
ncwWPEI3t9v2k7HUI3qnzyxt89jSO2BqK1S0AuzxFh86NwIDAQABo4ICIDCCAhww
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQS8qV9zhVy8XKgOFMVeANwivPu4TAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzApBgNVHREEIjAgggxzaWRla2lja3MuY2iCEHd3
dy5zaWRla2lja3MuY2gwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdwC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAA
AYl7jVLLAAAEAwBIMEYCIQDo6A3UoAHEA4NfYjaHtfqbRTiINTA9qTPyNcydtef1
cgIhAOB/vzoZAz9AkW0/fgzzdb0mrAPlznMTczyjpbG3NJntAHUArfe++nz/EMiL
nT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGJe41S9wAABAMARjBEAiA47oiczVGX
H/dz5eXoY3LixbA7FiBn8eOniaKKb8TCvAIgXFostd6yPqFBIbW2y320GT+s7U2u
C8eAd/08lxxXDCIwDQYJKoZIhvcNAQELBQADggEBAGz1mG7+5bUru2Bb5o+GN4uY
MnJnr2PXkM22HwbQg/l8kFsps/QdZ7WYhpkYJnp4LKYYGZzU2DShosThrGflYl9s
TFX9Rj9qYsp/+ilXrd3AmfzNdQ94J0zo0A9bANiH7NmVuIhyMFEBjiVuQU2Bm3bO
VR5XPyuoZUxiM2rIr8dU9O1sKbgkZkJdajuAAH9uHNZEtbZKrpGFcdGC47W4UseK
2+bu0ZPH7JNGyDiNK7OvAaiwt4M7huVTqyIiTYWerNYqg1zmrpIfki8UqEJGXH87
tnT0OGQWTInnzwx0bADuMZbiZ4qlSvYhGXGMc4XsXXUE+1wpr/F5Nj/03mA+nEg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269627600536258983390580470645385974490501
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 02:03:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 02:03:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sidekicks.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687626844836988971421829943443075036897806763203993177145455630747807208792818878034155435741667054737142717036529853918514521380515119725259306038621530526147228969419579040738307129791281800936571077985967650973524739762094479455499148838782365886898710090452582443191218405776686132317946478682493801326943037317178489238932252998597611492245826256839126083195418959767599379146727076759706664004763277287007602076212321228135404451949931368638227351749320351111193294773467010763533664204783410795444030244178398464520395962196082347087756505213953745941998574695408838148190002078450958079629833140642554968155444382937278737493446517378732958609592715701080138177441804995362974973136097610788853161133243722859873368790143670267928600064109228542153081181638601580002004485442561087702095256974539935492618171697062541022943539883677474664839297409081087824961906099880079730452980937893641238440318667128797852895820297426531402350098647325449586682397341452257095708228506479636917874352158482158611031632990244229728215865119580226279488999317075446207757049725182253277092240145015940233578747925857295674074682857050490770972573575782931727844223787468281464341821992163139774497598050141678194981175283784169814254107191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12f2a57dce1572f172a03853157803708af3eee1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sidekicks.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sidekicks.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001897b8d52cb0000040300483046022100e8e80dd4a001c403835f623687b5fa9b45388835303da933f235cc9db5e7f572022100e07fbf3a19033f40916d3f7e0cf375bd26ac03e5ce7313733ca3a5b1b73499ed007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001897b8d52f70000040300463044022038ee889ccd51971ff773e5e5e86372e2c5b03b162067f1e3a789a28a6fc4c2bc02205c5a2cb5deb23ea14121b5b6cb7db4193faced4dae0bc78077fd3c971c570c22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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