webmailer.sikla.com

Issued by R3

About this certificate

This digital certificate with serial number 04:7e:ea:19:67:78:b1:2b:b0:39:54:8e:9c:86:46:ef:fc:6d was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webmailer.sikla.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7e:ea:19:67:78:b1:2b:b0:39:54:8e:9c:86:46:ef:fc:6d
Serial Number (int): 391635893216164767008407456721763640015981
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 93:8b:bd:a1:e1:64:a8:94:b3:69:9e:37:50:10:8f:84:a9:aa:8b:ec
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 9e:2e:89:4a:96:12:14:14:3c:9f:8c:8e:f7:64:c3:62:30:e9:32:f7
Fingerprint (sha256): fa:e9:58:26:48:e9:36:23:b7:6d:c2:8e:e1:f9:eb:5a:fb:03:eb:dd:f5:e0:43:74:2c:7a:9d:7c:27:d2:78:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webmailer.sikla.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmailer.sikla.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.pkt-systeme.de
autodiscover.sikla.com
autodiscover.sikla.de
autodiscover.sikladrain.com
autodiscover.siklasprinkler.de
autodiscover.value-tec.de
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com

Other certificates including the domain name sikla.com

(limited to 100 certificates)
webmail.sikla.com
www.sikla.com
landingpage.sikla.com
webmailer.sikla.com
blog.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
www.sikla.com
webmail.sikla.com
landingpage.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com

Certificate

The complete raw certificate details for webmailer.sikla.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BV3IvR8lLzKWg6wx7M2
tTtilVFMo5yujOwOfqeaDsy5lh/IizbyuGRYNlcYf5HQ4bLjp381cuVF9pAbQCLI
L/IDRch1E8TduaArqfs6qfsJzndn0beqgxJM3V2bKaqiHkDObOcevaTb9BcfbwFU
s/hfWDpm5vUYYpkNebTtikYCFt7awcibPv/NRBKYU6PHUUkJPtXZFP1bnKfKNxRN
CGdPjhMeuLgrnRkzhkl8pOsJ91Jdbvya5w2z4taIuIxkjrlxlkubd0dQQ8MfI8Nk
WOyZs8Z09HLcUtxJVJvDUkZN4ekxn3r7lKM1sHKQtDg+Lz66GPFHurVLn9wm7JiE
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 391635893216164767008407456721763640015981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 13:10:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-25 13:10:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmailer.sikla.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30812731383684158038695717836450425290639663882074512232029043667764824841784464257397975426263548144101852471557858788602740118094585436355066228836781616200950159122448895411325525085973876221329163816996844042883986495334317990356238497313125579936322038013297394757638374528174971421293209233037528633959453056082565669456068595258886549605571341390229858981477193883773871708399489715778364432040048337822200638558813995898439874507876502721955819364469887277370891082911683237361177726402517396515975763700934765556717700720621905866776265489973074230068776499119821531905098470299526222577358496450549611267247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							938bbda1e164a894b3699e3750108f84a9aa8bec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pkt-systeme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikladrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.siklasprinkler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.value-tec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sikla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sikla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailer.sikla.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c111e33c6000004030047304502205e1c38e8a12f7575c917b09ae83b110130c3ba0b82107816ff09261e18363f28022100da928f22014e0eddc33f135a6bc1542c2617ef8c174b4e61613f1fa720a84be500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c111e33ca000004030047304502200170a16a488a2f1a2b20e614b42fc43235a5c2d6009e82755dbd694e44f2c495022100e878bef7e6321ddde7d4122426f93238c5bdcadec94e02986455f133ba20455d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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