webmailer.sikla.com

Issued by R3

About this certificate

This digital certificate with serial number 03:52:22:f8:76:1b:6a:28:7c:b0:e3:ba:16:3c:9b:a7:0a:43 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webmailer.sikla.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:52:22:f8:76:1b:6a:28:7c:b0:e3:ba:16:3c:9b:a7:0a:43
Serial Number (int): 289286495719771645696491595908846042155587
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:28:d0:9a:a6:8a:54:44:34:af:2c:d1:73:e8:b9:10:73:18:69:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:31:6c:ad:67:4a:15:32:cf:57:5f:e0:fe:4d:2d:50:d9:8f:05:0a
Fingerprint (sha256): f4:e7:42:09:1b:98:f7:9d:eb:79:41:93:55:53:c8:a4:6c:27:1e:24:4d:f0:b7:59:b4:8d:6c:26:44:ca:39:e4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate webmailer.sikla.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmailer.sikla.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.pkt-systeme.de
autodiscover.sikla.com
autodiscover.sikla.de
autodiscover.sikladrain.com
autodiscover.siklasprinkler.de
autodiscover.value-tec.de
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com

Other certificates including the domain name sikla.com

(limited to 100 certificates)
webmail.sikla.com
www.sikla.com
landingpage.sikla.com
webmailer.sikla.com
blog.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmail.sikla.de
www.sikla.com
www.sikla.com
webmail.sikla.com
landingpage.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmailer.sikla.com
www.sikla.com
www.sikla.com
webmail.sikla.com
webmail.sikla.de
webmailer.sikla.com
www.sikla.com
webmail.sikla.de
www.sikla.com
webmail.sikla.com
webmailer.sikla.com
webmail.sikla.com
webmail.sikla.com
webmail.sikla.com
www.sikla.com
webmailer.sikla.com
webmailer.sikla.com
www.sikla.com
webmailer.sikla.com

Certificate

The complete raw certificate details for webmailer.sikla.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BV3IvR8lLzKWg6wx7M2
tTtilVFMo5yujOwOfqeaDsy5lh/IizbyuGRYNlcYf5HQ4bLjp381cuVF9pAbQCLI
L/IDRch1E8TduaArqfs6qfsJzndn0beqgxJM3V2bKaqiHkDObOcevaTb9BcfbwFU
s/hfWDpm5vUYYpkNebTtikYCFt7awcibPv/NRBKYU6PHUUkJPtXZFP1bnKfKNxRN
CGdPjhMeuLgrnRkzhkl8pOsJ91Jdbvya5w2z4taIuIxkjrlxlkubd0dQQ8MfI8Nk
WOyZs8Z09HLcUtxJVJvDUkZN4ekxn3r7lKM1sHKQtDg+Lz66GPFHurVLn9wm7JiE
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289286495719771645696491595908846042155587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 23:11:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:11:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmailer.sikla.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30812731383684158038695717836450425290639663882074512232029043667764824841784464257397975426263548144101852471557858788602740118094585436355066228836781616200950159122448895411325525085973876221329163816996844042883986495334317990356238497313125579936322038013297394757638374528174971421293209233037528633959453056082565669456068595258886549605571341390229858981477193883773871708399489715778364432040048337822200638558813995898439874507876502721955819364469887277370891082911683237361177726402517396515975763700934765556717700720621905866776265489973074230068776499119821531905098470299526222577358496450549611267247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6528d09aa68a544434af2cd173e8b91073186932
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (225 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pkt-systeme.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sikladrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.siklasprinkler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.value-tec.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sikla.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sikla.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmailer.sikla.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e8cb2e1930000040300483046022100e9d1e4cebd89da6f159ad2540c6dc70b0d0b7807ef2139899925a3fd5cb2b218022100b1cdc5e78b83906c46e7a62f3fd7ceb37b6c78ad1885c6d0b3961da0c98fadf50076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e8cb2e19f0000040300473045022100aaee8674e57b41e769c375f4a0f62c3b7a0242afea71cddaacf0ac757aedfd3702204978b32e104e91775a20d58f7d280e5522d081fb3def1ca3ac6bbd34814fcf91
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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