legacy.ntraq.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:7a:3a:30:50:06:66:2c:c4:a9:6b:74:30:4a:31:2d:56 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy.ntraq.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:7a:3a:30:50:06:66:2c:c4:a9:6b:74:30:4a:31:2d:56
Serial Number (int): 286680220896029635400983889870907008691542
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:90:36:e0:56:ff:0d:5d:61:5e:fe:6c:dd:54:2e:89:5e:b6:6a:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:bc:9a:a8:67:08:18:32:68:5c:ab:9b:d4:6c:78:dc:98:5f:e9:3d
Fingerprint (sha256): 0a:a1:95:5c:0d:4a:ee:a6:f9:a4:b8:d3:c0:cd:1c:93:f9:db:0a:cc:91:47:83:23:38:a0:78:5e:9f:11:64:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacy.ntraq.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.ntraq.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ntraq.de
bugs.ntraq.de
dev.ntraq.de
docs.ntraq.de
imap.ntraq.de
legacy.ntraq.de
mail.ntraq.de
ntraq.com
ntraq.de
ntraq.net
ntraq.vtx.cloud
proto.ntraq.de
smtp.ntraq.de
webtraq.de
www.ntraq.de

Other certificates including the domain name ntraq.de

(limited to 100 certificates)
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
fry.ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de

Certificate

The complete raw certificate details for legacy.ntraq.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2miYBzF6VK4Z9OeQQt9t
DvfJ0awyG+Enudgb7YPcsRBksWCkniD2Kg6nbHhCNQ4qmsxbAgiSv2PphNRyEIUi
dSuv+inBmsrwbUEulX0vxEhVr6BtBDaBXAfRHKgMJjd30CcKPXXTz8kFgANStwSr
qGUt8xt2nZ8K/PYoBzkl90JHcWdYsTr2z1HTwvtrWZYs8I9q6KfVc407HcljoinG
RuvQonM074pbKNFQ8kkLjYrWs4YDq+uqYSb/sqNp7Fs0pvSHYBfLka/sSiAIZjDv
i38Ojg5EY7zPaO11qMBCfNt/HMoy4PO5Slea+WH+SRxd5b7ox2KRMhrt70fJrGx0
/3wN/GMkXZnr8iXerNZgFalMW8c14zTGjMx6HlPOjTAVDljoQdjtN3x5zGp0xJw+
33IQs7Y0np9tX7cN2VIEqppC+rhW+JeN3B75GOm7IRKszLyYlXkjlMfM4szCynwu
OrvIx/vpx8jq61CBMMRBZeT1XEpnUE2xVp4kad0FwlPybw/FcCI8Q2XYr3QoGln4
ATKePVhBR1mc6h+fMeCSlTYpj+iIE/H/ZxiLiUjqxq6QMzGPVCDMtONd1GyvaVQw
rQjFxXusDPzXEGCY+4AdENiQeZYplFH/rLaP6/S+W6zxIIQVk2dzdzqHmQj5y6Ca
orgoZaE8ACA1HKsU0Sf/qXUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286680220896029635400983889870907008691542
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-14 23:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-12 23:01:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.ntraq.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891029226045277513714077937364246740821859087961210621732207537963682656119056944671540069704124915596224570397627459493971641284343090545309127552179510539678355519666213211747846504434297320774392736258690847983544669225841347081541695376085852014048188942228896882257642732656729797607303500231730463632076368270583335180298142328486969164520074858864969786468889302707034244236079308034782973130248632824947936989680817191165115934163354918098073554540874343935956875822108830570575003988772014841658437769402176796453818530012767080154440637164728977530987103001778178942366644236396663729768687782357689550071428685243169986064968846193752616128413505921219422969155574528505265372947454883666736370661482510660562518217703267909936189686199988697462989253520668576663575751084081431710166759403502471383506508559243340820326464646375600981348115489262834914409222649260396156231827948515028791628738589942738095049491465610528711377481422036437914564942529379222794235070076147579394656393074052485850127524865173443656844881374775238803138154899189312010734650594228044699190965764182457811823848381772264746765297719724375934557865946415984972600547585009097387757041228158690475923433009131511020423952008650267897559492981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef9036e056ff0d5d615efe6cdd542e895eb66a6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.vtx.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proto.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntraq.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ab8cae960000004030048304602210082e121879aa3f49c70bb6ae84223fe1ba37cd81e0528817bd957e7ef2543f9f2022100d0663fd56db543a787fdd06dd6ba6e630109fd747a43531290b0e7bff544c41e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ab8cae9500000040300473045022006e9a5d5016c443300a6d7b5176e1f5eff4aa9511223d40841b12fb340633889022100eca46f9078be9ce6ae39f62e7f58ccab4ab892bbb78f54ff64987f88aa38b54e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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