legacy.ntraq.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:ff:77:f4:0a:97:16:0d:1a:c3:27:85:0d:bc:80:8f:00 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy.ntraq.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:ff:77:f4:0a:97:16:0d:1a:c3:27:85:0d:bc:80:8f:00
Serial Number (int): 335857989756043627977851352281319527714560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 89:0d:bb:13:3a:02:60:fe:1f:07:7d:4f:25:2c:7d:20:70:f1:db:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:3e:01:be:2d:da:60:4e:12:25:6b:be:42:bd:a9:f0:55:6d:9d:df
Fingerprint (sha256): 33:74:8a:74:34:a1:d4:21:f6:09:33:06:38:b7:75:40:47:15:48:06:c2:b7:f5:1b:f4:d1:5b:56:2e:00:c7:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacy.ntraq.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.ntraq.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ntraq.de
bugs.ntraq.de
dev.ntraq.de
docs.ntraq.de
imap.ntraq.de
legacy.ntraq.de
mail.ntraq.de
ntraq.com
ntraq.de
ntraq.net
ntraq.vtx.cloud
proto.ntraq.de
smtp.ntraq.de
webtraq.de
www.ntraq.de

Other certificates including the domain name ntraq.de

(limited to 100 certificates)
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
fry.ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de

Certificate

The complete raw certificate details for legacy.ntraq.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335857989756043627977851352281319527714560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-18 14:24:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 14:24:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.ntraq.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714805945535731877687132905148095398783656288106019888540786626029225767227532031022058704536182938283822845699278001140347463125029947165087135591554809066461193751708800200778231156931362729109349040372347569924434609082221090565848610090303384043073577224123731152198306203653907720372598800270074314914401953561504584978652881964808716990730711458988494579657461784867883446399631736976135121057709101355939874577310405096048680161293623832798565855284892515851796366445448628387002011629783095723948669215493755225000881336495136726302155078057915178410111222481562080502727934060345975115545603416756864826906597488631902244968757418941706504230420043514873599933270540556403612983978864328016849432034936256734423034984866725582212887468327608930915995125042481771878115195028759506098185239040515952145176557691526500379657847797761176707889871199289703966243278183458462468605516331104149247018044227169184858769000003695594386549200591078110883297701676837141809093377987014373882481635975251479984449975323023375734798295352582309827347353503834335091216649400871237724059060834539176076041400737363391244149579746156280061282800178019208214455496978973500410504953267079340936095679857788797042879494150853366220359581097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							890dbb133a0260fe1f077d4f252c7d2070f1dbb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.vtx.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proto.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntraq.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a310c32460000040300473045022100cc03404aaf4b6ff430a40e10ee6c61efe2e5ad403cf2785f0d851e0854e9a1c0022017adb8d742ba6c594d88040ff6ef0955cd2c20593604fe69380e9037a34e79f7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a310c34b00000040300473045022100a1970f9059475a299d733e08aa4c7fdb988e047eb4a1562e6bec0c64a343d01b022006c3f952eea2675da77785951e3b3908e93e0ff3b8d6eeb0cf769713647cbce5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009973833c959c6ca952277534a81a74edf031d8b3c7c1dee7e130af6ce6373241d2541409929886c91cf32bfd32614e870d9127be396416d69ea14001b45d8006dc1b064f2b7818311fcc9644eb76a986f7384ddf5794b3095ec3683e57abe2a76262ce7023faf794f285a551c11203bc1f5dd1c79ed76336f829a2a73a2a0fe8d914edd8c04e4ae9455ebb6990340b211b543c7ac25abcdf47b2483bee98668c8ba1dd43e885ff4c1f3fc19d54154a0a8acaddf616523a3d096502248996b7faffae92a899cb05ae84f51125d4a185f4538c95690d5bf46d3f06c2a675a5d085737e9b224cc60e3705e9c79defb5444e9a1de0f9e5314ff443ad6c5facf0ea52