legacy.ntraq.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d1:c4:c5:55:14:29:1e:81:f3:bb:9f:97:07:3c:6a:61:ee was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy.ntraq.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d1:c4:c5:55:14:29:1e:81:f3:bb:9f:97:07:3c:6a:61:ee
Serial Number (int): 332717425777013959003384849317268919312878
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4f:9c:10:ac:92:76:f1:55:32:32:ff:69:87:33:b5:73:97:73:51:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:ba:63:b3:9a:03:f9:b6:7f:42:0f:ca:a2:b6:47:62:3a:96:7a:08
Fingerprint (sha256): a7:93:d0:38:a4:b8:1e:a1:25:77:a5:66:da:f6:e3:d0:42:78:39:9e:ea:11:42:92:c3:c3:ee:93:7b:66:50:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacy.ntraq.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.ntraq.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ntraq.de
bugs.ntraq.de
dev.ntraq.de
docs.ntraq.de
imap.ntraq.de
legacy.ntraq.de
mail.ntraq.de
ntraq.com
ntraq.de
ntraq.net
ntraq.vtx.cloud
proto.ntraq.de
smtp.ntraq.de
webtraq.de
www.ntraq.de

Other certificates including the domain name ntraq.de

(limited to 100 certificates)
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
fry.ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de

Certificate

The complete raw certificate details for legacy.ntraq.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332717425777013959003384849317268919312878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-01 00:03:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 00:03:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.ntraq.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 932150634570881691528083378385081356889937757611163470623988944938344697988386492246447098342522683604160789877767476421559793901594984150613847230089120447119231821587086494988666316213302168100803742044499639220827746758650810399058240254975853170484359962644854306426911449365430376406843172488386047355310675921974705047312474169967991099245061787976584476261423577066656967218681204797086278145586521014747065178025788226822387172268255497011046409551156238271861504000936413687272601829629088124031763114331276815941170454279704052317983406756867368766800396561759650045986043537692561375990799517260709935209740913334282138565373607927156934906874281504513377694440372096217182901960379149402277058763413366847962871066682278678520128881410731940354554064155519062847609770460184720919504107964766480743759031210396396391491159783669129275619218852478480986366510040824891688694642730940919653495272921613433215209262746787869755663117743323735755997013849661339624409858240727839336318775105009648196511284224129607400351742232711758842213628586393545446602443486922986070493889445326492018755052934296241365472702398562265166705598932326184424897994926271799976321892172584638343516713572041890767558779896013846171749560921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f9c10ac9276f1553232ff698733b57397735155
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.vtx.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proto.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntraq.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f5ea14e720000040300473045022050c16c5942f54001bdda07902d4f12305e339a33af539695aeaacd60a4e87102022100b9408b6da30d4bdb4b9f506851ba66a655f984b2dff00319d5dbb974355285e100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f5ea14eb60000040300473045022100b3b2999ed2496060ac53fcd97a0ab0e7090a705d743625765348e2822108710602207aa4282699de2e80efe73d50af1535b034da043f6e2e031c133976579078c4dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00307e3730d1af3cfde948f910c4547fa0854f2adaf51bf354c130291ab1064a8aceafd1c39cd47df457600bad9e5e8375be8444213e81526e9e4ebfe509b730437a7294bdd05d75aec4e17794adbe9d8ba5c35731b44eefa7cc45b3fac156ca7a42d95dbfa680c87f499562e745ccfacc79bae7b54e2d8ef58b7989e8e87eaec842cf1e33fd8350a5dfeebd0da99f3ed881f25610d2569ccdb58366ec0e02dcab7778527028741a515767a6e40676b19d36f763260e7ed7358a446942de6257ae67e07d73dff04fea3c641f3896b52536648e1c2c79c8c6ffce644279bc3108f31a23b9907aa85392f70fc67d35c44c5f85a16c812ccb0b8ca4fe8edbabc3e18c