legacy.ntraq.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:93:ee:1d:3c:8b:84:af:1a:91:f6:d9:61:fc:84:46:51:25 was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy.ntraq.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:93:ee:1d:3c:8b:84:af:1a:91:f6:d9:61:fc:84:46:51:25
Serial Number (int): 311674873800262756074112011537562229690661
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:08:ab:d3:93:85:ec:7c:50:bd:d4:54:91:d0:8b:57:c2:52:18:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:b2:8c:b9:a6:8b:ae:a8:08:d1:ec:63:58:8d:c6:5f:3b:84:35:f3
Fingerprint (sha256): b7:45:65:94:a7:6a:0a:a2:04:12:88:ed:5a:12:d0:df:64:c3:85:c6:aa:9a:7d:1f:af:68:98:10:86:77:31:c2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacy.ntraq.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.ntraq.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ntraq.de
bugs.ntraq.de
dev.ntraq.de
docs.ntraq.de
imap.ntraq.de
legacy.ntraq.de
mail.ntraq.de
ntraq.com
ntraq.de
ntraq.net
ntraq.vtx.cloud
proto.ntraq.de
smtp.ntraq.de
webtraq.de
www.ntraq.de

Other certificates including the domain name ntraq.de

(limited to 100 certificates)
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
fry.ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de

Certificate

The complete raw certificate details for legacy.ntraq.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311674873800262756074112011537562229690661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 23:04:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 23:04:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.ntraq.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1016492198359146172313194182435617909046690541458673738746030366607678177540917230284219500415361020508969697045247017135017417561392567096189776256130213567594825989613496325478377769159827674764215206945647131075473223705614413775999629544749786123149012544991174897387314291181094296435164090006933210037255816651287910533910972848320293269382185722698830316449305675525310549836036506215859314410505482431355300148032634530155924351897545994436180914742673372165373397122400739033343735774777065878617832956112925958951172796413729639179139696494425135386666568825243089217715511825066801711973559571321482848075234820398930503255809488785281359727673224197444962365920026937198713847954322440982983830289796096282824909717694465849029278766402259114725074960282864787351619905667666303125575883023425363660267934819966283784906071360622334252579731158165553825710300206135850185797677848995341302938178210034804692800496351179936482824833475289447749011306814428920510900609715212276592724815697928661062417495089448529344962888240300603272096898271852210039368321217642554563703863421573603633358180984705933106831952048045709901759512952419191831589349253839304782982705614032161723809635975118680567963775224431371685737900103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c808abd39385ec7c50bdd45491d08b57c252189e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.vtx.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proto.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntraq.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cea23813700000403004730450221009704f863b1fab90f060249c009d1f71740a4d17c4f7d5fc8acee170225baddaf0220361cae2b90a812e9d6af3f99f2f8693358da82ead36ad1709188c6ba78c81c9700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cea2381550000040300473045022033bc3184fc4c9881275daab95544e74c8fef7b43d40d090349879d8edb4a8991022100b2c5d27e32e2ec6e9e340c33d2e25d7271ec7d3c36cdbaadeb03dc98c5ad3591
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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