legacy.ntraq.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:d8:b0:6b:93:a6:c2:e3:6e:5f:80:d4:c7:64:6c:a5:20:ee was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=legacy.ntraq.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d8:b0:6b:93:a6:c2:e3:6e:5f:80:d4:c7:64:6c:a5:20:ee
Serial Number (int): 422184637679712104868223698912668081791214
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cc:bc:83:c4:78:20:33:d4:d8:f7:b1:ff:86:8a:0f:55:26:5e:a5:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:c3:b5:68:6c:fa:e8:13:8a:97:a8:21:2a:bc:f3:d2:f2:d4:09:b1
Fingerprint (sha256): f6:dd:0f:ac:7f:c2:c0:71:af:34:83:44:11:9b:1c:23:79:4f:03:79:e9:c6:57:cc:bb:10:16:24:ee:89:e5:bf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate legacy.ntraq.de

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legacy.ntraq.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.ntraq.de
bugs.ntraq.de
dev.ntraq.de
docs.ntraq.de
imap.ntraq.de
legacy.ntraq.de
mail.ntraq.de
ntraq.com
ntraq.de
ntraq.net
ntraq.vtx.cloud
proto.ntraq.de
smtp.ntraq.de
webtraq.de
www.ntraq.de

Other certificates including the domain name ntraq.de

(limited to 100 certificates)
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
ntraq.de
fry.ntraq.de
legacy.ntraq.de
fry.ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
ntraq.de
legacy.ntraq.de
legacy.ntraq.de

Certificate

The complete raw certificate details for legacy.ntraq.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 422184637679712104868223698912668081791214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 00:04:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 00:04:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.ntraq.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807309531102575168025135347269003874005848978446289095267490133190226483866485827327463037509418697484301100583030729872583018157774674680188410276632830619837006296781632614009066883669613315869576390659618615288562969725622254416481151116992387651106450198256160076587813247239875075539305551147434308417918633195093297030582566236232255290789998005583804512087359053946711888782337644609307797114767930314088686705171396748873143558206171873626160815707176351397761543502036358757668866640838621173322196339302614268104600456084444400716202299858472090892126123090047370876558998666537861990911885033402916379498058968887294537817232908392087474567953350527123069459231089921702232406045426108818627053397836395942084241374928697433442967261982514886444923137416946523122680826034506114668897248268744038901711648373092725212656367963823712400151486313115225795747585404383729503236915538930502517853851595872279487918641562015918323906888507517618875330554834016757230911257798585893003243610046399335737763384010935093290111470217548059577532060154016725344887114299460443507714339662893736127476916842908679870285401451567268644881667235946928586086445682076277658158268797870106382647677841197642033103313510980159277378480913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccbc83c4782033d4d8f7b1ff868a0f55265ea5d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bugs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ntraq.vtx.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proto.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.ntraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webtraq.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ntraq.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e6c96a0f6000004030048304602210084c913df5907737231f3e4da34670bda7124bdb068e08955a88c12c936d7157a022100c8cf9aec8e95e56e568bdf1dce6aae8797a40d3588f950b22c771c6efede6691007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e6c96a0e400000403004730450221008db72155d0f953dd42a564ada78603b45554553ef5784baa9a51db73ecb9430402201b583e0937edbe68a53c310ccc3fb2b35d00d95de79000a0747ab151d78fc70a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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