*.police.etat.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number f5:1a:15:0c:07:99:aa:96:eb:3a:20:28:ad:87:df:0c was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): f5:1a:15:0c:07:99:aa:96:eb:3a:20:28:ad:87:df:0c
Serial Number (int): 325796285569318087541439524835615563532
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: aa:52:66:67:d8:98:ff:1f:58:db:28:7b:44:6b:0a:fe:38:da:9b:d0
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 0a:25:99:8c:04:40:dd:23:2d:94:9c:08:5a:58:a9:8f:13:50:a5:10
Fingerprint (sha256): 03:ed:e1:e4:fb:bc:0e:a5:f7:75:8b:9a:38:dc:80:e7:30:ed:69:b1:57:9d:cb:03:09:66:c0:ec:79:a3:3f:d2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.police.etat.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.police.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.police.etat.lu
police.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for *.police.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325796285569318087541439524835615563532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.police.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659358254326267742338533887072208303863801063107562164376017010944895614682837553941274184158225861954585598894313952490808837739982156985832371038431089777766872415477147887109573270500807704211056206227762385202440721289006433728807895617511700593838265645467954711584094058336528625985047159550657958872838589207428926311653119435645509967833778272241993054475332182589492125968707621394882178150914779293439631910497823149298271072136169743686676963013695070819853376893047924831972264330405410029477250593325397981837725500575997974216364765979786430640915233841612981478123537089507395833786470182829148854110075905333508381429457313224477715859373254955296675072454780880805510782646324756108673227840034995423843708285212326501031955038260515283489992656444692454823528970688377267382159477544820792012371171400784942654281677150514228061982201076284504166579041268814907420280857385916943258164658288288679510856564985976023549412087682151272330873790044948841192125237312954763547866835272630730926037952556704006026531554121346779927394158102919022305413109014332685926242702425928494852554144024736395901042050754959530197728686841403295376471236685173119785770205786203934178090577929457686669262563026921110189198274767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa526667d898ff1f58db287b446b0afe38da9bd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.police.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'police.etat.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		008196d8bfcd42bced1ad2baa8ffb9932189b41cf7228e2dec6cc0c9e47c461df123452800870ba41ee29dfdb3c54c97d2eb12f155abc6c90860d645fb7918f0693fd68f09d80c792cb485d9dfb36832558b0e1219332a2c93f2a079b8e2aa59a890721ff3c0608d8ba6991ee858ef7f306a4b3b1b4d29234e1df5ecca31783df41507e8186b31d269d8267a66e3019906aa02132e50e083993da8153584b50285d9469303fa87a3fa5e4e0fe199068585b68b9334d359b0a2df95f0d84dbf9b1e5574b0e464410df33fa393fba597c5c9fca0f9e579a78b25630b3fbb4f4e177c8e789c8e70baeabfe076bd983a667f416c58e4453f3ce8e36b9c6d4bc235aaa4c694910b698a109b72ce5fb5eb3fc54b523a99e5812a36dd447406c91602e77d3274d7d1dd0fb74c36744cf72989c3da1e061cc177d97c90243eb1e01b043e010f3a04e07e511b6242e3440d6d9901dde07c9d0ebc84d997b39e332341cc81c5c861625d3ee958f980be2a68dcec18ac2ef1c09b1abe4efa39fa17889ee5eb5c90d308e9a7f64ba924ff09382fe258e7f1c293bdc36cb82a692739ee4ae4601fe9e1a9b3afc33177f01785d444001094496236baee2311466b6dcd349ce13fbfc5083c85ee8501ee382be3760a852eba15a52622e64862cfeaa066402a553f4a0ada72d590664572ea477aaff55039f904b0777bd9a8c4fab57f8439cd49390f