otx.etat.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 29:bf:98:43:18:54:79:eb:ef:5c:83:de:d5:60:4e:d1 was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 29:bf:98:43:18:54:79:eb:ef:5c:83:de:d5:60:4e:d1
Serial Number (int): 55493164769238112138857473734908858065
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 2b:e6:70:09:bd:40:d2:f2:7c:60:0d:be:54:ab:61:3e:f7:a0:51:1d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): b7:0e:0a:2d:9c:39:b2:3f:cc:7f:8a:96:ea:21:c4:fa:5c:5f:de:fd
Fingerprint (sha256): 08:6f:d9:05:04:11:7c:20:87:39:57:18:d2:49:ab:fd:22:b4:2d:67:40:d0:19:8a:69:94:b9:40:63:d3:09:0a

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate otx.etat.lu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for otx.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

otx.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for otx.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55493164769238112138857473734908858065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otx.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895806596662700101891478752377878990562467035859621609414977825240987914658887575788558564745138772975698319270460640462517888895170034715300412657610128600837572760135967720240918236708095064255724914429311843116594417257459070941602774514766478581087995630985219438220226717826578669366629728502158032215829259170954421883762070321934360305641810045876029892731390409964875550220151323072844283489091935102779802405310307260737849977227461489450450137929510742265506216478867798410565536304526218338201752899429839121947932924113495788092986046880108187919918291035373349758292246821232985553932536983832332463680169690151413278852243622630211064216714643920827679052272503981921721622796093049798378532430210900508461419644385195567773081922483425580604808172424543884819986855572174104528357154811787517191896560939478538636971665176914484623397057472006527459245389052906761953631638849229678708990097602543331490785494880249354197503245887059063940647803701680066478486563090291074247578708759414955563751889281670507113804970498973153448729195406715536321826225867020083501997321986688827260036483244123777644231919235092372876801789782051553161577401116020396697358998994381335322849097479516099772946213969015148834502492299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2be67009bd40d2f27c600dbe54ab613ef7a0511d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001815c1eff280000040300483046022100ed85f9a1a95890e573ab8f92ea0408bbe152b0efb1f019d712e8ce8af7fa703c022100d71a8e352c793d7389a32f674406d98f7210e8e5b3e686cc75ef41de828339f60076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001815c1eff0c0000040300473045022023b87763a8d8b7e2af9841a024d9e042fb86977dfd61dbc0408cea54d1f4cacd0221009531caec2d3d690d1ad25b77e1204de751f2119610af1f02e41dd2066497a9bb007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001815c1efed900000403004630440220540a6e15de01050726b4c48a021cd50a8c4f5553a1ff0b59d6cc12b6ed0736cf02202d0efbf65d3ce0acc163f137340efbfca0946e492fce7e3f5ec8b245f490e350
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otx.etat.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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