otx.etat.lu
- Le Gouvernement du Grand-Duché de Luxembourg -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 29:bf:98:43:18:54:79:eb:ef:5c:83:de:d5:60:4e:d1 was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Le Gouvernement du Grand-Duché de Luxembourg
Organization:
Le Gouvernement du Grand-Duché de Luxembourg
State / Province:
Luxembourg
Country: LU
Country: LU
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 29:bf:98:43:18:54:79:eb:ef:5c:83:de:d5:60:4e:d1Serial Number (int): 55493164769238112138857473734908858065
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 2b:e6:70:09:bd:40:d2:f2:7c:60:0d:be:54:ab:61:3e:f7:a0:51:1d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): b7:0e:0a:2d:9c:39:b2:3f:cc:7f:8a:96:ea:21:c4:fa:5c:5f:de:fd
Fingerprint (sha256): 08:6f:d9:05:04:11:7c:20:87:39:57:18:d2:49:ab:fd:22:b4:2d:67:40:d0:19:8a:69:94:b9:40:63:d3:09:0a
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate otx.etat.lu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for otx.etat.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
otx.etat.lu
Other certificates including the domain name etat.lu
(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
Certificate
The complete raw certificate details for otx.etat.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIXjCCBkagAwIBAgIQKb+YQxhUeevvXIPe1WBO0TANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjIwNjEzMDAwMDAwWhcNMjMwNjEzMjM1 OTU5WjBwMQswCQYDVQQGEwJMVTETMBEGA1UECBMKTHV4ZW1ib3VyZzE2MDQGA1UE CgwtTGUgR291dmVybmVtZW50IGR1IEdyYW5kLUR1Y2jDqSBkZSBMdXhlbWJvdXJn MRQwEgYDVQQDEwtvdHguZXRhdC5sdTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC AgoCggIBANuUYGjcJ07fx23eWQgzsLzDzFRdJ1AUrPiepYpKqcYJJ1S2LZPakRFf dvOlfo9hMBmSHskNL8pewRc360ejfpY/5VBpMYQF+R+sqNiNVEgJoHEmWZBxcvZG gXq8g9aKIdWYdvUJGCekumSMyIGXd9Rg6XBdD5bS6nH35WTfRy8J4EozB0G//yFK fJr+TXzkCDpAdBejQxGGsLZyszk+vcAaYcK5+RRdVueOl0DNsDIfvnPxDl4lgxbT Q6nAJZ47DLOZoIm/a4IbFLCg9S208ODx1WNme7ExiPi7W+ComB6pvqNf2bDHjDq3 EaSBxnZ0Q2tz4N9IMFM4Irn+wWW2se9dIWKdRJRo70QcJb8yztJ2lmmMy5ARfXzv PDY3L29T22w8gQ/ESael+YQrPmRhPnIf3Hts5OUeAT1Euo6DkuYAenC9RYm/sWZw KO9++Qivil9B4lqwBYGSf6z9LzUR8e7Kf3UilRLoeQVCAd8g2x7Sxo6URRt0HgE/ 4IGXkAyg++v/xg5it6RlmERRWfQqWF7xUbzXMTX98SNXsYevL4Z38nRBn06U2Xrx ez1G7V4q0uOW8j4eq/nxhRwqLVz1MzSZF4hxTlfZCm8uH9EdvyhEBRnGDs+dUcDL FdS/kYbhiQgbvedVXGxefMGWi/4fY++ePpEHFobZ/gBkPmcJ7ECLAgMBAAGjggMe MIIDGjAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQU K+ZwCb1A0vJ8YA2+VKthPvegUR0wDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQC MAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYL KwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9D UFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwu c2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoG CCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZS U0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2NzcC5zZWN0aWdv LmNvbTCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcArfe++nz/EMiLnT2cHj4Y arRnKV3PsQwkyoWGNOvcgooAAAGBXB7/KAAABAMASDBGAiEA7YX5oalYkOVzq4+S 6gQIu+FSsO+x8BnXEujOivf6cDwCIQDXGo41LHk9c4mjL2dEBtmPchDo5bPmhsx1 70HegoM59gB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABgVwe /wwAAAQDAEcwRQIgI7h3Y6jYt+KvmEGgJNngQvuGl339YdvAQIzqVNH0ys0CIQCV McrsLT1pDRrSW3fhIE3nUfIRlhCvHwLkHdIGZJepuwB1AOg+0No+9QY1MudXKLyJ a8kD08vREWvs62nhd31tBr1uAAABgVwe/tkAAAQDAEYwRAIgVApuFd4BBQcmtMSK AhzVCoxPVVOh/wtZ1swStu0HNs8CIC0O+/ZdPOCswWPxNzQO+/yglG5JL85+P17I skX0kONQMBYGA1UdEQQPMA2CC290eC5ldGF0Lmx1MA0GCSqGSIb3DQEBDAUAA4IC AQB7R6erF93b+Kzy7PCS4xSExEKBavbAqhpPT+3yDk/LeT1+Xe5XKzC9h7EmPAVT 59Zquqevvuw+hQPTL6RbwI34guYg1KL08hJpYBXWrvrcz4DuqxluNd1Md3r9HXy3 t3xFdyxIel2sg4HKz3u0laoshyeUF65R3g5bhGhc2zEWrPetlT0zo6SkT2NHbS8g G0Zab6GrlCkBS/hO3fvGolMz3fP4hDPPUbQu5kKraBkPFIKYSpZTkxCfcumWHVEt YFCVzYObQaVsxxKJ2MOZ+TQc9tGJmzWpdbvqEi6DnkZNgTKQTyvASxXxg7EwIraV zpj6Uh0SYptM9slTmUbenMiiRd5sutEVlRWpSVjy7wXKyBcqRAB8s93GqB0E8kML MLGSLFL+iGHVKyn+3Xdt1TRAzQpYqhVf+vZxyu5WxpnldBdQGoO6oGxw2VgkCTvr yyM+fMziXpyC1ImLlZnFA7KjJmv69GAY3FYyyYs6lFdSfVJQD8cO/jkTJYMFR8oG Q6MzjwnFxab8wOcEtBqQfXyne5UdcHp7FiT0kXjVQVLxbQM2X+yO/fMgoOTZdfBA 4jg91gmde+y+BcnL50FgR02YXAEG1Ar57bZ/CQ7ZCOzt0MetvdJfWEDrP5+dV3iE 2S5l9TniCH97aa+9w2TpvILKiHFZHrtM99+6XPAdSTZbJw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA25RgaNwnTt/Hbd5ZCDOw vMPMVF0nUBSs+J6likqpxgknVLYtk9qREV9286V+j2EwGZIeyQ0vyl7BFzfrR6N+ lj/lUGkxhAX5H6yo2I1USAmgcSZZkHFy9kaBeryD1ooh1Zh29QkYJ6S6ZIzIgZd3 1GDpcF0PltLqcfflZN9HLwngSjMHQb//IUp8mv5NfOQIOkB0F6NDEYawtnKzOT69 wBphwrn5FF1W546XQM2wMh++c/EOXiWDFtNDqcAlnjsMs5mgib9rghsUsKD1LbTw 4PHVY2Z7sTGI+Ltb4KiYHqm+o1/ZsMeMOrcRpIHGdnRDa3Pg30gwUzgiuf7BZbax 710hYp1ElGjvRBwlvzLO0naWaYzLkBF9fO88Njcvb1PbbDyBD8RJp6X5hCs+ZGE+ ch/ce2zk5R4BPUS6joOS5gB6cL1Fib+xZnAo7375CK+KX0HiWrAFgZJ/rP0vNRHx 7sp/dSKVEuh5BUIB3yDbHtLGjpRFG3QeAT/ggZeQDKD76//GDmK3pGWYRFFZ9CpY XvFRvNcxNf3xI1exh68vhnfydEGfTpTZevF7PUbtXirS45byPh6r+fGFHCotXPUz NJkXiHFOV9kKby4f0R2/KEQFGcYOz51RwMsV1L+RhuGJCBu951VcbF58wZaL/h9j 754+kQcWhtn+AGQ+ZwnsQIsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 55493164769238112138857473734908858065 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-13 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otx.etat.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895806596662700101891478752377878990562467035859621609414977825240987914658887575788558564745138772975698319270460640462517888895170034715300412657610128600837572760135967720240918236708095064255724914429311843116594417257459070941602774514766478581087995630985219438220226717826578669366629728502158032215829259170954421883762070321934360305641810045876029892731390409964875550220151323072844283489091935102779802405310307260737849977227461489450450137929510742265506216478867798410565536304526218338201752899429839121947932924113495788092986046880108187919918291035373349758292246821232985553932536983832332463680169690151413278852243622630211064216714643920827679052272503981921721622796093049798378532430210900508461419644385195567773081922483425580604808172424543884819986855572174104528357154811787517191896560939478538636971665176914484623397057472006527459245389052906761953631638849229678708990097602543331490785494880249354197503245887059063940647803701680066478486563090291074247578708759414955563751889281670507113804970498973153448729195406715536321826225867020083501997321986688827260036483244123777644231919235092372876801789782051553161577401116020396697358998994381335322849097479516099772946213969015148834502492299 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2be67009bd40d2f27c600dbe54ab613ef7a0511d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otx.etat.lu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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