*.meteolux.lu

- Administration de la navigation aérienne -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 6a:c5:3c:e2:45:62:94:f4:51:73:9a:e5:26:df:a9:5f was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Administration de la navigation aérienne

Organization: Administration de la navigation aérienne
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 6a:c5:3c:e2:45:62:94:f4:51:73:9a:e5:26:df:a9:5f
Serial Number (int): 141922284905947034719699056284720408927
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 74:e7:89:ab:c4:25:f3:73:2c:a5:fa:3d:a4:a3:66:08:ed:fe:97:c2
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 0e:e5:77:7e:3e:a9:05:55:4b:2f:ac:72:ea:f2:4d:1a:05:cc:14:ba
Fingerprint (sha256): 10:76:7b:3b:81:79:c3:ec:4f:ba:9d:65:82:90:b8:77:41:cb:b1:d7:6d:28:4e:8d:02:a3:7d:92:60:cb:76:75

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.meteolux.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.meteolux.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.meteolux.lu
meteolux.lu

Other certificates including the domain name meteolux.lu

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.meteolux.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 141922284905947034719699056284720408927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Administration de la navigation aérienne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.meteolux.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744882092042263483138999673829127224460855419700703664442761773851476640768781731205763164588685804347658247392024183582991388860457406724787297697313161645673209560968147994515253616541905872016844510482545476352343624989986339927278791395915017501006298226162961784695098085651394554929908426986276093188824020998275671419954796877713959551517262355549014778679528849675367869632953894955856705698176750928820343465960466835550945116633380977769445552383317134942044266489720866739239926101639688915276829587534773696309878982083943378784246561372569212332111158081235479996462924789859887653024497478474280829951818061618642607504836985229149160535670354951981332717140359881469117598925969923025761287860388820510901517094683844252538787353277390115740516194301890707665309386732466003922934015935889410080900898658952138579647026639882506736875276032092007949407532522803129267634393348334636145665174146955520670765148325426288719858461060160664761751611257940845532939272704424713726469279067750341948834745943152014457219778100947347139600264219495902787764526208905410031480277317989467676017036179968847517273308037019138505809240047840593191679251244027611687904930296263696601615308919230078840902332787424595086718830543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74e789abc425f3732ca5fa3da4a36608edfe97c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meteolux.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteolux.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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