security.public.lu
- Etat -
Issued by LuxTrust Normalised CA
About this certificate
This digital certificate with serial number 2b:9d was issued on by LuxTrust s.a.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth emailProtection serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
Etat
Organization:
Etat
Organization unit: CIE
Organization unit: CIE
Locality:
Luxembourg
Country: LU
Country: LU
LuxTrust s.a
Organization:
LuxTrust s.a
Country:
LU
This certificate has expire since
Certificate Details
Serial Number (hex): 2b:9dSerial Number (int): 11165
Serial Number lenght: 14 bits, 2 octets
SubjectKeyId: e4:ff:14:87:0c:2d:25:68:e4:30:36:e7:42:d1:ff:f4:6c:1a:e5:53
AuthorityKeyId: ce:fe:46:9d:63:2f:89:fd:f2:38:16:25:d8:f1:6c:de:47:f8:ce:c1
Fingerprint (sha1): df:c2:85:d9:e6:a8:f8:6b:ab:72:36:63:67:34:ab:b4:8c:b5:56:78
Fingerprint (sha256): 15:a0:77:db:20:66:84:9b:09:be:cf:fc:e9:17:4a:5e:25:97:35:e7:ed:8b:e1:80:c8:de:67:e6:12:5e:05:63
Issuing Certificate URL: http://ca.luxtrust.lu/LTNCA.crt
Revocation information
OCSP Server: http://ocsp.luxtrust.luCRL Distribution Point: http://crl.luxtrust.lu/LTNCA.crl
Check the revocation status for certificate security.public.lu
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for security.public.lu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Data Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Email Protection
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name public.lu
(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu
Certificate
The complete raw certificate details for security.public.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICK50wDQYJKoZIhvcNAQEFBQAwRTELMAkGA1UEBhMCTFUx FTATBgNVBAoTDEx1eFRydXN0IHMuYTEfMB0GA1UEAxMWTHV4VHJ1c3QgTm9ybWFs aXNlZCBDQTAeFw0wODA2MDIxNTA1NDlaFw0xMTA2MDIxNTA1NDlaMIGOMQswCQYD VQQGEwJMVTETMBEGA1UEBxMKTHV4ZW1ib3VyZzENMAsGA1UEChMERXRhdDEMMAoG A1UECxMDQ0lFMRswGQYDVQQDExJzZWN1cml0eS5wdWJsaWMubHUxMDAuBgkqhkiG 9w0BCQEWIXVzZXJtYW5hZ2VtZW50QHNlY3VyaXR5LnB1YmxpYy5sdTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALV6PdxEOO99wlGJZQpB9JosLPbXLzMp 6vne0cFxLWVCmLxgWLQ0rsVOHb420+C61LCUtwuWEsT+jFqZjo0cXB339C+mHDKP 5uI9Z1R32eMR8QVXJS2JuZK7GtaqQCRyz23AYam+AiOnJVAeubCjEZpqsiuiE43q n90t8WN40kqokjrpni7EGknil9z2BBtpEVStr/OiGB/VZq8ik5qJkjUX0BUBRZJ4 2n7YVd1hlYwVNKyzrYprEAsL0hcV+1h5DYOErl5IKoqaKOQgA7CahIVVrBMbTUkC 1eopLqP9RtMcx4FScj6YN6TH3TtO8bhw4r0Q6wokYKhsRtj0MgG6ccECAwEAAaOC AhowggIWMAwGA1UdEwEB/wQCMAAwYAYIKwYBBQUHAQEEVDBSMCMGCCsGAQUFBzAB hhdodHRwOi8vb2NzcC5sdXh0cnVzdC5sdTArBggrBgEFBQcwAoYfaHR0cDovL2Nh Lmx1eHRydXN0Lmx1L0xUTkNBLmNydDCB5AYDVR0gBIHcMIHZMIHMBggrgSsBAQIC ATCBvzCBkQYIKwYBBQUHAgIwgYQagYFMdXhUcnVzdCBTZXJ2ZXIgQ2VydGlmaWNh dGUuTm90IHN1cHBvcnRlZCBieSBTU0NELCBLZXkgR2VuZXJhdGlvbiBieSBTdWJz Y3JpYmVyLiBHVEMsIENQIGFuZCBDUFMgb24gaHR0cDovL3JlcG9zaXRvcnkubHV4 dHJ1c3QubHUwKQYIKwYBBQUHAgEWHWh0dHA6Ly9yZXBvc2l0b3J5Lmx1eHRydXN0 Lmx1MAgGBgQAj3oBAzARBglghkgBhvhCAQEEBAMCBsAwDgYDVR0PAQH/BAQDAgSw MCcGA1UdJQQgMB4GCCsGAQUFBwMBBggrBgEFBQcDAgYIKwYBBQUHAwQwHwYDVR0j BBgwFoAUzv5GnWMvif3yOBYl2PFs3kf4zsEwMQYDVR0fBCowKDAmoCSgIoYgaHR0 cDovL2NybC5sdXh0cnVzdC5sdS9MVE5DQS5jcmwwHQYDVR0OBBYEFOT/FIcMLSVo 5DA250LR//RsGuVTMA0GCSqGSIb3DQEBBQUAA4IBAQAPPg7rr/BXc5FyL315UiSk OKo7GDhhrfAUi6il5xuBTm6NgdKid05nWYgJCEZJQNc21RzHkffk5G/dmkYkm4c2 mUlJXtpQiRanilvVB6nyQx+9iwxm/qBkYAw7GCNnW6xbnLaiAySHWRwg+MAraCUD pOtqJBHxSqhHiiA1KqYx7C3AhCM7VoDmC4r668LbjcbuS1RsVqai7HqU1ZAGb5MF 6ZMKwA+eWz+cHRgduvZ+Eg6TFMcc3u2eJGqwq1gS8iIsYXBzVDq9HY4Uf3TRkVZa kIvH5b0kG3jyKZ6j4N4BjNAdOwKWalMY31Xa7HIyIQVHgcOpwPh6Jqe/UQfEsb8j -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXo93EQ4733CUYllCkH0 miws9tcvMynq+d7RwXEtZUKYvGBYtDSuxU4dvjbT4LrUsJS3C5YSxP6MWpmOjRxc Hff0L6YcMo/m4j1nVHfZ4xHxBVclLYm5krsa1qpAJHLPbcBhqb4CI6clUB65sKMR mmqyK6ITjeqf3S3xY3jSSqiSOumeLsQaSeKX3PYEG2kRVK2v86IYH9VmryKTmomS NRfQFQFFknjafthV3WGVjBU0rLOtimsQCwvSFxX7WHkNg4SuXkgqipoo5CADsJqE hVWsExtNSQLV6ikuo/1G0xzHgVJyPpg3pMfdO07xuHDivRDrCiRgqGxG2PQyAbpx wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11165 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LuxTrust s.a' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LuxTrust Normalised CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2008-06-02 15:05:49 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-06-02 15:05:49 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Etat' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CIE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'security.public.lu' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.9.1 (emailAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String '[email protected]' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22909412799301544361644864405982322811071069530679651376278735510078354225418831981229055487820006159766668815790141142746561242588433454739538877975934323239854568832653101428153881233500590649384858526578908416671466950670244751076587984007849487282122464838711074705602372665529448451677853986253382151733468187753840932153612261573971054165837573838849531668017403771106129163410592147995551337515335357324618989432567619492248592781682563153753642115641156060755618374885552532079844046791669151443489852259962384398083533604648526618809705121398425452771768287884538244789619180785064658660290648199506691781057 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.luxtrust.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ca.luxtrust.lu/LTNCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (220 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.171.1.1.2.2.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [76 117 120 84 114 117 115 116 32 83 101 114 118 101 114 32 67 101 114 116 105 102 105 99 97 116 101 46 78 111 116 32 115 117 112 112 111 114 116 101 100 32 98 121 32 83 83 67 68 44 32 75 101 121 32 71 101 110 101 114 97 116 105 111 110 32 98 121 32 83 117 98 115 99 114 105 98 101 114 46 32 71 84 67 44 32 67 80 32 97 110 100 32 67 80 83 32 111 110 32 104 116 116 112 58 47 47 114 101 112 111 115 105 116 111 114 121 46 108 117 120 116 114 117 115 116 46 108 117] . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.luxtrust.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits) 06c0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits) 04b0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.4 (emailProtection) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cefe469d632f89fdf2381625d8f16cde47f8cec1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.luxtrust.lu/LTNCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e4ff14870c2d2568e43036e742d1fff46c1ae553 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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