atlantis-prd-mn.ctie.etat.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 6b:a9:1e:a2:38:ad:72:46:8f:be:c3:3b:18:15:b8:d7 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:a9:1e:a2:38:ad:72:46:8f:be:c3:3b:18:15:b8:d7
Serial Number (int): 143105515042869665499062135747901765847
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d9:45:14:72:6c:bb:85:b2:10:a0:eb:10:4b:1d:5b:9c:9f:5c:13:76
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 45:91:96:89:c7:7e:d7:78:06:e0:6c:3f:ef:e8:25:96:7f:7b:ed:b6
Fingerprint (sha256): 1c:05:9c:33:cc:83:3f:e4:2f:6c:64:af:22:da:48:f6:49:15:7f:1e:f1:e3:10:33:ef:cf:86:cb:e8:1e:80:b8

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate atlantis-prd-mn.ctie.etat.lu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atlantis-prd-mn.ctie.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlantis-prd-mn.ctie.etat.lu
atlantis-prd-mn.ctie-001.gov.lu
bcmon.ctie.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for atlantis-prd-mn.ctie.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143105515042869665499062135747901765847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atlantis-prd-mn.ctie.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844958477340893670704486495085691060670303119307019151973086743402766652241005161930358188096157066640957314685673106462223540042157682941193491834468835910667779743822593383300703310578607351701890364212708893733720422326030921523062978258091016067041054241414499450691073326846044547891761994685162308117060158907403398647593684456148083056833150251054092032418085812244912818235846666613453329718999355586631231431104383918275737472775071813237378595101488912604737109645134940349584680784230106976027755271899939420184939872109676133676586801884501803396038679466475847423961784859353083129834052278675145947398110062210822374961332964788072309694285525903029486859086222848473171062815498270224798655714127987779685324213085625949765216141785466082492304888103633094201193254649551769624796232202532252254051847440606766018843462877674181383792321510716294603755676760308598924137931318217329584266038708568865764716472316371263569484858374676563316695850177559777845443010322558008709544928831316528321949008888971025694083407321605245247387187259566981784257788552902787496294986596623382290915517714075823740909094536356188932756986250105946991869597817200939341319068546555397577251805429494155308865771631517818698618997763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d94514726cbb85b210a0eb104b1d5b9c9f5c1376
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185969ed9410000040300483046022100e7e50ad3614da02d055087a0931b946f16ce6eef26f940e4b29e8d374f469b70022100ed1376d9cd493d1173ab39fa8ab2b72386e31f83a99adc8046b9b9c111f7f3d8007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000185969ed9080000040300473045022100fbd77d3830964d7955cd246fb3aec00e419e3e779b157d0ba512977bca2e7fe80220445f3b3d46cce95a0cc5be40854e782db9fa3cc923ce17bdf6d81fc62ad64746007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185969ed8db0000040300483046022100855239e4675fcd3bc90e792bd80e0e5541eac7193e639c7a9f57ad3ac2bebf12022100fe62503c9fcc1dcb57880d2f5a32cdce3020f635f94724389ec7489e1e45ba59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantis-prd-mn.ctie.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantis-prd-mn.ctie-001.gov.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmon.ctie.etat.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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