artifactory.ctie.etat.lu

- Centre des technologies de l’information de l’Etat -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number cd:bb:b5:e7:be:b4:8f:97:8f:5a:20:d3:64:09:7c:3e was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centre des technologies de l’information de l’Etat

Organization: Centre des technologies de l’information de l’Etat
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): cd:bb:b5:e7:be:b4:8f:97:8f:5a:20:d3:64:09:7c:3e
Serial Number (int): 273466388125318005067005575318349642814
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cb:03:72:9a:4a:a7:67:17:5c:7e:b8:fc:6e:2b:49:90:df:0f:89:00
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): a5:0b:0a:d7:15:60:62:34:fd:80:4e:d9:bf:b3:71:c3:dd:9b:6b:f8
Fingerprint (sha256): 1f:32:c7:c0:25:f2:2d:b8:f2:1f:1a:75:7c:d1:0f:50:76:56:50:f1:24:7a:61:be:08:54:9c:ef:11:60:7c:29

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate artifactory.ctie.etat.lu

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for artifactory.ctie.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

artifactory.ctie.etat.lu
artifactory-prd.ctie-001.gov.lu
artifactory-prd.ctie.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for artifactory.ctie.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIwzCCBqugAwIBAgIRAM27tee+tI+Xj1og02QJfD4wDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDEwNDAwMDAwMFoXDTI0MDEwNDIz
NTk1OVowgYYxCzAJBgNVBAYTAkxVMRMwEQYDVQQIEwpMdXhlbWJvdXJnMT8wPQYD
VQQKDDZDZW50cmUgZGVzIHRlY2hub2xvZ2llcyBkZSBs4oCZaW5mb3JtYXRpb24g
ZGUgbOKAmUV0YXQxITAfBgNVBAMTGGFydGlmYWN0b3J5LmN0aWUuZXRhdC5sdTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK5yaCw1iNoGhE6dVLONxAZy
XZAYqTphQmurK0gHPX/83cYgvWOxndWcOmOD8Os058HnpVFsnV5CNU/tLK44Sast
X4MHY963gqZNhwawAgRFjGkRQau3fS1lQaCrDZnMXj5RaQggXyksCx/xiHAlflpJ
HjF5t8NkPzRE5TYzd2YQDjgQSyMa4Bg3LlRXAPjODIg+9dR/tBp8qTnENwDSTIz+
toiwoJjphNfXVl+To59mS/ZlOKwBtM1noaPfajZ38ME+HA4/iT2zycrCgsrGZ/nA
ao2SRsDSniog68bkhJWpsHlRdcj4mfoEakLhhQsWrlquKNLEAQnuDxF2ueT7r5iA
9W54V86EgAARA+n1MF3xvXcWvYM78htdv9OK87jpdBqmZZ4VAi9hZFyPvpCMk56J
SO4bf/2mJVkOx+R5ecCS8NS0L0fDlOZJMk/71oSUiQKGWk3HqcwyxfYfDzvQI5I0
YYg0NQ3AFfZy+/n29SZG+sHJlI5WIFxK98SxulOU1nXBKp4VL9L9DeqCZt+tZ8Ep
QyosRYgDo8TRiV/mScfp5XkkIJh0YQ8kKhtvrC0C1JmqrzbbGjNasARiFh+57lJg
fPTz15Tbc4oM+Y/LRF7cwkRxd0Bx9d64JHWNOcGlgYBUiZprHlNcJ+A+K5+wGOMI
y62QKuyAMwdWYV7XPGxDAgMBAAGjggNrMIIDZzAfBgNVHSMEGDAWgBRvHTVJEGwy
+lmgnryK6B+VvnF6DDAdBgNVHQ4EFgQUywNymkqnZxdcfrj8bitJkN8PiQAwDgYD
VR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcC
ARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYw
NKAyoDCGLmh0dHA6Ly9HRUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNB
NC5jcmwwdQYIKwYBBQUHAQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQu
Y3J0LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1o
dHRwOi8vR0VBTlQub2NzcC5zZWN0aWdvLmNvbTCCAX8GCisGAQQB1nkCBAIEggFv
BIIBawFpAHcAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGFe6/+
uAAABAMASDBGAiEAnwpJEq6ejEtWf9BPZ9DvUS7Wmssuj6DeaYTjefKl1c0CIQCN
39VUh+aMcPSwMPlw1f5B4yZCJCm8QL2+QR4YDv3QkQB3ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABhXuv/oAAAAQDAEgwRgIhAP5wovpbVpHtaP2h
CtMwUl7FoaXlNGRUg3fEME227EzwAiEAmYg21QtDUhLCr/dqQYffoqbsCoE+kPlG
6pq+xaVEhkkAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYV7
r/5TAAAEAwBGMEQCIAhnRpzGOyOO+z46t9XujTcx6aD736jU85UysEsLQfg3AiAU
T4nscU4wNR7CmYHjq8RjWo4DbNzz0T4Dju/DMR5hrzBiBgNVHREEWzBZghhhcnRp
ZmFjdG9yeS5jdGllLmV0YXQubHWCH2FydGlmYWN0b3J5LXByZC5jdGllLTAwMS5n
b3YubHWCHGFydGlmYWN0b3J5LXByZC5jdGllLmV0YXQubHUwDQYJKoZIhvcNAQEM
BQADggIBAJ6AzL3vMxFxowZCNcucbOjqnaedLw8t+5l5xgidJgTg8NuHTckRc6qH
+Ox64hoZKlM1wWrm+9X1dz9rkjwbZjT2CKIHJqTOxDKgZ7Stjmruki6YdQ/kP1Yo
iGiSzRoSDj4ejj5YXgLt42UmfbJYxLZ7xWD3CoeAbJZYJTT2JFa3eIYBFRt6GpWL
aYFUPiTIg2Lqu9RZPEmHRvCZXA7hYBDyP8tdo0Ok59xccLfmCdqUTe80xG+Z1kx/
zfN/t7gKsBGZRCDpFlbkwll7f152w0tt8MnEa8bkeK1mRn4DzGnxF1c8MwhAv8lF
Y/+HvjfVN05QnKvlvtCkqjxQQNVwGNKJ4zEYgLuCVvIzGamQh6atDEYjJ3XqSSEU
k6vON8aAKGwjrYZ7FyrrPsMfZ49t9GZbRZ0vmjpp3UHhfcDcxmc1UoGudUWPUPwP
S55PdW5o8DABN1/ZVn98TDzqFfH0mhAuJhm/rxABkFTkS7SUzrl2s+71h32bKMoB
LrmIrKaoRnsb5Gy7YABJDJ86AW3SofIBUPBqRccmirnI26XoebHaMoBh2v2P93Qs
h/OPBCKXH5Hxt/qIIkkYGZAe6c1lTy1cFJ8kgXZobA9OPV1rzi/AIHpy2pN9X8Yw
Pw3evm3HIJAwsPRXWX3Q6fpsLYw8LjQPVczuHTOhvoBNS9xhQ6Vs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273466388125318005067005575318349642814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centre des technologies de l’information de l’Etat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'artifactory.ctie.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 711681269129226886933670062694288585207578571358697687085626087719866752090760139081988630080815490006454729012172827306693205205214499234417248025384898200685875475593317286042952828421009814303747193987537249876637004756778703405750725058213701006610564709370099874114936473715096964255398910216957525732831244642892403640157118082624152141256857008880090991659706529434229058850196266284620763261130062358943772186746199127889645413277238488724944871390855442246347798959734781860746082954517299083899836411584907225363058750663068369927177230925124423516788706091384341123491806451173779222295494745491310256936944327904420644568319140853083098652183611882734175649444927665641080667236183047246383191212391948674953498620334758689711698428522792041374880034016877598060095293080449964698742259739499797780058030146928156196853280951792071561309286986037190181970415705756745358560211435652074821777743905073067557340086691699953927810035597530533547152938023326451931483695690378713751384155021358478887065672614419864753420527084106172605741861489359670804542772582800967405924351382305687761200560681912973459495299878827140277896308621943504301237085824996198611733174681368757483244595973087978031500099448332148546056514627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb03729a4aa767175c7eb8fc6e2b4990df0f8900
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifactory.ctie.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifactory-prd.ctie-001.gov.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artifactory-prd.ctie.etat.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009e80ccbdef331171a3064235cb9c6ce8ea9da79d2f0f2dfb9979c6089d2604e0f0db874dc91173aa87f8ec7ae21a192a5335c16ae6fbd5f5773f6b923c1b6634f608a20726a4cec432a067b4ad8e6aee922e98750fe43f5628886892cd1a120e3e1e8e3e585e02ede365267db258c4b67bc560f70a87806c96582534f62456b7788601151b7a1a958b6981543e24c88362eabbd4593c498746f0995c0ee16010f23fcb5da343a4e7dc5c70b7e609da944def34c46f99d64c7fcdf37fb7b80ab011994420e91656e4c2597b7f5e76c34b6df0c9c46bc6e478ad66467e03cc69f117573c330840bfc94563ff87be37d5374e509cabe5bed0a4aa3c5040d57018d289e3311880bb8256f23319a99087a6ad0c46232775ea49211493abce37c680286c23ad867b172aeb3ec31f678f6df4665b459d2f9a3a69dd41e17dc0dcc667355281ae75458f50fc0f4b9e4f756e68f03001375fd9567f7c4c3cea15f1f49a102e2619bfaf10019054e44bb494ceb976b3eef5877d9b28ca012eb988aca6a8467b1be46cbb6000490c9f3a016dd2a1f20150f06a45c7268ab9c8dba5e879b1da328061dafd8ff7742c87f38f0422971f91f1b7fa8822491819901ee9cd654f2d5c149f248176686c0f4e3d5d6bce2fc0207a72da937d5fc6303f0ddebe6dc7209030b0f457597dd0e9fa6c2d8c3c2e340f55ccee1d33a1be804d4bdc6143a56c