*.b2g-test.etat.lu

- Centre des technologies de l’information de l’Etat -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 12:00:77:d8:b6:38:a8:ae:ac:5e:bb:b1:a2:ad:6f:10 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centre des technologies de l’information de l’Etat

Organization: Centre des technologies de l’information de l’Etat
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 12:00:77:d8:b6:38:a8:ae:ac:5e:bb:b1:a2:ad:6f:10
Serial Number (int): 23928534700549191555252280874941378320
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b0:42:4b:70:3b:c8:0e:9b:6c:ec:6a:db:02:7f:4d:2d:54:00:f9:48
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 23:df:0d:55:29:dd:20:74:af:c8:8f:20:bd:86:c5:e9:18:6b:97:87
Fingerprint (sha256): 1f:88:c2:a8:89:ae:f3:51:29:1e:7c:c3:09:3e:fe:4a:1e:04:fc:b3:d2:d7:6a:b0:5a:e9:0a:3a:d7:f4:50:8f

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.b2g-test.etat.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.b2g-test.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.b2g-test.etat.lu
b2g-test.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for *.b2g-test.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23928534700549191555252280874941378320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centre des technologies de l’information de l’Etat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.b2g-test.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919859095566753853174064636077807072973898800696957795695725510660857321656026921702169732094416583992522326058123320070499771607764259035559602659728492257074523569525596697603087588632183166537915224473483035015595508092748468714895074045967832362491409504135879554419401878176440506707811657208141427444343187873724914403717294175846460159641654275432864067371044026535477498616473356050077299706495536336111977598139018287396624217188892224111744394982323738713032496823209055167552135325030388154027120790003283635992552479669499328597048111430533465319523388468757965202151956215049000965740867389063546687753251430360706698456723097941905279765810562083865589426154358375254206523413919252384634697256935240279746950558701449177653912011146441558109112718869757958287458507334868341122038778364021562293852356259007986277584946851745208114093769607010496154545193313047785072547209611439704960818037514883930396881503435971627099236663278850908189666635494552316358789599243714468332284457091516113548331236067731237727796414742560556953052456409623375326137934277085427182177465477596058632575818839249986128472727415616093986928461741410408326233689079019240518693207627050161838836468711493345805108464309573940317365905651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0424b703bc80e9b6cec6adb027f4d2d5400f948
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b2g-test.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2g-test.etat.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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