ctie.etat.lu

Issued by R3

About this certificate

This digital certificate with serial number 03:d2:b8:bb:56:d5:7e:31:3b:93:31:50:74:e5:d7:e8:9c:38 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ctie.etat.lu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:b8:bb:56:d5:7e:31:3b:93:31:50:74:e5:d7:e8:9c:38
Serial Number (int): 333041705520616666960080660069332699094072
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:a8:bb:f9:89:39:42:6e:80:e1:31:5a:86:fc:93:51:d6:19:d0:83
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5c:16:ee:be:d6:6b:3c:1e:2d:2a:37:79:2a:72:a8:21:90:af:a6:ca
Fingerprint (sha256): 22:c4:af:86:02:b6:aa:85:70:3c:2b:ff:36:7c:26:62:22:c5:29:60:df:4c:cb:51:70:a7:95:a0:b9:d8:8e:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ctie.etat.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ctie.etat.lu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ctie.etat.lu
www.ctie.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for ctie.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bh+n+9AAg/i2Mt56V7R
GHALZYDUEWpXnPQ3+RQyXmmasSgP5g+XsHxID6GlPxv6N5o3xWFq/2sF/jEMByZu
e99OKYcGTfDWF0vF883+HYcVqLvs+A6keBBnwzXyWvr9WZV5YXQ0MYEq3QYCouXr
A58HwX5xRrGVtXGBzqb99eU2PLIAKTrFPu+ZvV4WwqZCcr0tQRXrUiZntYeIL6Ou
KwWZOdRl249Jv/Cegz34ZNfQpaxsypkKDUZYQs/k42NthB/8gsV2488lBUwdtxbt
GBEsoDTK3lzPg/uwlefnHksPS/FTN7PSAZaO/anWzm1PCiMR5kRmeiT2ud6RTnNL
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333041705520616666960080660069332699094072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 22:37:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-27 22:37:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ctie.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26474783429712633763403064952444087399216420720411323127905015538638703542013863410970189883806642917733021028622248797548918398378735533418811489305603505604328849009473500975758430125364040298364431291730763258802873783191693897408293862010220452471893903507587538214348110782639980838230080972041687112099989629730843921939257771714483654970365901677420781166667467488241912858858793826311352598024800828036088932716613467798445105859643262555581127187967516777744338444920665564286581583010872216757270186927520134486459392985099602611475969360106111088164977565089375565717606979782391686023453173857981893397479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ca8bbf98939426e80e1315a86fc9351d619d083
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctie.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctie.etat.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189a4035bbc000004030048304602210096d4a4997714b3964694565ff45036dffc95270252564c9ef2760d0a88e4685d0221008a9ec4d5f66cd2a75977dc395cc618f7a8ef0a1c509e3fd81dec6a377e2885d80076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189a4035bcf0000040300473045022005f8c10cfb1439928e76f2d30dfebfd174a997835a835235c601f4b2426dc2a7022100c074d03d1f977705349b5c11cdaf959f44de488d6cc67380d418e1d772f2bdb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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