security.public.lu
- Le Gouvernement du Grand-Duché de Luxembourg -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 46:0c:c7:ad:8e:6e:3a:d7:12:56:a4:8a:06:5e:9c:3a was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Le Gouvernement du Grand-Duché de Luxembourg
Organization:
Le Gouvernement du Grand-Duché de Luxembourg
State / Province:
Luxembourg
Country: LU
Country: LU
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 46:0c:c7:ad:8e:6e:3a:d7:12:56:a4:8a:06:5e:9c:3aSerial Number (int): 93112317217309901784369645070195792954
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 63:f5:0b:94:02:b2:4a:49:c2:28:e0:f8:9f:3d:22:f6:5f:06:29:81
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 02:66:dc:a5:1b:70:5f:95:63:77:a6:1e:fd:52:c2:62:58:a2:96:c1
Fingerprint (sha256): 31:87:28:10:6f:5e:f0:b2:81:8c:1f:14:9e:af:e1:e5:be:8e:8e:4f:b5:c4:af:c7:fa:a7:b3:58:4c:d1:8c:f7
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate security.public.lu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for security.public.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
security.public.lu
Other certificates including the domain name public.lu
(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu
Certificate
The complete raw certificate details for security.public.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIbTCCBlWgAwIBAgIQRgzHrY5uOtcSVqSKBl6cOjANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwMzIwMDAwMDAwWhcNMjQwMzE5MjM1 OTU5WjB3MQswCQYDVQQGEwJMVTETMBEGA1UECBMKTHV4ZW1ib3VyZzE2MDQGA1UE CgwtTGUgR291dmVybmVtZW50IGR1IEdyYW5kLUR1Y2jDqSBkZSBMdXhlbWJvdXJn MRswGQYDVQQDExJzZWN1cml0eS5wdWJsaWMubHUwggIiMA0GCSqGSIb3DQEBAQUA A4ICDwAwggIKAoICAQCl+1AMCrgJWnvDqL8wJrhnEig0cxq8IoL8wZZKQ3K2HeJu ZlHVFNLcgrAwzIoxbtZarvVHMrQGaq/RXr9QeXlKcGrOHTzQnZQ4HoOUB6LGb4h4 V71EXN8LZiF5H8+rthcNo1TN049NBLuCwf40Qlg1FOudz1WBxFvs5W+6gr0Evix6 WPY6ydb00a37wi/UUPCtvYXvbxVmVUkHKIoDWU1aWhbQEu5WzPaTQYazcfh4V8E0 BHTWuYvEYWuPxo2JRNfhZZS/xqk9464/ukvYakkI40JRKIV8wpZNIltWJmQOcKjp DXytM6zFJ3kjUhpAIaNJiB2VgZarIR7Tebbylsf3frCCI9+H/O+8WiA5dyLKKi81 fAroL7U+5c9JTIQ9LTvvwJ4WcJdrEPfBOvGOZAhxScESLEJM/U8a2e0LshnqSHYK XxFmKnJrm665Wg8U6ojbOidWdlbh9rPDzxUeIuwADujYXRx42600gVeuejbac+h9 OHRMB0N1nmkkJTYF6Tca9TJgNxhKukpH8AfffyQSvjPj9ERnVm9E/x2Fvk4wvltX 27riFbiYWnvXymm1Glj1AYimswURIBduV1HDruxBnnJQpSVkBfpgkmUPKl3QmFz4 XWDwjVMaQ+NCAkZSWbDjjZTkwbWObKnz4PcnVmbT4oREp1RztkDRO8353ujM7wID AQABo4IDJjCCAyIwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYD VR0OBBYEFGP1C5QCskpJwijg+J89IvZfBimBMA4GA1UdDwEB/wQEAwIFoDAMBgNV HRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAE QjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGln by5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VB TlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEB BGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9H RUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Au c2VjdGlnby5jb20wggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AHb/iD8KtvuV UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABhv5HBQ0AAAQDAEcwRQIgYH0YK8FI l3RU0hwfDsd58VWYXiwdieKV9j/HUqpNiQkCIQDgxEivEnUhxiZddXL92tcQ0Azk G3igEIpZ5n6bS7HwdgB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/ur AAABhv5HBWYAAAQDAEcwRQIgKqvnyBrXmhiU987deRGgWSIoyD2ecKnRjTHntTlu NIYCIQDDfCxGSdu63nbd+I7I86/ULx8axZoG0XDGMdaKnNVHzAB3AO7N0GTV2xrO xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhv5HBT4AAAQDAEgwRgIhAM8Z9pZl XbxP6Q4L/2/5DdcJdvxzqg4uS26ZQKqLT02LAiEAt7o1gBe8Ok89jxfEJZc8nZKH vjuto81tD3aZdxpvcJ4wHQYDVR0RBBYwFIISc2VjdXJpdHkucHVibGljLmx1MA0G CSqGSIb3DQEBDAUAA4ICAQB155uSh0nM0w7NR6t5HhJWrYxzy7Mu3Drh1sbYLSVy y/6+lZDtKsN0vEYqKREzistYCU1rhHZgbYzE3TNSfgujP8m6cqTbIya4bjBc71eH m/toBGGLAWUeQdfbGztH+CGUPbaweLfh4eD4SSQzwcvv8nIp1Vn0eN9+nTm79u19 43FYUy7NJaaPl+KWjW9p9g47dWCqBXwQujuOfX7gsgKkRmm4Jmml1FnOcJfm6xcd EHgNtcpGiVwXzjqyCzxjTPxydyPY3onZV9r5bxTAsFR090KZ6SG40+zBnCsKWjBj gyOc38jgbeDNd59i9E+d8qxqkPGg+d1mL19THTyBm9hwo6crFmO4O2/iimjX9BYD iuqoqzJzIZYuRkwAz03o1TnCY9luDVWavd0nB0SkAgaOzFoNGaI1iiN7GKhWFXU5 kyvdT0dQnrbnuNyrsEA5Ddyi9GaoyXgN8kW4Zv1I9bcNpicJ/Et3isvbIsZJxAq+ 6TL3O0A9nx84qhS0o8KOjh9VQL7v4YALX+2b3XTm+lcCjWrgrmS2+OySlxhkHw9N +4cvkctPuUbTqew2lCLijNkniG/6+sklPfbBHUOryUfJMjT7jbHedw0TR9ze0mqF 7TJ+POC3qwiXfRUALuAyBykFyNaoVkr65KclZjTBuxMksNfrNx1muUl2b8LVaryi QQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApftQDAq4CVp7w6i/MCa4 ZxIoNHMavCKC/MGWSkNyth3ibmZR1RTS3IKwMMyKMW7WWq71RzK0Bmqv0V6/UHl5 SnBqzh080J2UOB6DlAeixm+IeFe9RFzfC2YheR/Pq7YXDaNUzdOPTQS7gsH+NEJY NRTrnc9VgcRb7OVvuoK9BL4selj2OsnW9NGt+8Iv1FDwrb2F728VZlVJByiKA1lN WloW0BLuVsz2k0GGs3H4eFfBNAR01rmLxGFrj8aNiUTX4WWUv8apPeOuP7pL2GpJ CONCUSiFfMKWTSJbViZkDnCo6Q18rTOsxSd5I1IaQCGjSYgdlYGWqyEe03m28pbH 936wgiPfh/zvvFogOXciyiovNXwK6C+1PuXPSUyEPS0778CeFnCXaxD3wTrxjmQI cUnBEixCTP1PGtntC7IZ6kh2Cl8RZipya5uuuVoPFOqI2zonVnZW4fazw88VHiLs AA7o2F0ceNutNIFXrno22nPofTh0TAdDdZ5pJCU2Bek3GvUyYDcYSrpKR/AH338k Er4z4/REZ1ZvRP8dhb5OML5bV9u64hW4mFp718pptRpY9QGIprMFESAXbldRw67s QZ5yUKUlZAX6YJJlDypd0Jhc+F1g8I1TGkPjQgJGUlmw442U5MG1jmyp8+D3J1Zm 0+KERKdUc7ZA0TvN+d7ozO8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 93112317217309901784369645070195792954 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'security.public.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 677146217705570619554698038940338876478481691544843581112316573377245224965737026825523982840536815581193615258369016368580882335549918063489709212450175170191238248546655769588168957541670790403165942608887349738827259072429855342663540302386483619284037988449702108011809454130466349466354384279029696250075545878511742755306458002425768015742949857984490263761185476006420920658324572351936868319943552423516111950597155928544399116544687977673093790216923127734224092123629401970055490144969667139223126189258340692942281939408731768629681217782645600433602266713068303567500393775466862911939117303902525785407319370936805901489753629529072263577334553459520877154301366220334763805183058131487445614624074834823245541264426705172339708293118881023966411128616581855256968587277037648311475840388277111370153927162029639959428207444103798956634088444148084058992565543089162772688375427152944946884269651396566833101810458853348438814044391605020518843867653585167407017023475504475447320895933943746837933114281212492887792818817192992317262870239469624467202044969420628724356302217279991769346535876590926138493481402386248340803907603609369244476560916256142958357989180053188138157616054331601326151060325275543723653516527 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 63f50b9402b24a49c228e0f89f3d22f65f062981 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'security.public.lu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0075e79b928749ccd30ecd47ab791e1256ad8c73cbb32edc3ae1d6c6d82d2572cbfebe9590ed2ac374bc462a2911338acb58094d6b8476606d8cc4dd33527e0ba33fc9ba72a4db2326b86e305cef57879bfb6804618b01651e41d7db1b3b47f821943db6b078b7e1e1e0f8492433c1cbeff27229d559f478df7e9d39bbf6ed7de37158532ecd25a68f97e2968d6f69f60e3b7560aa057c10ba3b8e7d7ee0b202a44669b82669a5d459ce7097e6eb171d10780db5ca46895c17ce3ab20b3c634cfc727723d8de89d957daf96f14c0b05474f74299e921b8d3ecc19c2b0a5a306383239cdfc8e06de0cd779f62f44f9df2ac6a90f1a0f9dd662f5f531d3c819bd870a3a72b1663b83b6fe28a68d7f416038aeaa8ab327321962e464c00cf4de8d539c263d96e0d559abddd270744a402068ecc5a0d19a2358a237b18a856157539932bdd4f47509eb6e7b8dcabb040390ddca2f466a8c9780df245b866fd48f5b70da62709fc4b778acbdb22c649c40abee932f73b403d9f1f38aa14b4a3c28e8e1f5540beefe1800b5fed9bdd74e6fa57028d6ae0ae64b6f8ec929718641f0f4dfb872f91cb4fb946d3a9ec369422e28cd927886ffafac9253df6c11d43abc947c93234fb8db1de770d1347dcded26a85ed327e3ce0b7ab08977d15002ee032072905c8d6a8564afae4a7256634c1bb1324b0d7eb371d66b949766fc2d56abca241