goaml-trn-int.gouv.etat.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by TERENA SSL CA 3

About this certificate

This digital certificate with serial number 02:cb:65:9f:c4:c0:b0:18:cc:63:5c:ac:56:1b:f5:77 was issued on by TERENA.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
Locality: Luxembourg
Country: LU

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 02:cb:65:9f:c4:c0:b0:18:cc:63:5c:ac:56:1b:f5:77
Serial Number (int): 3714553435392217617442003121128338807
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c0:b4:c1:73:30:59:20:30:77:f8:75:db:fd:02:ca:7c:48:32:a1:a4
AuthorityKeyId: 67:fd:88:20:14:27:98:c7:09:d2:25:19:bb:e9:51:11:63:75:50:62

Fingerprint (sha1): dc:2f:96:ff:0e:c3:6f:b5:e3:12:69:db:99:c1:0f:dc:b0:12:26:ca
Fingerprint (sha256): 31:d9:3d:93:12:c8:9c:4e:60:5b:e1:2d:a2:85:31:62:2c:05:03:d6:f8:8e:f0:59:f2:d5:ac:f8:e7:6d:6a:0b

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLCA3.crl

Check the revocation status for certificate goaml-trn-int.gouv.etat.lu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goaml-trn-int.gouv.etat.lu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goaml-trn-int.gouv.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for goaml-trn-int.gouv.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurHBIg+VYfKChCHcTqe2
ZkTGnPoD/sIQ5ZOioaa1yelZKKuREC54wDCPawwP3EBuHBExjMCJzTR0rmvJPVkc
4DZcI/+ABrz9/EeF4akLsvzsKBt62RMXkw1BOQCdR1M4tvPNkeqWkWav2FpRczVV
umqM6QwT1xI4Jy703twoWkHBLcO24uIhudO1Slt8zRTv8ar/0SQfDTLWqft+itC4
qbDkJQYIntT4ob7Rk01fL75EEzhtfiYN0itCWKTea6eT8QdJfwXlq834Xu6vG+Yn
CkBuABo9MKZysVq2440MX4ea39RoTFnAE6+AvPBa4c9WgGNTyfFz0oMvNOu0H7eS
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3714553435392217617442003121128338807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goaml-trn-int.gouv.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23567978698044860343000677143071727849646738575933183750295434246680688350108112889120735357744315488095601583704473108615195452100270961235336485110603866149849268139538110272980720089536906731525469377071775226630292496181267738626631413856161584330838131400591697091215212246338114366941771760032254777155496888339210365957785783035437896475656748922054036915199885906162893342088382443096579798433798862826861614720234638249698843263211160100388959048147410698622652438057058178186614907958165414845471847115907206255844343535817172682329341443119619750701204479950834039283070550571760669028970364242571130540681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 67fd8820142798c709d22519bbe9511163755062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0b4c1733059203077f875dbfd02ca7c4832a1a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goaml-trn-int.gouv.etat.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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