*.luxdrops.eau.etat.lu

- Administration de la gestion de l'eau -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number eb:ce:87:ca:f4:75:ea:7c:04:8b:f4:86:f2:6a:86 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Administration de la gestion de l'eau

Organization: Administration de la gestion de l'eau
State / Province: Esch-sur-Alzette
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): eb:ce:87:ca:f4:75:ea:7c:04:8b:f4:86:f2:6a:86
Serial Number (int): 1224378696747482888748278740086319750
Serial Number lenght: 120 bits, 15 octets

SubjectKeyId: 50:91:ca:11:fd:19:f3:53:81:5a:1f:7e:6c:07:c9:6c:9e:3c:1d:80
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): c4:06:7e:0a:1b:09:d9:8c:a0:17:e0:6a:56:70:46:1d:54:8c:ea:d1
Fingerprint (sha256): 32:32:08:a7:79:04:c7:16:7f:d3:f8:20:26:05:90:04:7c:41:b8:54:b4:34:e5:4f:bd:d8:61:41:c3:42:f2:24

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.luxdrops.eau.etat.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.luxdrops.eau.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.luxdrops.eau.etat.lu
luxdrops.eau.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for *.luxdrops.eau.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1224378696747482888748278740086319750
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Esch-sur-Alzette'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Administration de la gestion de l'eau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.luxdrops.eau.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862653888340390815739370778126071636176797100313202626656122511588730794286961773267606970991185014741495001292209660612314507986650084107964037641544782104370745355514957984915303389838276522723162160173606345520081268454800553546598251179538600622965292570238045022148227014694113490713560580948364065810068899916682730678156822526662448776261158147629756992555475895298708127234573262253856531690536841702249801846985157819942973459312202818659114516735918043088400959534661146611427940003593976700709427885038089113125437556531979447758888836995257426448940787140548263165772128677175057150036227128836086584901448086138941070990397830360966450185812440032915047539706166932566489233913041376893342253964388000664298830012071602478674325349041171359993052888209187949356879316565298461042435718692993011677215407975124973172945922126262196760305594240629419921945320895356785382430460392345443473394267654313016871084112024517193542546624119131870903511110604496071249218720219035553948226525185437403396492573774740554037207231569004115767957866187667499701752291442640141892174906497704849207527272710136028230349857090740522608853505080621136229715467778085963284656076531413240407765970454400095984299973071325881776463597247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5091ca11fd19f353815a1f7e6c07c96c9e3c1d80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxdrops.eau.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxdrops.eau.etat.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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