*.luxdrops.eau.etat.lu
- Administration de la gestion de l'eau -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number eb:ce:87:ca:f4:75:ea:7c:04:8b:f4:86:f2:6a:86 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Administration de la gestion de l'eau
Organization:
Administration de la gestion de l'eau
State / Province:
Esch-sur-Alzette
Country: LU
Country: LU
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): eb:ce:87:ca:f4:75:ea:7c:04:8b:f4:86:f2:6a:86Serial Number (int): 1224378696747482888748278740086319750
Serial Number lenght: 120 bits, 15 octets
SubjectKeyId: 50:91:ca:11:fd:19:f3:53:81:5a:1f:7e:6c:07:c9:6c:9e:3c:1d:80
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): c4:06:7e:0a:1b:09:d9:8c:a0:17:e0:6a:56:70:46:1d:54:8c:ea:d1
Fingerprint (sha256): 32:32:08:a7:79:04:c7:16:7f:d3:f8:20:26:05:90:04:7c:41:b8:54:b4:34:e5:4f:bd:d8:61:41:c3:42:f2:24
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate *.luxdrops.eau.etat.lu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.luxdrops.eau.etat.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.luxdrops.eau.etat.lu
luxdrops.eau.etat.lu
luxdrops.eau.etat.lu
Other certificates including the domain name etat.lu
(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
Certificate
The complete raw certificate details for *.luxdrops.eau.etat.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIiTCCBnGgAwIBAgIQAOvOh8r0dep8BIv0hvJqhjANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwNDI0MDAwMDAwWhcNMjQwNDIzMjM1 OTU5WjB5MQswCQYDVQQGEwJMVTEZMBcGA1UECBMQRXNjaC1zdXItQWx6ZXR0ZTEu MCwGA1UEChMlQWRtaW5pc3RyYXRpb24gZGUgbGEgZ2VzdGlvbiBkZSBsJ2VhdTEf MB0GA1UEAwwWKi5sdXhkcm9wcy5lYXUuZXRhdC5sdTCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBANN0BnIwzkBgFTVIRcC5ye7NOEdMo4iUecWvXne7mL5r ehV+T9Jw+MDNy/hfpkfuHHLm81Wwflzh/m1Jfc/lrriK3D2rYEaVajPpOaqkktvl avpQW0FgIoSU0N8lv0q838KImIYwvlgoO8DLtYXvAcbMAc3MsRdTttzCgDGLlQ0u KmYm1TQUDoXClzOJJjySDyUPqhexFSJntIpNjJJSPY/aLBUWigZyFGtcVdFO81Cv UdhF6FQEpn7ulSc1oDpizgFOKLmr7ho00KHF/yVrQ/MkDSKCymJU4gGfJI+VfVON kJ7RKbsqfeOPFEoX3WWu7aGZf7j7iuDMadR0J3BWMNcDKtYIOAfneauYk1A7ng54 TTJCRaCctM5ZyEUtM8T0mQSChTwLTyiJjOhrPItTazqEQtcrCmIwCfzYWaVa2GTH uA8xSShsSTSlZufokqzWE4+wO2O0QPDffDomcPQWGQnzW7jJF1lVQzuaytNExe4B neR+Xds8qk8v7i4b73KhZAJalOK2JzyGTS96TXKoflaA0D/MmeIsRTeZ+VUrhM18 fs5QJfOIKsLl2DPdbZSnOfkTk1UtpHqrWrZkjfcUkSNURIBG6YuqoQNNT2mSaMgH 7+xzWEJMFFFLA9xtjOYpkoBJ9oL7ykSauHL88PrFH4VFtOxIi+V+RaATQTbivs6/ AgMBAAGjggNAMIIDPDAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAd BgNVHQ4EFgQUUJHKEf0Z81OBWh9+bAfJbJ48HYAwDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1Ud IARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0 aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9H RUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUH AQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29t L0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2Nz cC5zZWN0aWdvLmNvbTA3BgNVHREEMDAughYqLmx1eGRyb3BzLmVhdS5ldGF0Lmx1 ghRsdXhkcm9wcy5lYXUuZXRhdC5sdTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp AHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGHsgPfTAAABAMA RjBEAiAm6c5gVXxOrtpOrNuQcfSEMxUDTAQoKYlYjQIj6kEsuwIgH5YSQfhGEeTw c6xAhU30gPSjsZ2f2Gnx8SP2YGzuV/MAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GE hTS9pD0wSNf7qwAAAYeyA9+gAAAEAwBIMEYCIQD9uKJ5IL8GT84zmAeY44zLTGqn g03XGRnmsqt2liz4HQIhANAMrkyC8YGJtCMntHljtqkO43APgE7xLcSbbSVxYhH+ AHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGHsgPfxgAABAMA SDBGAiEAgs24B+OpuMZ7m/bysg4MPESNifQ+7ZzW2v8rXeJNtBwCIQCrKYaYbcD6 yU6ojunijPkymgfS3bIAHAN4hFxQAp/QpDANBgkqhkiG9w0BAQwFAAOCAgEAT+8d 4zRD6ji+xcwS13MplW5h00YwVRXwmzcRRV8sf1oT1tiw6BDxTZj4gqG37v7vVhPw YsDnm1jt3Pl/9PRIxTNEV3cnsar0ZxgQrwg9/dt4bSZrWPZ0ut3wTQ2vNn4V0UTL XOaQMVik0rNZvJelsPJqOKgTDk9af7zKm6yKbm0Pd6Uv2c2BqVEEzStkKi8SdaKR QIA63k6eTbMleaizFx21Rl2ZZyoSEam11vlpnfR5CUUFm99DUMUjvodznqkHdtj0 2SUtsEao6JpRxTEeck5xgZjRAOpUwTu5hLk3KdF+9vYKR1PdimrD3Jvq9jU+NmZk RAof6mwSvtWm5PPCm8poVV1mQFoX0NfTCo3d5/a+LTONt8E4dUhBH/0rzSgT9yfH Z9kL4kBrcMuhRuhbRSd16TUn2W7b/QSlqzzb7fn2l/XproILnUOx6KK1Se6gh/zJ gV1ScFcTphMSfo3ChYz7jwvMxeFf186HMr5QaW1iL8WlRXUeSdLwmtAEPzbvrGNd ibLg6xVb69HF0W7fmYsA+ai2VmPtNlwvuNRnpGDcT7q8lIT74ICt1Y6t8EoGKFra qULPVHvbvFk9Kj2QcW+1x3Ilc7tiKUp90h5JuNcIPcyB1WsGnveN1F2gDB9nN+7M jTAKiK7KNsxJKBV7D6OBNPzGeYG6Zoq/voKZg/4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA03QGcjDOQGAVNUhFwLnJ 7s04R0yjiJR5xa9ed7uYvmt6FX5P0nD4wM3L+F+mR+4ccubzVbB+XOH+bUl9z+Wu uIrcPatgRpVqM+k5qqSS2+Vq+lBbQWAihJTQ3yW/SrzfwoiYhjC+WCg7wMu1he8B xswBzcyxF1O23MKAMYuVDS4qZibVNBQOhcKXM4kmPJIPJQ+qF7EVIme0ik2MklI9 j9osFRaKBnIUa1xV0U7zUK9R2EXoVASmfu6VJzWgOmLOAU4ouavuGjTQocX/JWtD 8yQNIoLKYlTiAZ8kj5V9U42QntEpuyp9448UShfdZa7toZl/uPuK4Mxp1HQncFYw 1wMq1gg4B+d5q5iTUDueDnhNMkJFoJy0zlnIRS0zxPSZBIKFPAtPKImM6Gs8i1Nr OoRC1ysKYjAJ/NhZpVrYZMe4DzFJKGxJNKVm5+iSrNYTj7A7Y7RA8N98OiZw9BYZ CfNbuMkXWVVDO5rK00TF7gGd5H5d2zyqTy/uLhvvcqFkAlqU4rYnPIZNL3pNcqh+ VoDQP8yZ4ixFN5n5VSuEzXx+zlAl84gqwuXYM91tlKc5+ROTVS2keqtatmSN9xSR I1REgEbpi6qhA01PaZJoyAfv7HNYQkwUUUsD3G2M5imSgEn2gvvKRJq4cvzw+sUf hUW07EiL5X5FoBNBNuK+zr8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1224378696747482888748278740086319750 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Esch-sur-Alzette' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Administration de la gestion de l'eau' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.luxdrops.eau.etat.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862653888340390815739370778126071636176797100313202626656122511588730794286961773267606970991185014741495001292209660612314507986650084107964037641544782104370745355514957984915303389838276522723162160173606345520081268454800553546598251179538600622965292570238045022148227014694113490713560580948364065810068899916682730678156822526662448776261158147629756992555475895298708127234573262253856531690536841702249801846985157819942973459312202818659114516735918043088400959534661146611427940003593976700709427885038089113125437556531979447758888836995257426448940787140548263165772128677175057150036227128836086584901448086138941070990397830360966450185812440032915047539706166932566489233913041376893342253964388000664298830012071602478674325349041171359993052888209187949356879316565298461042435718692993011677215407975124973172945922126262196760305594240629419921945320895356785382430460392345443473394267654313016871084112024517193542546624119131870903511110604496071249218720219035553948226525185437403396492573774740554037207231569004115767957866187667499701752291442640141892174906497704849207527272710136028230349857090740522608853505080621136229715467778085963284656076531413240407765970454400095984299973071325881776463597247 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5091ca11fd19f353815a1f7e6c07c96c9e3c1d80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luxdrops.eau.etat.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxdrops.eau.etat.lu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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