www.meteolux.lu

- Administration de la navigation aérienne -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d5:52:75:07:2b:e3:3b:a7:6e:d8:7e:03:a4:f8:14:e1 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Administration de la navigation aérienne

Organization: Administration de la navigation aérienne
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): d5:52:75:07:2b:e3:3b:a7:6e:d8:7e:03:a4:f8:14:e1
Serial Number (int): 283553705054690264930926750411563472097
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8c:e7:98:6c:72:b3:d8:55:4b:84:f2:8b:d3:3d:6f:52:02:45:ba:94
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 8f:ae:a8:0c:f1:da:d3:b5:59:ba:99:69:2a:09:d2:76:df:ac:aa:6c
Fingerprint (sha256): 33:14:01:47:5d:56:12:8e:e3:14:82:10:54:1c:a4:6a:d0:9c:3f:2c:0a:e7:de:ad:2b:63:42:58:6a:e9:ef:ba

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.meteolux.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.meteolux.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.meteolux.lu
meteolux.lu

Other certificates including the domain name meteolux.lu

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.meteolux.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283553705054690264930926750411563472097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Administration de la navigation aérienne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.meteolux.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877838349521790901945952137390073931867871731203822377543945156686698558320808047863548411241918719174493384044264833620893068217481126438783512417868064690364480075812915286249816623813415133957368032757643745852457341513629879393583015253327798537323552370454170176734294351795995910258926460204229586580715767487485615746254378427230317846133704668416633789750230457569185727154671917254493755508404110741143744733560887187476301000468031400896376766994794400220000777540746165783541008229529812193627855839819237460024531632049899056624578198753549793191281985019214362183551688977567751884692227247335078634706980904927188603161041577703508163111958114362827807431870354060078603684595253550976369065233331939457207286345143802102700270563241954017587965545183649146792464656345001452547259023672043860892354690701500665494596814098453320193715335634299209526122622784157738429353134315635959769491221548630618744790231204662562741818533361046439944651542933746256640433784718645746961289797633312145206254378132357919158008311107845479670237695491840429066985771170570645675228822964878776539130229475557360367203036508683202674417729036903298155165513980631755180464100832731993365918015992252892335397130528706034444692115151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ce7986c72b3d8554b84f28bd33d6f520245ba94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meteolux.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteolux.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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