acf-test-intf.gouv.etat.lu

- Administration des chemins de fer -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number fe:a3:35:d0:a2:26:10:20:94:02:45:86:00:4c:7d:4a was issued on by GEANT Vereniging.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Administration des chemins de fer

Organization: Administration des chemins de fer
State / Province: Esch-sur-Alzette
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): fe:a3:35:d0:a2:26:10:20:94:02:45:86:00:4c:7d:4a
Serial Number (int): 338471346814659192057560109498812366154
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 28:54:0d:5a:b0:c5:e0:55:65:04:c4:48:86:58:14:56:f6:45:fb:c4
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 07:59:4c:6e:df:b3:e2:a2:de:a5:cb:8d:d4:e5:0d:e9:27:72:dc:ed
Fingerprint (sha256): 36:5a:11:e9:1e:bf:e6:60:d5:25:8a:c2:f5:75:b7:d0:20:e4:25:d7:5b:4f:53:e6:c6:78:4e:d0:4b:d6:19:02

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate acf-test-intf.gouv.etat.lu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acf-test-intf.gouv.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acf-test-intf.gouv.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for acf-test-intf.gouv.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIeTCCBmGgAwIBAgIRAP6jNdCiJhAglAJFhgBMfUowDQYJKoZIhvcNAQEMBQAw
RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV
BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDEwNjAwMDAwMFoXDTI0MDEwNjIz
NTk1OVoweTELMAkGA1UEBhMCTFUxGTAXBgNVBAgTEEVzY2gtc3VyLUFsemV0dGUx
KjAoBgNVBAoTIUFkbWluaXN0cmF0aW9uIGRlcyBjaGVtaW5zIGRlIGZlcjEjMCEG
A1UEAxMaYWNmLXRlc3QtaW50Zi5nb3V2LmV0YXQubHUwggIiMA0GCSqGSIb3DQEB
AQUAA4ICDwAwggIKAoICAQDGtQDkBWV2L6eY1jgtKIyIwvyHN5MTIvYGCph6Do2+
bCZM8YVCAyeLq1mFF4J1XfNq4Lx03yCa02tmxGkpt+sJkDqDEizkyjSFbGGnyVJ5
6cwPBetgYHg6ay3RZKbs+YKjIFvQIBWtyQaTkRreZrZL+zo3vO3oAghKK+Sw/0vk
j4QR+Cjk5SgixqR7f0/Hp0BGXF9POr2heYXHWRGb/X6mUykWE7tLXbM0eoXJ7JjT
Fmm7+zx5j8fdFucfXJXbQtr8UwwYdBaHcpS8QXmzYmW6zAVGyped4BlZArsSaZ7W
jmKKsNMZR1lqyqpcPikK/IwIiyGWMY64njjL+KeqiEc7t42FhenKazxfDI71HraD
+c+dpbbVyV/HNnVuyfSFyAj97MiK5+mA1EucLGGLkZbIbuzK5lHk6vypxF7kBAn7
vDWFuLOKv5qTojFsm+yZ7/umZCnm02d5S2VJQND5nCxjKLRAvWpz4MNMUMcLzTpJ
LufR95gbO8oTREcP9Pu3uxXb9fHlFqLlctoANqWrXmVF+sY5cARdYBXRvHtp0fEh
tiSweGOB8MAzAZEgZcJGaAAYqu59ai4yB6iPKT6py2X0JLSLy9YGdRX2tdT1x+zT
cR6RrzeDiNwgfGPRtRKBwsP4SKRc4Q1q/eESFbuZzf+0qeevw7TtrP6xeFUmeFMf
7QIDAQABo4IDLzCCAyswHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegww
HQYDVR0OBBYEFChUDVqwxeBVZQTESIZYFFb2RfvEMA4GA1UdDwEB/wQEAwIFoDAM
BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV
HSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj
dGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8v
R0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUF
BwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNv
bS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9j
c3Auc2VjdGlnby5jb20wggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB2AHb/iD8K
tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABhYgRgf8AAAQDAEcwRQIgDbrU
fQYoGtEt+wpYGh1qhe3R0w2JAqwZtDsOoXu/FCYCIQCigP+wBocT+kVwY2DfFgKC
TGTgRWk/0T5LlOgR3jqEgwB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI
1/urAAABhYgRgdgAAAQDAEgwRgIhAORNkPbksI6kDfkzR9i91jSlx1F+dIjuU4J7
nSn0LOxfAiEA+DV79s8QwjTCwV3s1UGe2TYNtm/xAwqWZ9wgxgBWyR8AdwDuzdBk
1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYWIEYGZAAAEAwBIMEYCIQDH
0COO5sUN9khtEH/VHeD4NxuzI05W8Ba7m1/8/3BW8AIhAJ1xf9vZgSZG6e8/zmXw
015FMWYLZYownTWPaF94Vhf1MCUGA1UdEQQeMByCGmFjZi10ZXN0LWludGYuZ291
di5ldGF0Lmx1MA0GCSqGSIb3DQEBDAUAA4ICAQCSIBzZS6MZCvLFXK9C9sLlJas4
3/MstQygzFh4HCBz5RyghNJd3ufx0LvHcgmceEB5Q690m3XG19DGFJ14RfU7S54y
yhfMx+6O+9TtKHC+BYCzEUmDqxU+NA/Fr68uKPeubawuuLKdiPDnQJLZoTCtccee
KCpsX0YKx4WSREV3XwTcjOpaclbvKILfWHVCavRCkxaxW93RAo8bQxhRULnVUMr8
7OuTxLkqxrPryVb+ODPSbcX14itqzQ9BRxN9PAMdggvQR8mQU0mjJeXT4+IZJfwT
XC1Z03ugqgi+8OO3BazfHAW+5LTM0q7gO4zq07na6AbQkSxQXs9oKt2lYwClKptX
jo+5+goNktjM5BhOekxuxcs3Pb/LBND3jyYd4n4T/NVyNz32vNlRKXQ3ncvKh3DM
dQWxyvnULRBY3SAG/NJdj1rahyAyQdeyQV9dB2n4N7Phqw/u6DpF3z9YZosaDblk
Gk877FKfKIwNb84qGy9rIWRSWlUqVp6nf0c8AI8RKhYQXvTEUVyHfqEinJlxvEJU
WyEyi6BWjc8ridU699RMKM1AQbDVh0HgriGnd1q8sfTX64vefMdyy7qQEel9VCgk
vuyI8Rg45JPUNrhEIRSKDASaePVrmAysDGw/HNQ4ucgng45gHsyLUsHG+qITQJqY
/n/pphRWwELW0ZKTdw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxrUA5AVldi+nmNY4LSiM
iML8hzeTEyL2BgqYeg6NvmwmTPGFQgMni6tZhReCdV3zauC8dN8gmtNrZsRpKbfr
CZA6gxIs5Mo0hWxhp8lSeenMDwXrYGB4Omst0WSm7PmCoyBb0CAVrckGk5Ea3ma2
S/s6N7zt6AIISivksP9L5I+EEfgo5OUoIsake39Px6dARlxfTzq9oXmFx1kRm/1+
plMpFhO7S12zNHqFyeyY0xZpu/s8eY/H3RbnH1yV20La/FMMGHQWh3KUvEF5s2Jl
uswFRsqXneAZWQK7Emme1o5iirDTGUdZasqqXD4pCvyMCIshljGOuJ44y/inqohH
O7eNhYXpyms8XwyO9R62g/nPnaW21clfxzZ1bsn0hcgI/ezIiufpgNRLnCxhi5GW
yG7syuZR5Or8qcRe5AQJ+7w1hbizir+ak6IxbJvsme/7pmQp5tNneUtlSUDQ+Zws
Yyi0QL1qc+DDTFDHC806SS7n0feYGzvKE0RHD/T7t7sV2/Xx5Rai5XLaADalq15l
RfrGOXAEXWAV0bx7adHxIbYksHhjgfDAMwGRIGXCRmgAGKrufWouMgeojyk+qctl
9CS0i8vWBnUV9rXU9cfs03Eeka83g4jcIHxj0bUSgcLD+EikXOENav3hEhW7mc3/
tKnnr8O07az+sXhVJnhTH+0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338471346814659192057560109498812366154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Esch-sur-Alzette'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Administration des chemins de fer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acf-test-intf.gouv.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810654016759865983353532126000218639375553459991504670661553983994020482103806330506556547021450564729627517703110152763600252824673150407218804798365331111224660789434693651482010648260668151382377934108480451918323999670971012895549313209217614857855381887218840363077231812054856471202223646640288995909114695653297388329798008358063595850402219595979083127148409632978751763800221085975616313485912998300736323773869734367295782811487609129375913586507751026799710849879868565761564441379493170370128695206585494957590719442394508427281402115463891836711537149584099948109318133333049044327505287464774216652037862284477863907401219304653574226123808566528329569731941536217479796845707000644144795189617198238215644388625358183175208950419497259230825745202926472781804154441866239499733396872021498828396902989678786233883221629495535201699654665167850306672315635844741398763699179340643860824300565974418184626754684670063531283466039016987075480644979866611353538139134025233483229450050687559128760103334124696621662346602703872740694947160178493836428486087180825965490115657955341802532324697025279339993559565318451518802266826115300559106066065798193121057653007303927258071079211032481960871275884383530394389050499053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28540d5ab0c5e0556504c44886581456f645fbc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acf-test-intf.gouv.etat.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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