acf-test-intf.gouv.etat.lu
- Administration des chemins de fer -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number fe:a3:35:d0:a2:26:10:20:94:02:45:86:00:4c:7d:4a was issued on by GEANT Vereniging.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Administration des chemins de fer
Organization:
Administration des chemins de fer
State / Province:
Esch-sur-Alzette
Country: LU
Country: LU
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): fe:a3:35:d0:a2:26:10:20:94:02:45:86:00:4c:7d:4aSerial Number (int): 338471346814659192057560109498812366154
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 28:54:0d:5a:b0:c5:e0:55:65:04:c4:48:86:58:14:56:f6:45:fb:c4
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 07:59:4c:6e:df:b3:e2:a2:de:a5:cb:8d:d4:e5:0d:e9:27:72:dc:ed
Fingerprint (sha256): 36:5a:11:e9:1e:bf:e6:60:d5:25:8a:c2:f5:75:b7:d0:20:e4:25:d7:5b:4f:53:e6:c6:78:4e:d0:4b:d6:19:02
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate acf-test-intf.gouv.etat.lu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for acf-test-intf.gouv.etat.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
acf-test-intf.gouv.etat.lu
Other certificates including the domain name etat.lu
(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
Certificate
The complete raw certificate details for acf-test-intf.gouv.etat.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIeTCCBmGgAwIBAgIRAP6jNdCiJhAglAJFhgBMfUowDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDEwNjAwMDAwMFoXDTI0MDEwNjIz NTk1OVoweTELMAkGA1UEBhMCTFUxGTAXBgNVBAgTEEVzY2gtc3VyLUFsemV0dGUx KjAoBgNVBAoTIUFkbWluaXN0cmF0aW9uIGRlcyBjaGVtaW5zIGRlIGZlcjEjMCEG A1UEAxMaYWNmLXRlc3QtaW50Zi5nb3V2LmV0YXQubHUwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDGtQDkBWV2L6eY1jgtKIyIwvyHN5MTIvYGCph6Do2+ bCZM8YVCAyeLq1mFF4J1XfNq4Lx03yCa02tmxGkpt+sJkDqDEizkyjSFbGGnyVJ5 6cwPBetgYHg6ay3RZKbs+YKjIFvQIBWtyQaTkRreZrZL+zo3vO3oAghKK+Sw/0vk j4QR+Cjk5SgixqR7f0/Hp0BGXF9POr2heYXHWRGb/X6mUykWE7tLXbM0eoXJ7JjT Fmm7+zx5j8fdFucfXJXbQtr8UwwYdBaHcpS8QXmzYmW6zAVGyped4BlZArsSaZ7W jmKKsNMZR1lqyqpcPikK/IwIiyGWMY64njjL+KeqiEc7t42FhenKazxfDI71HraD +c+dpbbVyV/HNnVuyfSFyAj97MiK5+mA1EucLGGLkZbIbuzK5lHk6vypxF7kBAn7 vDWFuLOKv5qTojFsm+yZ7/umZCnm02d5S2VJQND5nCxjKLRAvWpz4MNMUMcLzTpJ LufR95gbO8oTREcP9Pu3uxXb9fHlFqLlctoANqWrXmVF+sY5cARdYBXRvHtp0fEh tiSweGOB8MAzAZEgZcJGaAAYqu59ai4yB6iPKT6py2X0JLSLy9YGdRX2tdT1x+zT cR6RrzeDiNwgfGPRtRKBwsP4SKRc4Q1q/eESFbuZzf+0qeevw7TtrP6xeFUmeFMf 7QIDAQABo4IDLzCCAyswHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegww HQYDVR0OBBYEFChUDVqwxeBVZQTESIZYFFb2RfvEMA4GA1UdDwEB/wQEAwIFoDAM BgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNV HSAEQjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2Vj dGlnby5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8v R0VBTlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUF BwEBBGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNv bS9HRUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9j c3Auc2VjdGlnby5jb20wggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB2AHb/iD8K tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABhYgRgf8AAAQDAEcwRQIgDbrU fQYoGtEt+wpYGh1qhe3R0w2JAqwZtDsOoXu/FCYCIQCigP+wBocT+kVwY2DfFgKC TGTgRWk/0T5LlOgR3jqEgwB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI 1/urAAABhYgRgdgAAAQDAEgwRgIhAORNkPbksI6kDfkzR9i91jSlx1F+dIjuU4J7 nSn0LOxfAiEA+DV79s8QwjTCwV3s1UGe2TYNtm/xAwqWZ9wgxgBWyR8AdwDuzdBk 1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYWIEYGZAAAEAwBIMEYCIQDH 0COO5sUN9khtEH/VHeD4NxuzI05W8Ba7m1/8/3BW8AIhAJ1xf9vZgSZG6e8/zmXw 015FMWYLZYownTWPaF94Vhf1MCUGA1UdEQQeMByCGmFjZi10ZXN0LWludGYuZ291 di5ldGF0Lmx1MA0GCSqGSIb3DQEBDAUAA4ICAQCSIBzZS6MZCvLFXK9C9sLlJas4 3/MstQygzFh4HCBz5RyghNJd3ufx0LvHcgmceEB5Q690m3XG19DGFJ14RfU7S54y yhfMx+6O+9TtKHC+BYCzEUmDqxU+NA/Fr68uKPeubawuuLKdiPDnQJLZoTCtccee KCpsX0YKx4WSREV3XwTcjOpaclbvKILfWHVCavRCkxaxW93RAo8bQxhRULnVUMr8 7OuTxLkqxrPryVb+ODPSbcX14itqzQ9BRxN9PAMdggvQR8mQU0mjJeXT4+IZJfwT XC1Z03ugqgi+8OO3BazfHAW+5LTM0q7gO4zq07na6AbQkSxQXs9oKt2lYwClKptX jo+5+goNktjM5BhOekxuxcs3Pb/LBND3jyYd4n4T/NVyNz32vNlRKXQ3ncvKh3DM dQWxyvnULRBY3SAG/NJdj1rahyAyQdeyQV9dB2n4N7Phqw/u6DpF3z9YZosaDblk Gk877FKfKIwNb84qGy9rIWRSWlUqVp6nf0c8AI8RKhYQXvTEUVyHfqEinJlxvEJU WyEyi6BWjc8ridU699RMKM1AQbDVh0HgriGnd1q8sfTX64vefMdyy7qQEel9VCgk vuyI8Rg45JPUNrhEIRSKDASaePVrmAysDGw/HNQ4ucgng45gHsyLUsHG+qITQJqY /n/pphRWwELW0ZKTdw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxrUA5AVldi+nmNY4LSiM iML8hzeTEyL2BgqYeg6NvmwmTPGFQgMni6tZhReCdV3zauC8dN8gmtNrZsRpKbfr CZA6gxIs5Mo0hWxhp8lSeenMDwXrYGB4Omst0WSm7PmCoyBb0CAVrckGk5Ea3ma2 S/s6N7zt6AIISivksP9L5I+EEfgo5OUoIsake39Px6dARlxfTzq9oXmFx1kRm/1+ plMpFhO7S12zNHqFyeyY0xZpu/s8eY/H3RbnH1yV20La/FMMGHQWh3KUvEF5s2Jl uswFRsqXneAZWQK7Emme1o5iirDTGUdZasqqXD4pCvyMCIshljGOuJ44y/inqohH O7eNhYXpyms8XwyO9R62g/nPnaW21clfxzZ1bsn0hcgI/ezIiufpgNRLnCxhi5GW yG7syuZR5Or8qcRe5AQJ+7w1hbizir+ak6IxbJvsme/7pmQp5tNneUtlSUDQ+Zws Yyi0QL1qc+DDTFDHC806SS7n0feYGzvKE0RHD/T7t7sV2/Xx5Rai5XLaADalq15l RfrGOXAEXWAV0bx7adHxIbYksHhjgfDAMwGRIGXCRmgAGKrufWouMgeojyk+qctl 9CS0i8vWBnUV9rXU9cfs03Eeka83g4jcIHxj0bUSgcLD+EikXOENav3hEhW7mc3/ tKnnr8O07az+sXhVJnhTH+0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 338471346814659192057560109498812366154 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Esch-sur-Alzette' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Administration des chemins de fer' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acf-test-intf.gouv.etat.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 810654016759865983353532126000218639375553459991504670661553983994020482103806330506556547021450564729627517703110152763600252824673150407218804798365331111224660789434693651482010648260668151382377934108480451918323999670971012895549313209217614857855381887218840363077231812054856471202223646640288995909114695653297388329798008358063595850402219595979083127148409632978751763800221085975616313485912998300736323773869734367295782811487609129375913586507751026799710849879868565761564441379493170370128695206585494957590719442394508427281402115463891836711537149584099948109318133333049044327505287464774216652037862284477863907401219304653574226123808566528329569731941536217479796845707000644144795189617198238215644388625358183175208950419497259230825745202926472781804154441866239499733396872021498828396902989678786233883221629495535201699654665167850306672315635844741398763699179340643860824300565974418184626754684670063531283466039016987075480644979866611353538139134025233483229450050687559128760103334124696621662346602703872740694947160178493836428486087180825965490115657955341802532324697025279339993559565318451518802266826115300559106066065798193121057653007303927258071079211032481960871275884383530394389050499053 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28540d5ab0c5e0556504c44886581456f645fbc4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185881181ff000004030047304502200dbad47d06281ad12dfb0a581a1d6a85edd1d30d8902ac19b43b0ea17bbf1426022100a280ffb0068713fa45706360df1602824c64e045693fd13e4b94e811de3a8483007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000185881181d80000040300483046022100e44d90f6e4b08ea40df93347d8bdd634a5c7517e7488ee53827b9d29f42cec5f022100f8357bf6cf10c234c2c15decd5419ed9360db66ff1030a9667dc20c60056c91f007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185881181990000040300483046022100c7d0238ee6c50df6486d107fd51de0f8371bb3234e56f016bb9b5ffcff7056f00221009d717fdbd9812646e9ef3fce65f0d35e4531660b658a309d358f685f785617f5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acf-test-intf.gouv.etat.lu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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