atlantis-prd-gw.ctie.etat.lu

- Centre des technologies de l’information de l’Etat -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number df:3e:42:84:bd:0b:da:65:c6:10:7e:9f:d0:c6:7a:7e was issued on by GEANT Vereniging.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centre des technologies de l’information de l’Etat

Organization: Centre des technologies de l’information de l’Etat
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): df:3e:42:84:bd:0b:da:65:c6:10:7e:9f:d0:c6:7a:7e
Serial Number (int): 296741114620923688257194850462546164350
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d8:bb:f8:bc:4e:db:07:fb:34:e9:d0:bb:2e:9a:0a:ce:71:4c:08:1d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 5a:84:16:ac:65:73:4a:2c:d2:71:ba:05:8c:87:8c:d6:49:e1:4c:f0
Fingerprint (sha256): 36:d0:8d:41:00:f7:a5:9a:59:a2:6f:49:13:b6:52:f7:3f:a9:bb:1f:a8:d2:d6:47:e2:0c:93:9e:94:08:73:04

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate atlantis-prd-gw.ctie.etat.lu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atlantis-prd-gw.ctie.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlantis-prd-gw.ctie.etat.lu
atlantis-prd-gw.ctie-001.gov.lu
bcnot.ctie.etat.lu
bcsloan.ctie.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for atlantis-prd-gw.ctie.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296741114620923688257194850462546164350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centre des technologies de l’information de l’Etat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atlantis-prd-gw.ctie.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828037863973307339381981061222527316021329721024369656932892534848704232677061594055498095498269701164749793375434342474767770274106502769787483599935413262141719542118778136814711587772248866252338416378486136171263401237161674916469660466829745404154821220605680685496225073795354035295832746311121986780704079081715887846379302012726516529657116275362260913603511382262340233728730693012652662272630839420732523788723882021017984808058566841228024888297657520292986535988635514196706004837409725471510003123656951577586630295094226285837004618637315748075168831090046581009378272744661867420249175927476471628216979757135891562636886893364773157519988234698825400963380414583189638110819736618514832579230928783686512120096649422713120219354524442104376276781274707869500282142997035896387468718528337771817174810706991165721806424287509736092166955331975319866045325224103312981256525910774259658946270631424781849065772532870315016849289857059911444144612209280964899974782227243021536819320239667436315219801141842952322919714602502034926668671009412410609372803199056732060213044478078343471037008593660475074255836818486714192118638153418958454882467246933671834707302417320688077283871547383893045850060432712558715382545807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8bbf8bc4edb07fb34e9d0bb2e9a0ace714c081d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantis-prd-gw.ctie.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantis-prd-gw.ctie-001.gov.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcnot.ctie.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcsloan.ctie.etat.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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