*.msp.etat.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d8:b2:60:4a:2c:20:e7:e9:13:68:68:b3:4c:84:22:4a was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d8:b2:60:4a:2c:20:e7:e9:13:68:68:b3:4c:84:22:4a
Serial Number (int): 288039428918224125705536680248972943946
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c3:e2:51:7d:fe:c5:f2:88:2d:ed:98:b9:f0:98:31:62:9e:d9:e0:2d
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 5f:1e:f2:ac:0f:9f:c1:03:e7:91:db:be:12:4a:3d:a3:46:dd:5f:30
Fingerprint (sha256): 3a:f6:9c:17:7b:cc:39:61:44:ba:d3:7b:68:c4:f7:b6:a3:20:8a:bd:fd:5a:14:0b:ec:82:2c:f3:35:75:ac:f2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.msp.etat.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.msp.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.msp.etat.lu
msp.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for *.msp.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApEHoxpqWqeZjg35ZG4/Q
uqpxoLtWGKV2g2y30YkoATUtL28f10+q7mlCeypoPycO4jNFwHhTB2RseHqo4+Bk
Hl+HRAsphSC57gQxS/8/IHaTa+K3w2tXUmt9NXro9xUleDSRplQikXRwa2jPygKv
hVBrw6SAy5z7we3l53CbWcQBYAMWLILz0t491zD49LJVZ1hO0b6rRYn8FVIE2oH1
7LoU6qxkzEkosjc1x64v0BeO0eDCS6Q3mkdv49afyODPufBOslks40V5ml9VxLD7
jiDgQa8UYp0zvr6rLTKcxUvBMcmcIrhc38zLCtfYAq2ns/T6ExDvLk3eCzRjDjZ/
CskyTf+Xr8HNRmqsPP1N69gtm4BVfSbe8cUIF01/0zkz01mIg6nCmVd8q6l62I9G
mU/+7g9zx4WAgCiotO4WzMwdU3IKs7lGmse2IRV7Q3EVLoi3H1uz5wJB3INJKXOO
FoTDPtvk0ssylXiNtVZu2XDn0hFy5HG+OKBGVARm0GGrFAOW6kVmKhyDJ/11jeXi
b2P/P8LvGUbe+Pb7+Su6uH2dWr8G5UybPB2AbMxp8jwfYzzKM5hELfHybQDt629E
YndD5Xo5EpRj925Ffw1nz7WrED0XJoR1fw7NNJBzgeDFplVr8a07KSFN6tnQ8TZD
iM+Ov5u+h3tYMrugJ+sunBMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288039428918224125705536680248972943946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.msp.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670111964674962485976163596699347236038603317067744413874102518348071488732270595847175966865616799194019875835304897810951411956239765351347899816047925696700306609094185608353551801659400095801419885160640646025755686306919978234655938067253894313404009723917486081086015909008255267194326550042086729745602942615774154685341887831212135986504627409684153754275112305055555221132378670938611779999754042202062140321110741745830346127495197095461558613830709494876539147826285110270300403456331578055770607459118150373629791211856985929838777682423909046906394700265650371499002457321631486303389655730178899870046165379563972581691396248239793307653590589425667709385756775550275318184258711931973648748123718256429662837513276730498946695128587992755166140357451343864332811887765612501636257305798203666691378026188247293859637317727527960464126896866570001587160518407502038641884224120863217488903601628730762157204283420140292075833284521153296156802159811748765981096151793476918315455486759054176127723049666916590514391750332311785574287401338292042065647800547779266957825145784904491565001570171224232679273196372170074667928568324867132790868874202368460247496053528559865583205989989030994126894342208435213080120433683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3e2517dfec5f2882ded98b9f09831629ed9e02d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.msp.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msp.etat.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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