*.extranet.etat.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 4a:f6:41:9d:f2:54:a3:92:49:01:ac:57:3d:21:fd:ba was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:f6:41:9d:f2:54:a3:92:49:01:ac:57:3d:21:fd:ba
Serial Number (int): 99641507585726788879413936641737358778
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 13:49:2f:4f:3d:5a:65:98:b1:d9:bf:20:41:63:58:7c:3b:58:df:16
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 60:b9:3c:ba:82:df:79:60:fe:48:6b:9d:7b:1e:fb:14:ac:65:c3:82
Fingerprint (sha256): 3c:ce:e7:bb:2c:a6:7c:d6:7d:eb:90:29:b6:79:be:e5:5f:57:52:c7:dd:62:3d:ea:b7:db:88:13:9c:7d:30:da

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.extranet.etat.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.extranet.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.extranet.etat.lu
extranet.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for *.extranet.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 99641507585726788879413936641737358778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.extranet.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871365561406017029153276021736589393816570133851434693277513178130936497916618094529540926231357199718370714270176822945517667871492550960913225099586756664725854048327662377691028200691254313397328591865028139253161556764420635183749475282333032613075893728207783208048704171240233398524894046145028737941910619456485603757330403094551917821451245542429781454193093552410448695030667466998800165702505658504625003794927940964551146799611221632012464673575856019950795917676854317258001810922731729099237141019295342536045456052322643532509039940095150722352061494559947349402866521169883171637458845738279488444545809118811888080209816752294045620658395023969555607835546935366397626484154178544026165915245049870469865146015337032663392592508043264766940187838834155046220371184769226294453341807994569747514270029702221886571311924614014820108035448729387507531507434197518775448816432713895525913108218993671988240698192015291021979288392616399395157866597175497929752777018771468367432341231775808077218309575711170660748321182102259676528990332553233448226845483516101293905269674679924079336900313373586162203283758447712105399710090879404240776561667827050177789481948209807249615281067724827161740352873022521874715325802611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13492f4f3d5a6598b1d9bf204163587c3b58df16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185724971860000040300473045022100a75fdc87f4038a475999b980e896f0d6f3c3311e25a88e52a4035ce30066b1e7022042d58e5655986086c6a186dd959b69829798dccbd2821790db4fddd69ce29070007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001857249714a00000403004830460221008c6c3a21078114c89c028ed7890c288a2e31eeed7e3d2d81d0a5ca572d30a25b022100b65c003602167194a1e62708752327e1839935bbd1e42449a3a7d46af7c9dd85007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001857249712f0000040300473045022100fac73dc191cd62d57ff9b37153e714a79dc316f638666f67a765b28a0c26eb5d0220230ae8e7658859721067b60b97da4b83a3a95a75f0222f36f5b19535ed7cce82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extranet.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.etat.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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