*.extranet.etat.lu
- Le Gouvernement du Grand-Duché de Luxembourg -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 4a:f6:41:9d:f2:54:a3:92:49:01:ac:57:3d:21:fd:ba was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Le Gouvernement du Grand-Duché de Luxembourg
Organization:
Le Gouvernement du Grand-Duché de Luxembourg
State / Province:
Luxembourg
Country: LU
Country: LU
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 4a:f6:41:9d:f2:54:a3:92:49:01:ac:57:3d:21:fd:baSerial Number (int): 99641507585726788879413936641737358778
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 13:49:2f:4f:3d:5a:65:98:b1:d9:bf:20:41:63:58:7c:3b:58:df:16
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 60:b9:3c:ba:82:df:79:60:fe:48:6b:9d:7b:1e:fb:14:ac:65:c3:82
Fingerprint (sha256): 3c:ce:e7:bb:2c:a6:7c:d6:7d:eb:90:29:b6:79:be:e5:5f:57:52:c7:dd:62:3d:ea:b7:db:88:13:9c:7d:30:da
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate *.extranet.etat.lu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.extranet.etat.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.extranet.etat.lu
extranet.etat.lu
extranet.etat.lu
Other certificates including the domain name etat.lu
(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
Certificate
The complete raw certificate details for *.extranet.etat.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIfzCCBmegAwIBAgIQSvZBnfJUo5JJAaxXPSH9ujANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwMTAyMDAwMDAwWhcNMjQwMTAyMjM1 OTU5WjB3MQswCQYDVQQGEwJMVTETMBEGA1UECBMKTHV4ZW1ib3VyZzE2MDQGA1UE CgwtTGUgR291dmVybmVtZW50IGR1IEdyYW5kLUR1Y2jDqSBkZSBMdXhlbWJvdXJn MRswGQYDVQQDDBIqLmV4dHJhbmV0LmV0YXQubHUwggIiMA0GCSqGSIb3DQEBAQUA A4ICDwAwggIKAoICAQDVlrAJ2rhZlTmxYXErdVRJC7csH/212FkZjKqo1ZU8AkJ4 rp6h4P+1XKd5zEfmHe1jvRqR7S+p2dymoeRaLEca8uGy2EHJgbVa80YSKsZC8WCK yISxsMba9eaUDJub6t8uHJZIZAVT6Y64KhgfCmUwKfTY6kUnZX3gqQXpcHgz6XjR jDfphoWsF2NF9g1W1ZtU6fV+gCLXqCTGL+92Wdzw1wcF2+3L4z0dApYL1cIZZ3c2 5Ik2MCeRdqv8U+HlE+Z+nNH/J5afUlKxEoSHoCWFNtiYoDHUqGNXt6RhJUbVJQTT +QaFhhl75L+D6AxFRYwR0G9sInOVLSxwTXkOWQxIZqjOAAtCpgtVRFm5ReoMXunf Dz9P++T8Vi6vcTXkapaKWd05oxa5cJIUhSr8sedVj3VsDlKGn7HzzQLF6vzpMfZz Z3YP/2pOcNKAU0kncysCEbi7w24g/oux04JlI89LUFnPYpAj3UkJASWuXh4kTFd/ 2FsHGjzxlBAk1SlXu+dp9DJaHquF3FwDDabcUvpsvVhOJcsglGMo7xZYfTz49pyi Z2Hc+O5+qv1qfeDxbG3vLY7mPrkpdEG364Ris9ZRhBpqRyaFf5K8diiKHmxiXNQq IVqdY7B1OyykqSPJAMSmdqgJcc2SwTJft+793iKAtzK2BeZqV+b3FK6qsniocwID AQABo4IDODCCAzQwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYD VR0OBBYEFBNJL089WmWYsdm/IEFjWHw7WN8WMA4GA1UdDwEB/wQEAwIFoDAMBgNV HRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAE QjBAMDQGCysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGln by5jb20vQ1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VB TlQuY3JsLnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEB BGkwZzA6BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9H RUFOVE9WUlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Au c2VjdGlnby5jb20wggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AHb/iD8KtvuV UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABhXJJcYYAAAQDAEcwRQIhAKdf3If0 A4pHWZm5gOiW8NbzwzEeJaiOUqQDXOMAZrHnAiBC1Y5WVZhghsahht2Vm2mCl5jc y9KCF5DbT93WnOKQcAB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/ur AAABhXJJcUoAAAQDAEgwRgIhAIxsOiEHgRTInAKO14kMKIouMe7tfj0tgdClylct MKJbAiEAtlwANgIWcZSh5icIdSMn4YOZNbvR5CRJo6fUavfJ3YUAdgDuzdBk1dsa zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYVySXEvAAAEAwBHMEUCIQD6xz3B kc1i1X/5s3FT5xSnncMW9jhmb2enZbKKDCbrXQIgIwro52WIWXIQZ7YLl9pLg6Op WnXwIi829bGVNe18zoIwLwYDVR0RBCgwJoISKi5leHRyYW5ldC5ldGF0Lmx1ghBl eHRyYW5ldC5ldGF0Lmx1MA0GCSqGSIb3DQEBDAUAA4ICAQASq97927zGEBoJvHs8 8UJGgv5dDX5RW5bbgXpWMyvyUjxhEiLxmPtBs6sUBt6kdXkIWnq7gpOpqiv0MAmE rGuJdyMUzOJGFf2vndZozrM8dxkD7apVcgqcv2naAddF7HBM3ShYalxFIJXgRMXR 4B187dWpRaaVkdXCdt2cv/eu9LMAfbgFt4TIhZImsfYw1MHe4GFlZu3sH2Xe9yz/ Wg12mDEDyCZHQSpjkRoCKwS7ICopeZSiAUhCyhQOVvtxyqYqS1i+hsAhsg6I5Djt 99Qx4vQruWUpgxKY7E9o6MhlC8P9yN5A1TlYXInUnXSylLkU4tMvzuYLMKN4u7cc EwXQl5CpLYd8BxjxUtUYcqmDSF0JIb2WfU1fVqEqFHk7MNNAxlAsBFJa//NEGA1R gcUpxcVZSCc8xdl6FqrC0FbPqlLYcgG3oM8YLzsxwsA73l1Qg7FDNcB1GL5PaJf/ ERbgt4bYlQLXKpaXPJLlkTTrtqUDpqVWC/iSeGuI+RUxfHK5wGT56zNoLqQK9Jrh K85JnQ1HbPDLQkjf+SgIlNMsDtJYMtb4misGrHqfg8iLFN+3m6fMGX2ggf8577zh jjapgW8MN2gFh9nBNMf2TzvEYTYil79JpKLULWzTOB2k1OwW7L4okNs3ha8faZh3 4QohIB9VjkJp0D3W196T9TQCqw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1ZawCdq4WZU5sWFxK3VU SQu3LB/9tdhZGYyqqNWVPAJCeK6eoeD/tVynecxH5h3tY70ake0vqdncpqHkWixH GvLhsthByYG1WvNGEirGQvFgisiEsbDG2vXmlAybm+rfLhyWSGQFU+mOuCoYHwpl MCn02OpFJ2V94KkF6XB4M+l40Yw36YaFrBdjRfYNVtWbVOn1foAi16gkxi/vdlnc 8NcHBdvty+M9HQKWC9XCGWd3NuSJNjAnkXar/FPh5RPmfpzR/yeWn1JSsRKEh6Al hTbYmKAx1KhjV7ekYSVG1SUE0/kGhYYZe+S/g+gMRUWMEdBvbCJzlS0scE15DlkM SGaozgALQqYLVURZuUXqDF7p3w8/T/vk/FYur3E15GqWilndOaMWuXCSFIUq/LHn VY91bA5Shp+x880Cxer86TH2c2d2D/9qTnDSgFNJJ3MrAhG4u8NuIP6LsdOCZSPP S1BZz2KQI91JCQElrl4eJExXf9hbBxo88ZQQJNUpV7vnafQyWh6rhdxcAw2m3FL6 bL1YTiXLIJRjKO8WWH08+Pacomdh3Pjufqr9an3g8Wxt7y2O5j65KXRBt+uEYrPW UYQaakcmhX+SvHYoih5sYlzUKiFanWOwdTsspKkjyQDEpnaoCXHNksEyX7fu/d4i gLcytgXmalfm9xSuqrJ4qHMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 99641507585726788879413936641737358778 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.extranet.etat.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871365561406017029153276021736589393816570133851434693277513178130936497916618094529540926231357199718370714270176822945517667871492550960913225099586756664725854048327662377691028200691254313397328591865028139253161556764420635183749475282333032613075893728207783208048704171240233398524894046145028737941910619456485603757330403094551917821451245542429781454193093552410448695030667466998800165702505658504625003794927940964551146799611221632012464673575856019950795917676854317258001810922731729099237141019295342536045456052322643532509039940095150722352061494559947349402866521169883171637458845738279488444545809118811888080209816752294045620658395023969555607835546935366397626484154178544026165915245049870469865146015337032663392592508043264766940187838834155046220371184769226294453341807994569747514270029702221886571311924614014820108035448729387507531507434197518775448816432713895525913108218993671988240698192015291021979288392616399395157866597175497929752777018771468367432341231775808077218309575711170660748321182102259676528990332553233448226845483516101293905269674679924079336900313373586162203283758447712105399710090879404240776561667827050177789481948209807249615281067724827161740352873022521874715325802611 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 13492f4f3d5a6598b1d9bf204163587c3b58df16 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.extranet.etat.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.etat.lu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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