*.b2g-test.etat.lu
- Centre des technologies de l’information de l’Etat -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number 12:00:77:d8:b6:38:a8:ae:ac:5e:bb:b1:a2:ad:6f:10 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Centre des technologies de l’information de l’Etat
Organization:
Centre des technologies de l’information de l’Etat
State / Province:
Luxembourg
Country: LU
Country: LU
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): 12:00:77:d8:b6:38:a8:ae:ac:5e:bb:b1:a2:ad:6f:10Serial Number (int): 23928534700549191555252280874941378320
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: b0:42:4b:70:3b:c8:0e:9b:6c:ec:6a:db:02:7f:4d:2d:54:00:f9:48
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): ac:37:86:2d:e3:3f:63:f0:24:85:26:35:48:6d:4f:56:49:14:0a:aa
Fingerprint (sha256): 3e:75:c6:6d:dc:57:22:03:96:20:2b:d5:b4:3c:ce:24:33:d8:e7:c7:74:8e:f0:69:fd:99:5e:51:69:f8:06:c5
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate *.b2g-test.etat.lu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.b2g-test.etat.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.b2g-test.etat.lu
b2g-test.etat.lu
b2g-test.etat.lu
Other certificates including the domain name etat.lu
(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu
Certificate
The complete raw certificate details for *.b2g-test.etat.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIiTCCBnGgAwIBAgIQEgB32LY4qK6sXruxoq1vEDANBgkqhkiG9w0BAQwFADBE MQswCQYDVQQGEwJOTDEZMBcGA1UEChMQR0VBTlQgVmVyZW5pZ2luZzEaMBgGA1UE AxMRR0VBTlQgT1YgUlNBIENBIDQwHhcNMjMwMTAyMDAwMDAwWhcNMjQwMTAyMjM1 OTU5WjCBgDELMAkGA1UEBhMCTFUxEzARBgNVBAgTCkx1eGVtYm91cmcxPzA9BgNV BAoMNkNlbnRyZSBkZXMgdGVjaG5vbG9naWVzIGRlIGzigJlpbmZvcm1hdGlvbiBk ZSBs4oCZRXRhdDEbMBkGA1UEAwwSKi5iMmctdGVzdC5ldGF0Lmx1MIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4XmvRp0FYinWn0zeEao5TfdntuJhO+az dQ/Ta0azAjBz9c5155XU3EOdRC69YZEK9VG3wt0CaP9HKuIBWqtPcbvdLoZNB9zM BUqDNTlkaVsGVfELprTI0BXe57sA5V8MohFNWG4x6r1Ns87mEJJLJDdi1Ygbdc8J CV6cAWhXB1nbfKUDTOvJmei6ZveOa3uq3AdHW/KLeXII17wq+HCmO4WeY97/lg7j b7Q9xlEqAlAt/pjpwdrbohBfCzG16PpUdU+i3yt5hdgh62XuY+iu5dv2+CU472oN qbY2kjcPVYzbFilLWw6HhA7d2hYjRFAO5PF1OL3G9K8DIqWykMkfpz9/UyveioAk X8W6fg3mEkcU9/SGdTIa2gqg5QCoj0+QLTty3fNpLtM1/Y4469A4DMYnAvyCfInq 6Y33PG1oUIONlUJrouIZR+Y/cui2Ki+KSgEiItCaCbYWAoKqr7Jje8O8OnXhWoPR XcmkmeDO5Vr+/GUpkhk+X+pT9gyVkuwh7oVwvZYSG4qx9EwMNjxHQgE76CUEtlde FEdUhO919bfrKUdtryTwjGXvXAIIYZXu7MunqHjoPCJPOaOFeOvr/C4AlFV8QgDx uWCiqGOeMdS6LvPBWOs1slHhgCLU4iOz8UpDF28AtD11iLi59Zd1hMFx5u3qN4HR Vq9nUcSSqPMCAwEAAaOCAzgwggM0MB8GA1UdIwQYMBaAFG8dNUkQbDL6WaCevIro H5W+cXoMMB0GA1UdDgQWBBSwQktwO8gOm2zsatsCf00tVAD5SDAOBgNVHQ8BAf8E BAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTzAlMCMGCCsGAQUFBwIBFhdodHRw czovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYu aHR0cDovL0dFQU5ULmNybC5zZWN0aWdvLmNvbS9HRUFOVE9WUlNBQ0E0LmNybDB1 BggrBgEFBQcBAQRpMGcwOgYIKwYBBQUHMAKGLmh0dHA6Ly9HRUFOVC5jcnQuc2Vj dGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcnQwKQYIKwYBBQUHMAGGHWh0dHA6Ly9H RUFOVC5vY3NwLnNlY3RpZ28uY29tMC8GA1UdEQQoMCaCEiouYjJnLXRlc3QuZXRh dC5sdYIQYjJnLXRlc3QuZXRhdC5sdTCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFp AHYAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGFct2HqQAABAMA RzBFAiAJGo2ZrmItjQt1WN5S6JZPiWQxmPDZCATdovywUU201wIhAItJ2kzS4wUK lvD8Tw44DNqs4pAmIASDy/LVQNEIHgFqAHYA2ra/az+1tiKfm8K7XGvocJFxbLtR hIU0vaQ9MEjX+6sAAAGFct2HbAAABAMARzBFAiADnQzn8Pxp8MKsGZdIQaPqDEW6 8dYZKyPibj/p3Kb2owIhANwYhHUwAIDv5QrSTK9MeaP0vXQxc2QghE64R0d00jS5 AHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGFct2HQQAABAMA SDBGAiEAlm1n1Jm9etKnV7cGbLLP9HTEyZ+/Lur5OviR4oHKS/ACIQC80xmGss2z FonSZYJbZattMHpjkVjzACWtRkoJQNHfdTANBgkqhkiG9w0BAQwFAAOCAgEAeWsH mMJwLehHCMM/dtL99BPQ86U+hIBMacQb/LhK3J3b3YDpkBlGjlh2L5QzEa4ApMNQ jnzMMQ/IRe4ilTeMSF7cbVxHJr5S0W0rdoDTmFVJZMK1dfvwt6XXjAwNC81obtS0 bUg8rmW8hwW5H4mPqSiz+UCzfyz5IvTQdspT5SoSCAhntfdGqSJ47xLN3yn48Jpr nECw5qRJAhdY5aubyi015WLHR8Uoccoxs85PuFfaj3px2uAdVYHwsoMg8fAvSyl2 pKT3WvGOrg+eDkJ7A86RrHXf1AHcKDx8NwCUMr5pzmOHNZUOD9zCEcLRo/SjNBvM nsH4ErM8qrqaN+UPLFhw0ZwEsrSYejbuCHO5vEdsOVh1gXJi2uidTq2r884MDhF5 XlpqyeGAp6jxES+YB/Qs1vZ/Fv0tIzN5YM8Z9f2mDHgxBDXAWwqNCWwKaDni/WRC 6n5lPGzxJasBGcSr3oHJ6FGmzoHmD2XnZSItUEj2H5PBwBKcBrlINwefJy+hTjP5 3W4eR2lBnpdt++R+fTGTsokTQGcZ427lstyg1YO9iCRHpZ0a97mMrrdVGW6DQ/dY U4HMm0DEML1qCpj4JlBwV7D1BKu4UjcXqzR9jt3vDmQj0QXEDDH8GknOVolS020H iooqQipAICvlcG1MPUDT3B1tcA1hcC9n6uUeRqc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4XmvRp0FYinWn0zeEao5 TfdntuJhO+azdQ/Ta0azAjBz9c5155XU3EOdRC69YZEK9VG3wt0CaP9HKuIBWqtP cbvdLoZNB9zMBUqDNTlkaVsGVfELprTI0BXe57sA5V8MohFNWG4x6r1Ns87mEJJL JDdi1Ygbdc8JCV6cAWhXB1nbfKUDTOvJmei6ZveOa3uq3AdHW/KLeXII17wq+HCm O4WeY97/lg7jb7Q9xlEqAlAt/pjpwdrbohBfCzG16PpUdU+i3yt5hdgh62XuY+iu 5dv2+CU472oNqbY2kjcPVYzbFilLWw6HhA7d2hYjRFAO5PF1OL3G9K8DIqWykMkf pz9/UyveioAkX8W6fg3mEkcU9/SGdTIa2gqg5QCoj0+QLTty3fNpLtM1/Y4469A4 DMYnAvyCfInq6Y33PG1oUIONlUJrouIZR+Y/cui2Ki+KSgEiItCaCbYWAoKqr7Jj e8O8OnXhWoPRXcmkmeDO5Vr+/GUpkhk+X+pT9gyVkuwh7oVwvZYSG4qx9EwMNjxH QgE76CUEtldeFEdUhO919bfrKUdtryTwjGXvXAIIYZXu7MunqHjoPCJPOaOFeOvr /C4AlFV8QgDxuWCiqGOeMdS6LvPBWOs1slHhgCLU4iOz8UpDF28AtD11iLi59Zd1 hMFx5u3qN4HRVq9nUcSSqPMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 23928534700549191555252280874941378320 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centre des technologies de l’information de l’Etat' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.b2g-test.etat.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919859095566753853174064636077807072973898800696957795695725510660857321656026921702169732094416583992522326058123320070499771607764259035559602659728492257074523569525596697603087588632183166537915224473483035015595508092748468714895074045967832362491409504135879554419401878176440506707811657208141427444343187873724914403717294175846460159641654275432864067371044026535477498616473356050077299706495536336111977598139018287396624217188892224111744394982323738713032496823209055167552135325030388154027120790003283635992552479669499328597048111430533465319523388468757965202151956215049000965740867389063546687753251430360706698456723097941905279765810562083865589426154358375254206523413919252384634697256935240279746950558701449177653912011146441558109112718869757958287458507334868341122038778364021562293852356259007986277584946851745208114093769607010496154545193313047785072547209611439704960818037514883930396881503435971627099236663278850908189666635494552316358789599243714468332284457091516113548331236067731237727796414742560556953052456409623375326137934277085427182177465477596058632575818839249986128472727415616093986928461741410408326233689079019240518693207627050161838836468711493345805108464309573940317365905651 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b0424b703bc80e9b6cec6adb027f4d2d5400f948 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b2g-test.etat.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2g-test.etat.lu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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