*.b2g-test.etat.lu

- Centre des technologies de l’information de l’Etat -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 12:00:77:d8:b6:38:a8:ae:ac:5e:bb:b1:a2:ad:6f:10 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centre des technologies de l’information de l’Etat

Organization: Centre des technologies de l’information de l’Etat
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 12:00:77:d8:b6:38:a8:ae:ac:5e:bb:b1:a2:ad:6f:10
Serial Number (int): 23928534700549191555252280874941378320
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: b0:42:4b:70:3b:c8:0e:9b:6c:ec:6a:db:02:7f:4d:2d:54:00:f9:48
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ac:37:86:2d:e3:3f:63:f0:24:85:26:35:48:6d:4f:56:49:14:0a:aa
Fingerprint (sha256): 3e:75:c6:6d:dc:57:22:03:96:20:2b:d5:b4:3c:ce:24:33:d8:e7:c7:74:8e:f0:69:fd:99:5e:51:69:f8:06:c5

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.b2g-test.etat.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.b2g-test.etat.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.b2g-test.etat.lu
b2g-test.etat.lu

Other certificates including the domain name etat.lu

(limited to 100 certificates)
vpn.etat.lu
mvpn.etat.lu
barista.gouv.etat.lu
govcert.etat.lu
*.mobileapps.etat.lu
atlantis-tst-mn.ctie.etat.lu
*.police.etat.lu
pcut.gouv.etat.lu
atlantis-tst-ex.ctie.etat.lu
ecodex-gw-prd.ctie.etat.lu
*.luxdrops.eau.etat.lu
auth-4.portal.ctie.etat.lu
apollo.pch.etat.lu
asta.etat.lu
otx.etat.lu
cmss.govcert.etat.lu
atlantis-prd-ex.ctie.etat.lu
patent-mypage.public.lu
maven-prd.ctie.etat.lu
gaea.aev.etat.lu
ctie.etat.lu
scl.etat.lu
ecomobile.etat.lu
www.aev.etat.lu
extranet.eau.etat.lu
police.etat.lu
scl-casem-ce-prd.ctie.etat.lu
*.intranet.etat.lu
ecomobile.etat.lu
scl-casem-ce-tst.ctie.etat.lu
*.police.etat.lu
cs.swl.etat.lu
vpn.etat.lu
libri-europae.org
wsus.etat.lu
*.mail.etat.lu
www.aev.etat.lu
vpn.etat.lu
vpn.etat.lu
atlantis-prd-mn.ctie.etat.lu
saturn.etat.lu
atlantis-tst-ex.ctie.etat.lu
www.govcert.etat.lu
an.etat.lu
bnl.lu
eidasmw-test.public.lu
*.eau.etat.lu
mvpn.etat.lu
artifactory.ctie.etat.lu
atlantis-prd-gw.ctie.etat.lu
*.b2g-test.etat.lu
www.aev.etat.lu
baristacortosql.gouv.etat.lu
atlantis-tst-mn.ctie.etat.lu
ctie.etat.lu
auth.wireless.etat.lu
artifactory-test.ctie.etat.lu
luxtrust.ecomail1.etat.lu
mvpn.etat.lu
webmail.en.etat.lu
*.api.etat.lu
asta.etat.lu
*.b2g.etat.lu
www.govcert.etat.lu
baristacorto.gouv.etat.lu
iam.cie.etat.lu
cyber-range.etat.lu
govcert.etat.lu
apic-em.ctie.etat.lu
*.api-stg.etat.lu
mvpn.etat.lu
ecomobile.etat.lu
cyber-range.etat.lu
goaml-trn-int.gouv.etat.lu
bpm-ari9-bs-prd.gouv.etat.lu
*.luxdrops.eau.etat.lu
proxy-1.ctie.etat.lu
pmgr.police.etat.lu
*.extranet.etat.lu
www.govcert.etat.lu
acf-test-intf.gouv.etat.lu
atlantis-prd-gw.ctie.etat.lu
barista-sql.gouv.etat.lu
interflex.mesr.etat.lu
otx.etat.lu
pmgr.police.etat.lu
cmss.govcert.etat.lu
ctie.etat.lu
webmail.airport.etat.lu
govcert.etat.lu
*.msp.etat.lu
sailor.etat.lu
logon.etat.lu
*.mspapps.etat.lu
www.labolait.etat.lu
*.extranet.etat.lu
mvpn.etat.lu
*.pch.etat.lu
*.b2g-test.etat.lu
scl-casem-ce-prd.ctie.etat.lu

Certificate

The complete raw certificate details for *.b2g-test.etat.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23928534700549191555252280874941378320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Centre des technologies de l’information de l’Etat'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.b2g-test.etat.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919859095566753853174064636077807072973898800696957795695725510660857321656026921702169732094416583992522326058123320070499771607764259035559602659728492257074523569525596697603087588632183166537915224473483035015595508092748468714895074045967832362491409504135879554419401878176440506707811657208141427444343187873724914403717294175846460159641654275432864067371044026535477498616473356050077299706495536336111977598139018287396624217188892224111744394982323738713032496823209055167552135325030388154027120790003283635992552479669499328597048111430533465319523388468757965202151956215049000965740867389063546687753251430360706698456723097941905279765810562083865589426154358375254206523413919252384634697256935240279746950558701449177653912011146441558109112718869757958287458507334868341122038778364021562293852356259007986277584946851745208114093769607010496154545193313047785072547209611439704960818037514883930396881503435971627099236663278850908189666635494552316358789599243714468332284457091516113548331236067731237727796414742560556953052456409623375326137934277085427182177465477596058632575818839249986128472727415616093986928461741410408326233689079019240518693207627050161838836468711493345805108464309573940317365905651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0424b703bc80e9b6cec6adb027f4d2d5400f948
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b2g-test.etat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2g-test.etat.lu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00796b0798c2702de84708c33f76d2fdf413d0f3a53e84804c69c41bfcb84adc9ddbdd80e99019468e58762f943311ae00a4c3508e7ccc310fc845ee2295378c485edc6d5c4726be52d16d2b7680d398554964c2b575fbf0b7a5d78c0c0d0bcd686ed4b46d483cae65bc8705b91f898fa928b3f940b37f2cf922f4d076ca53e52a12080867b5f746a92278ef12cddf29f8f09a6b9c40b0e6a449021758e5ab9bca2d35e562c747c52871ca31b3ce4fb857da8f7a71dae01d5581f0b28320f1f02f4b2976a4a4f75af18eae0f9e0e427b03ce91ac75dfd401dc283c7c37009432be69ce638735950e0fdcc211c2d1a3f4a3341bcc9ec1f812b33caaba9a37e50f2c5870d19c04b2b4987a36ee0873b9bc476c395875817262dae89d4eadabf3ce0c0e11795e5a6ac9e180a7a8f1112f9807f42cd6f67f16fd2d23337960cf19f5fda60c78310435c05b0a8d096c0a6839e2fd6442ea7e653c6cf125ab0119c4abde81c9e851a6ce81e60f65e765222d5048f61f93c1c0129c06b94837079f272fa14e33f9dd6e1e4769419e976dfbe47e7d3193b28913406719e36ee5b2dca0d583bd882447a59d1af7b98caeb755196e8343f7585381cc9b40c430bd6a0a98f826507057b0f504abb8523717ab347d8eddef0e6423d105c40c31fc1a49ce568952d36d078a8a2a422a40202be5706d4c3d40d3dc1d6d700d61702f67eae51e46a7