www.data.public.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b2:80:16:70:e4:43:c6:c9:86:e5:ad:b8:ee:b8:83:49 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b2:80:16:70:e4:43:c6:c9:86:e5:ad:b8:ee:b8:83:49
Serial Number (int): 237267652404817484262945086786359558985
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3d:5d:d8:f6:11:6d:83:16:19:77:77:fa:c9:6a:74:b5:44:3a:ac:4a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): e7:03:e2:dd:2c:6c:97:f6:89:65:1a:c0:0a:bd:67:60:54:3a:31:27
Fingerprint (sha256): 4f:78:b5:4e:fc:31:44:ef:36:21:a1:cf:b6:08:01:47:8b:6c:d4:0a:eb:4b:9c:69:66:4a:ce:04:60:b0:22:44

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.data.public.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.data.public.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.data.public.lu
data.public.lu

Other certificates including the domain name public.lu

(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu

Certificate

The complete raw certificate details for www.data.public.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 237267652404817484262945086786359558985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.data.public.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767255528841080368778819824367723201827438618897353755711174289954853460424766858469063589899484185563077924766129106597361558916156833781378347534374405810250726628433397109965039622447588725419130156912082292478457928249097062449634539285688735159138646583646014566826800650996732689420564558692878287131657438227809375384512678378922104159920710070372433780456233217153570544409655969192091573812767020779381293275746488064574615212398137454527929780245630641604704802314840369729696610335041689734464716166365790025763002617161425766108617945575125512304400826743105500109760658015963607188428683254822341335120657636159457349082138772938272986270502366484833892949973325075476797032932938734465966362793033887169726561069918989202175102433032605295282999027715147422549802190189067165800150832355030355485409365735468113315361097523978391036250001562202856627368691330396916213942680913690551402806944890329536777433957873611903426673433763576969264102792373513241501770437597873779586821716985631129458644404849791983113024506460542854003579412971503322593255353615955133664635647237513190904712659185317562311143815759946665240183681739698174904600305807657666257747807011696960074733941437490033636894571465856921649106494661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d5dd8f6116d8316197777fac96a74b5443aac4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.data.public.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.public.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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