*.public.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number b3:0c:72:59:b7:c0:a4:80:67:c2:12:df:93:80:5c:41 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): b3:0c:72:59:b7:c0:a4:80:67:c2:12:df:93:80:5c:41
Serial Number (int): 237996438110672286632713353075856792641
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8d:17:a6:17:1b:69:79:31:0b:e2:52:64:fd:23:d4:95:f3:d1:4f:1e
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 91:e8:df:85:4e:94:8c:0d:4a:c6:45:51:b5:7a:04:4a:94:72:ea:60
Fingerprint (sha256): 52:ac:f9:c8:07:c6:ba:b5:04:c2:17:36:ef:0a:98:80:80:86:70:90:ec:a1:56:75:11:f1:77:9a:07:80:09:e1

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.public.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.public.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.public.lu
public.lu

Other certificates including the domain name public.lu

(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu

Certificate

The complete raw certificate details for *.public.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 237996438110672286632713353075856792641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.public.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 953685096420421790375009695165192162287447743826677998158931648094915281601340607656577558779670916982600014027319556666309254647609316131503788973581417192059096374380770514732024641503558993486377399777214871725844949465820351686802219769174663834457590849619384835929279771859024879750690711006965165390558126790547410910864920495722756323129254960058073594810035776997823516955448590575211648566320008136620464245177192980307147849609703469811835814784075555188520523841610746373883139149741274507572224689977193910701651030310541344752838749539525104373726901511508502893449043252219409069264319916768395303343202956570122159934441538796919490735178001500543560406906870997995765845773696274355804509513319621357752055910558158362240320128381018381315157475498869897802746026911656383452518137779333090565487343986331755846755570321224924231310876593059722109054462854969190192756482912041140589729505066128272447574690291653766458887028481018237933798376262678262652982320150376137283334162750492255029111387435780205679292825075461388734579713190890461522994937922109697578500189329235626793003985268970187135741454752086177440708460301203106679018363105114079492333857521248093759664037895840833938042529753112323115503158261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d17a6171b6979310be25264fd23d495f3d14f1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.public.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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