*.public.lu
- Le Gouvernement du Grand-Duché de Luxembourg -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number b3:0c:72:59:b7:c0:a4:80:67:c2:12:df:93:80:5c:41 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Le Gouvernement du Grand-Duché de Luxembourg
Organization:
Le Gouvernement du Grand-Duché de Luxembourg
State / Province:
Luxembourg
Country: LU
Country: LU
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): b3:0c:72:59:b7:c0:a4:80:67:c2:12:df:93:80:5c:41Serial Number (int): 237996438110672286632713353075856792641
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 8d:17:a6:17:1b:69:79:31:0b:e2:52:64:fd:23:d4:95:f3:d1:4f:1e
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): 91:e8:df:85:4e:94:8c:0d:4a:c6:45:51:b5:7a:04:4a:94:72:ea:60
Fingerprint (sha256): 52:ac:f9:c8:07:c6:ba:b5:04:c2:17:36:ef:0a:98:80:80:86:70:90:ec:a1:56:75:11:f1:77:9a:07:80:09:e1
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate *.public.lu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.public.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.public.lu
public.lu
public.lu
Other certificates including the domain name public.lu
(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu
Certificate
The complete raw certificate details for *.public.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIajCCBlKgAwIBAgIRALMMclm3wKSAZ8IS35OAXEEwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDExOTAwMDAwMFoXDTI0MDExOTIz NTk1OVowcDELMAkGA1UEBhMCTFUxEzARBgNVBAgTCkx1eGVtYm91cmcxNjA0BgNV BAoMLUxlIEdvdXZlcm5lbWVudCBkdSBHcmFuZC1EdWNow6kgZGUgTHV4ZW1ib3Vy ZzEUMBIGA1UEAwwLKi5wdWJsaWMubHUwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAw ggIKAoICAQDpxEkb99cBvlB6HPq9BReRnS4Zdujt734i9Pic6DCo6Is+AxL7uMuN a15Ur8qT8SqcLedTso1QwaPcuDkOMUSirOOvui5t5PoiUFOGaSnVHZ45cWTnh51z ZTFWfHiJ1ahRO8gGpW7+f8A8crJZIq3W8C8I9ipEfsem2cMGPCf5yK7yL4/86itE uBHj+B7ZuwFn0aO+dQjNfffLZ7og47+x44kJP/6ZW+2GeZ9M/M0bqvvIG4vbksFr JpslHIkeEBCqVHKOXaE1Vb9sy/pLAnVYrK/F2LUkLU8a4dLJWE6RKJZVfH7BdgCz Tmq1oDTf/81Dd+rXlKGe2IOCWStru9M9l1/OMMvLQ/BE7YooSBv5T56XJitU5YN4 zaExAbdtGIsphVOJq8aO9k9ar2CUBpz0naODkvUgVSfyT5wqfay3hSNxPJdEkzx/ roZmxa3fhvWYgtMs79rY/xLkH82d5rS36ESLH9Y55XlFTNNK/qDjsluauHE6G4qW p6OoJDdE7Dxdl5L7Ou97x2kIKKV53zm0g7rbxkidh/HIoJbienVXE8oNI0Kn7p4n UWBhcL1dB2eGdLlg7Xs2Cfq9U9NK6xDGTBC4kuJ5VpOnOvCVJBPKbSBLq5XrgwA8 qOMJ5DIFBD0xvMVLPIy0voYIy76VsNyHZbGCvrdTAFjZjEE4Z2WD9QIDAQABo4ID KTCCAyUwHwYDVR0jBBgwFoAUbx01SRBsMvpZoJ68iugflb5xegwwHQYDVR0OBBYE FI0XphcbaXkxC+JSZP0j1JXz0U8eMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8E AjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQG CysGAQQBsjEBAgJPMCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20v Q1BTMAgGBmeBDAECAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vR0VBTlQuY3Js LnNlY3RpZ28uY29tL0dFQU5UT1ZSU0FDQTQuY3JsMHUGCCsGAQUFBwEBBGkwZzA6 BggrBgEFBQcwAoYuaHR0cDovL0dFQU5ULmNydC5zZWN0aWdvLmNvbS9HRUFOVE9W UlNBQ0E0LmNydDApBggrBgEFBQcwAYYdaHR0cDovL0dFQU5ULm9jc3Auc2VjdGln by5jb20wggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3AHb/iD8KtvuVUcJhzPWH ujS0pM27KdxoQgqf5mdMWjp0AAABhcpUaXIAAAQDAEgwRgIhAJ7JrbnXqh/Zlu0J ukA8m+kC33bRvos15MMTAM/mJYq3AiEA4jGQ27jf9V/NwK8XxuoxZuqZpc9w1uLW WCMfGjpTKx4AdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYXK VGk/AAAEAwBHMEUCIQCWkZqMMbWN9Bv4aMk/QtccAjXo8EPdr/3VItGlhUsxhgIg aYn+xblSGb2jVccICIgUvKmrLpGUuFPJOmxe2JVMRK0AdQDuzdBk1dsazsVct520 zROiModGfLzs3sNRSFlGcR+1mwAAAYXKVGkeAAAEAwBGMEQCIC2pCxu0O/9btbAN kNiGUpQMonE6enntgCIrNvKTAeO6AiAJaFv3tQKL9r3sD+HpiykwWnoS091H9Zfn zYUhVWc+kDAhBgNVHREEGjAYggsqLnB1YmxpYy5sdYIJcHVibGljLmx1MA0GCSqG SIb3DQEBDAUAA4ICAQBBvYL5pTD2bP9/V0BBlV8QjWB2LOBQv9tXDKSMD+Mpr3pT 6HaS8J4yK6NephSKG2udFnVcIAxBfF2HK4QY43kwlh5HUZ6fSrgvYWCJtnZQ74VJ OaNuhKXdShb0s68KHig/dwAMcsBbEfyL0ve2mT1oOIVQ44ruJKVWo+Y/PXdf0uRb 9DtL9UpibWoMuXHzTBIul16GEK+12fjiRZDt/A0pCJ8Vlq/lSmxKJVTRrbQ79nSK hPjcnJ62vaay3PqcpWBh2DWbXh+UNdCrdfJWorI4S2bvutDlcUnu8YBMehRFtFAo /fuvJadjwoPVTy/rIGJ04/MT+agubBNpTBRUBdcdPCUkUFyxTRSbfk1AfaK0uo1Y cbqJ5YfWNhhEzDePATKD86XsyGvb8v1Z9nvsiFESqmoixpEgQ9rn/KX6WlLMld7G 0TPGt98ZBNFlyu+A4Dwi0PEYWdItPohYbAoh4K7wPoW7hki7kbhheCj8ys6VsEO7 pjUrLWgVjXIiilQYYc9A8gxyApMM/UM2xmxkIKlMQ28XhK8tuYeThOAAFpq4DO3H ZqB6yptEvDeB88a9g9HMX/XUDQ/ULf0nbWB3u3nrPdF84EDTVdUSHOYinB0RtuwV ibOispNldh+KxD9fLpW8DAK23kC+saIqhnaIHZP7yrjVR2oivcOVYzsvJ6tmzw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6cRJG/fXAb5Qehz6vQUX kZ0uGXbo7e9+IvT4nOgwqOiLPgMS+7jLjWteVK/Kk/EqnC3nU7KNUMGj3Lg5DjFE oqzjr7oubeT6IlBThmkp1R2eOXFk54edc2UxVnx4idWoUTvIBqVu/n/APHKyWSKt 1vAvCPYqRH7HptnDBjwn+ciu8i+P/OorRLgR4/ge2bsBZ9GjvnUIzX33y2e6IOO/ seOJCT/+mVvthnmfTPzNG6r7yBuL25LBayabJRyJHhAQqlRyjl2hNVW/bMv6SwJ1 WKyvxdi1JC1PGuHSyVhOkSiWVXx+wXYAs05qtaA03//NQ3fq15ShntiDglkra7vT PZdfzjDLy0PwRO2KKEgb+U+elyYrVOWDeM2hMQG3bRiLKYVTiavGjvZPWq9glAac 9J2jg5L1IFUn8k+cKn2st4UjcTyXRJM8f66GZsWt34b1mILTLO/a2P8S5B/Nnea0 t+hEix/WOeV5RUzTSv6g47JbmrhxOhuKlqejqCQ3ROw8XZeS+zrve8dpCCiled85 tIO628ZInYfxyKCW4np1VxPKDSNCp+6eJ1FgYXC9XQdnhnS5YO17Ngn6vVPTSusQ xkwQuJLieVaTpzrwlSQTym0gS6uV64MAPKjjCeQyBQQ9MbzFSzyMtL6GCMu+lbDc h2Wxgr63UwBY2YxBOGdlg/UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 237996438110672286632713353075856792641 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.public.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 953685096420421790375009695165192162287447743826677998158931648094915281601340607656577558779670916982600014027319556666309254647609316131503788973581417192059096374380770514732024641503558993486377399777214871725844949465820351686802219769174663834457590849619384835929279771859024879750690711006965165390558126790547410910864920495722756323129254960058073594810035776997823516955448590575211648566320008136620464245177192980307147849609703469811835814784075555188520523841610746373883139149741274507572224689977193910701651030310541344752838749539525104373726901511508502893449043252219409069264319916768395303343202956570122159934441538796919490735178001500543560406906870997995765845773696274355804509513319621357752055910558158362240320128381018381315157475498869897802746026911656383452518137779333090565487343986331755846755570321224924231310876593059722109054462854969190192756482912041140589729505066128272447574690291653766458887028481018237933798376262678262652982320150376137283334162750492255029111387435780205679292825075461388734579713190890461522994937922109697578500189329235626793003985268970187135741454752086177440708460301203106679018363105114079492333857521248093759664037895840833938042529753112323115503158261 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8d17a6171b6979310be25264fd23d495f3d14f1e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 016800770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185ca54697200000403004830460221009ec9adb9d7aa1fd996ed09ba403c9be902df76d1be8b35e4c31300cfe6258ab7022100e23190dbb8dff55fcdc0af17c6ea3166ea99a5cf70d6e2d658231f1a3a532b1e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000185ca54693f000004030047304502210096919a8c31b58df41bf868c93f42d71c0235e8f043ddaffdd522d1a5854b318602206989fec5b95219bda355c708088814bca9ab2e9194b853c93a6c5ed8954c44ad007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185ca54691e000004030046304402202da90b1bb43bff5bb5b00d90d88652940ca2713a7a79ed80222b36f29301e3ba022009685bf7b5028bf6bdec0fe1e98b29305a7a12d3dd47f597e7cd852155673e90 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.public.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.lu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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