www.meteolux.lu

- Administration de la navigation aérienne -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 79:98:95:54:0e:a5:ee:82:a4:45:b9:c6:37:be:e8:ca was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Administration de la navigation aérienne

Organization: Administration de la navigation aérienne
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 79:98:95:54:0e:a5:ee:82:a4:45:b9:c6:37:be:e8:ca
Serial Number (int): 161628845351202098948866784524475754698
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b9:d6:29:e9:73:7b:ba:b9:34:d3:f7:82:51:06:b2:39:5d:9d:e5:b0
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 25:57:50:9d:24:1f:b0:da:e0:4a:b8:57:86:ae:b8:14:0c:ed:60:29
Fingerprint (sha256): 6e:4b:79:1d:cf:a2:7f:97:b1:9b:85:1e:3e:be:a5:29:35:74:c6:0d:73:fb:66:97:55:c3:30:2c:b2:90:4b:9e

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.meteolux.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.meteolux.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.meteolux.lu
meteolux.lu

Other certificates including the domain name meteolux.lu

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.meteolux.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 161628845351202098948866784524475754698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Administration de la navigation aérienne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.meteolux.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 729715990210285219967639909533886927273259164940429776720425084644661783618773972629313491480295885365694044006762663671564659526851087247891337911225255438789766069332744150921073034186070558422980503059405180824804250711791026719587413798261071751041028709846037473416086454422503032435882310013287998449865375332472402250482992853452751431112558035466649103305893624468293460855011187521046074791223499017939630898444288817441527484695729654514501148377619646934300851546297773213075384214145969782030671319665742185706124916259500575847679682945600590820378930198588533926101401519053501963578404126091582878123814595643014030349312943691905997964570069023276341410702163927247360967168701225781084422370480472999028703375252587493401187339869585326265282822050374297960449484130340907230856361979610016368835182730749498546810131129949526508924483503894509280858706167839985868524819742029755770827354554373146871853339252071546891669851692505956948881951729926289104801303354297350331911685369677758812927836016709855220232757662166416741221059347714913459276951628674011506875348790526785827871590784592400186573133475384501175071769796596171613078310209017921921186521941097821190826533155550593312304962181235166068829721321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9d629e9737bbab934d3f7825106b2395d9de5b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meteolux.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteolux.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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