eshop.cna.public.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d1:3c:c3:c6:ff:42:b4:ee:4a:07:19:2d:43:02:24:a8 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d1:3c:c3:c6:ff:42:b4:ee:4a:07:19:2d:43:02:24:a8
Serial Number (int): 278124159766607718024842842709241767080
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: d5:a5:75:ae:5e:fc:62:7e:7a:24:19:ed:ff:dc:75:90:2a:9c:72:ae
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): ec:08:3e:8f:a5:ac:86:25:88:f6:ae:4c:ae:04:ac:57:62:c1:c4:3e
Fingerprint (sha256): 6f:e2:94:9f:4c:11:ca:87:14:34:65:ab:b1:13:59:f7:7d:f6:68:e2:4c:41:e0:9d:3f:91:34:fa:9b:e1:ea:0d

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate eshop.cna.public.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eshop.cna.public.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eshop.cna.public.lu
eshop.cna.etat.lu

Other certificates including the domain name public.lu

(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu

Certificate

The complete raw certificate details for eshop.cna.public.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278124159766607718024842842709241767080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eshop.cna.public.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718979303561869679891686202115079449714181285375640309017159106010254512579629405004031163472888948462629084313193415273507393209306769129043825076158408042640123591063628904478980035489694818994095513037251402982779100484854169886460054904885022535338281595276431754392081592562203826584283056825230182172687253445985478860841132424513807354841053909377640904043645466221920586129188265561380833476902774893305989634302988373733307657910725521641133691295654399173192254360217684451741203682481594637337815934789586200588830228558544331257131485088610705485585380832118048913847244301810817381509963942239607504549141069528198446689574927332276343043730014041117538204465870534591459486128625432854573976728387660349919609723300131873639248822692609015290409652116752035605280943176927745225743821886142296234320631027394708124023397400164998376166940771327709984982797642481737296965556995712640541024527466041447817525695808356430830230908561905368697173680141711277596861961497533466388347781566897453788849222187406961437634894052611011002837580474496595101711742098142502053727483880667920789348574782018287621929900967176854337065488198772191950514344236921274819124277631213653120502966955154830432087084028019920434063646271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5a575ae5efc627e7a2419edffdc75902a9c72ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a74000001884c885d7a0000040300473045022100f6f809414b17ed3a5c63b0c46208d598d4064464bdc31f95ebb076aed286fb72022049adea888cfc7d278b58fe84b59dcd37e8006d5e1584b511936fa59c808424f2007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001884c885dcf0000040300473045022018b0d3fde03c477ff3c164a246b36fb29448b98a46370aca227756bc4af56ea5022100fb01074fefedbd7a8333e1c21b645cee8cd0578a92f803eec650675f64321a33007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001884c885da6000004030047304502206330f8b6ff4e008e8e1995310223389e68f810a3b2a67121779c0d6acf625d19022100e793497ab2942902ab7dd515b9ebe2d35f718df0539236aff5d3a7f2140a7dea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.cna.public.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.cna.etat.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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