eshop.cna.public.lu
- Le Gouvernement du Grand-Duché de Luxembourg -
Issued by GEANT OV RSA CA 4
About this certificate
This digital certificate with serial number d1:3c:c3:c6:ff:42:b4:ee:4a:07:19:2d:43:02:24:a8 was issued on by GEANT Vereniging.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Le Gouvernement du Grand-Duché de Luxembourg
Organization:
Le Gouvernement du Grand-Duché de Luxembourg
State / Province:
Luxembourg
Country: LU
Country: LU
GEANT Vereniging
Organization:
GEANT Vereniging
Country:
NL
This certificate has expire since
Certificate Details
Serial Number (hex): d1:3c:c3:c6:ff:42:b4:ee:4a:07:19:2d:43:02:24:a8Serial Number (int): 278124159766607718024842842709241767080
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: d5:a5:75:ae:5e:fc:62:7e:7a:24:19:ed:ff:dc:75:90:2a:9c:72:ae
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c
Fingerprint (sha1): ec:08:3e:8f:a5:ac:86:25:88:f6:ae:4c:ae:04:ac:57:62:c1:c4:3e
Fingerprint (sha256): 6f:e2:94:9f:4c:11:ca:87:14:34:65:ab:b1:13:59:f7:7d:f6:68:e2:4c:41:e0:9d:3f:91:34:fa:9b:e1:ea:0d
Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt
Revocation information
OCSP Server: http://GEANT.ocsp.sectigo.comCRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl
Check the revocation status for certificate eshop.cna.public.lu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for eshop.cna.public.lu
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA384 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
eshop.cna.public.lu
eshop.cna.etat.lu
eshop.cna.etat.lu
Other certificates including the domain name public.lu
(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu
Certificate
The complete raw certificate details for eshop.cna.public.lu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIgjCCBmqgAwIBAgIRANE8w8b/QrTuSgcZLUMCJKgwDQYJKoZIhvcNAQEMBQAw RDELMAkGA1UEBhMCTkwxGTAXBgNVBAoTEEdFQU5UIFZlcmVuaWdpbmcxGjAYBgNV BAMTEUdFQU5UIE9WIFJTQSBDQSA0MB4XDTIzMDUyNDAwMDAwMFoXDTI0MDUyMzIz NTk1OVoweDELMAkGA1UEBhMCTFUxEzARBgNVBAgTCkx1eGVtYm91cmcxNjA0BgNV BAoMLUxlIEdvdXZlcm5lbWVudCBkdSBHcmFuZC1EdWNow6kgZGUgTHV4ZW1ib3Vy ZzEcMBoGA1UEAxMTZXNob3AuY25hLnB1YmxpYy5sdTCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBALA8XN31JUGhfeYLBt20wU3d7+fUGms/jWV7XU8i9hOh h/Y3EiooKC3KszBb3VrvutxN2M98Hq8Ei/gr5Pf2CTwQQvjfQcSMyRCX7l6oMUrd G6ugaT21Z3N6eQ9HG+fYKMbqLuLYliK3eOL6ZavFXnSHCAEsFl1Fcv1fJcnxTv1M eR80kT8GwGzW1PXQ2pn4ljMAWrQ1jBDntDHfjI2URnAjsmiQLERuZswDUEtu6q/Y MLz+Vyh1M+Tm9GQG00+XsKb+1AmtUZt3bb93B0aWB4gMqvoORIvEzieoatDYrU58 b7mhZvTT5ZaD6M62IzDTEON/3zIRcsVpVmaL7GI813jlY9l36MomqLV61CcnV3zx /504eDeVeOSci6uVaCYenSAnjEWnLd+UdXX1tRERXl6XsssZILe7gaHW7ypBWVBz 6fUD1nUmSsFPKnVQRLmpA+9G4lJeOtSItj4hS5j5mrRRyf/SQXKwA/aVLt5k0ZFb 8n5FrKKAZsiQI/wFJoTpDJ6J/L3BGK4CZqK/7i/HDwOPuJ62MjeyD+uu5edDld58 DZkIX65ErrxosO42V+5MdA4qwI+DPVaJ8sxwhmNvthGCHX8wm2lqSALlc8+K9O9u D2qnVdgKz/pH3OkAlWLif5ZWiLPr2fPc4ugV5GrCnhcuvDk2HzFcA9sn0tOOkp4/ AgMBAAGjggM5MIIDNTAfBgNVHSMEGDAWgBRvHTVJEGwy+lmgnryK6B+VvnF6DDAd BgNVHQ4EFgQU1aV1rl78Yn56JBnt/9x1kCqccq4wDgYDVR0PAQH/BAQDAgWgMAwG A1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1Ud IARCMEAwNAYLKwYBBAGyMQECAk8wJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0 aWdvLmNvbS9DUFMwCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9H RUFOVC5jcmwuc2VjdGlnby5jb20vR0VBTlRPVlJTQUNBNC5jcmwwdQYIKwYBBQUH AQEEaTBnMDoGCCsGAQUFBzAChi5odHRwOi8vR0VBTlQuY3J0LnNlY3RpZ28uY29t L0dFQU5UT1ZSU0FDQTQuY3J0MCkGCCsGAQUFBzABhh1odHRwOi8vR0VBTlQub2Nz cC5zZWN0aWdvLmNvbTCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYAdv+IPwq2 +5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGITIhdegAABAMARzBFAiEA9vgJ QUsX7TpcY7DEYgjVmNQGRGS9wx+V67B2rtKG+3ICIEmt6oiM/H0ni1j+hLWdzTfo AG1eFYS1EZNvpZyAhCTyAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX +6sAAAGITIhdzwAABAMARzBFAiAYsNP94DxHf/PBZKJGs2+ylEi5ikY3Csoid1a8 SvVupQIhAPsBB0/v7b16gzPhwhtkXO6M0FeKkvgD7sZQZ19kMhozAHYA7s3QZNXb Gs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGITIhdpgAABAMARzBFAiBjMPi2 /04Ajo4ZlTECIzieaPgQo7KmcSF3nA1qz2JdGQIhAOeTSXqylCkCq33VFbnr4tNf cY3wU5I2r/XTp/IUCn3qMDEGA1UdEQQqMCiCE2VzaG9wLmNuYS5wdWJsaWMubHWC EWVzaG9wLmNuYS5ldGF0Lmx1MA0GCSqGSIb3DQEBDAUAA4ICAQAdpfUDatqkEsaU 6eNS824SO/pfgM3drabWWTOnuaEnkGTXZoRFYCf/GNnEGUKDZrDuKzi40pDU7wJ4 e2EIjf5mBWRpk5udPUztP+ye45lLfRBxtvPH/yoFFNMre9wEQjB0LSE3LYlHycK1 NXC78ftNA8OzvjpPjyKBM0M912A3nlleA2NONLXNiDdIbis84aE+9ezaw5Ehz729 8S8aPMsizif+iin1O+K/S7koHeNcjCBXLqRsAo3gvhYu9RM9QOTIJOg+OjV7QBY/ IMs36iMqMonrEDS+rLtxbZc0DImtFeGi0jnlMZwaZng5xmFWlAtEMWHRgaeMa/rT gi0dhx9yxg6oaPkOMc6eWDMj0GAi15yEf9Cjr8PxGzy5FeXuLZzYrzSZn9bWvdQk 1YVN+4jgB6R+fyF0wTtg0IJ/3J7X4823ZLLPtdJ+A6D8f4y+cvyl6buFW1BEsktx ikBLIXW8jZPAv84H/un/3db/afPV6YENxhML4dAYLg/rTwg/btzpsMAU6tTwgDVb ogB9eNJ3dGJHpM/fBf/Rft/hEl6es5zSa7IAe6Gt20faSN7XjVlUE2OMPYn9VqOj qWkOUfjiuP9c32ATMUAuwAhrgyY/JGx8MUVqlkdbyjlhoK5wG9ZlEi9ysG4OCVF1 Fd7SNnjG1MCQqlTZpd+w9CR6Bu5fvw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsDxc3fUlQaF95gsG3bTB Td3v59Qaaz+NZXtdTyL2E6GH9jcSKigoLcqzMFvdWu+63E3Yz3werwSL+Cvk9/YJ PBBC+N9BxIzJEJfuXqgxSt0bq6BpPbVnc3p5D0cb59goxuou4tiWIrd44vplq8Ve dIcIASwWXUVy/V8lyfFO/Ux5HzSRPwbAbNbU9dDamfiWMwBatDWMEOe0Md+MjZRG cCOyaJAsRG5mzANQS27qr9gwvP5XKHUz5Ob0ZAbTT5ewpv7UCa1Rm3dtv3cHRpYH iAyq+g5Ei8TOJ6hq0NitTnxvuaFm9NPlloPozrYjMNMQ43/fMhFyxWlWZovsYjzX eOVj2XfoyiaotXrUJydXfPH/nTh4N5V45JyLq5VoJh6dICeMRact35R1dfW1ERFe Xpeyyxkgt7uBodbvKkFZUHPp9QPWdSZKwU8qdVBEuakD70biUl461Ii2PiFLmPma tFHJ/9JBcrAD9pUu3mTRkVvyfkWsooBmyJAj/AUmhOkMnon8vcEYrgJmor/uL8cP A4+4nrYyN7IP667l50OV3nwNmQhfrkSuvGiw7jZX7kx0DirAj4M9VonyzHCGY2+2 EYIdfzCbaWpIAuVzz4r0724PaqdV2ArP+kfc6QCVYuJ/llaIs+vZ89zi6BXkasKe Fy68OTYfMVwD2yfS046Snj8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 278124159766607718024842842709241767080 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eshop.cna.public.lu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718979303561869679891686202115079449714181285375640309017159106010254512579629405004031163472888948462629084313193415273507393209306769129043825076158408042640123591063628904478980035489694818994095513037251402982779100484854169886460054904885022535338281595276431754392081592562203826584283056825230182172687253445985478860841132424513807354841053909377640904043645466221920586129188265561380833476902774893305989634302988373733307657910725521641133691295654399173192254360217684451741203682481594637337815934789586200588830228558544331257131485088610705485585380832118048913847244301810817381509963942239607504549141069528198446689574927332276343043730014041117538204465870534591459486128625432854573976728387660349919609723300131873639248822692609015290409652116752035605280943176927745225743821886142296234320631027394708124023397400164998376166940771327709984982797642481737296965556995712640541024527466041447817525695808356430830230908561905368697173680141711277596861961497533466388347781566897453788849222187406961437634894052611011002837580474496595101711742098142502053727483880667920789348574782018287621929900967176854337065488198772191950514344236921274819124277631213653120502966955154830432087084028019920434063646271 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d5a575ae5efc627e7a2419edffdc75902a9c72ae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.cna.public.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eshop.cna.etat.lu' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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