www.meteolux.lu

- Administration de la navigation aérienne -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d1:1e:03:60:33:3d:ec:1a:ce:70:68:c2:14:c0:aa:82 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Administration de la navigation aérienne

Organization: Administration de la navigation aérienne
Locality: Findel
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): d1:1e:03:60:33:3d:ec:1a:ce:70:68:c2:14:c0:aa:82
Serial Number (int): 277964488493794469539005170099767257730
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5f:aa:b6:7d:5d:4e:f5:a7:e6:9d:4f:92:d9:c9:09:ac:1e:0e:17:49
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): f1:e2:64:2c:2a:87:5e:58:9e:99:fd:66:15:17:93:81:5d:11:8f:ce
Fingerprint (sha256): 8b:4b:86:d1:c3:d9:fa:e3:b3:3e:43:1d:fb:82:aa:93:fc:6f:72:95:d4:42:e6:6a:69:78:4a:21:3d:6a:43:a7

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.meteolux.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.meteolux.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.meteolux.lu
meteolux.lu

Other certificates including the domain name meteolux.lu

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.meteolux.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277964488493794469539005170099767257730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Findel'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Administration de la navigation aérienne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.meteolux.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 934980326080059683059449442907786183028600576172504305591660269118567783131668617976933731730323404023754130349744454749582959640226029345302815965213430817892039754872197756895594076093298949227919068937558835504811110454976413659088390858636411721776048357833770167300707588160558986833215774352716758295040944208521722424844580655439101428440666665218493714525450167943664391294233786316895352461718546431539260251679122766251036994967465420649998834923180376400000729530994660369456557682934243025660100013480084298467964535783952441748463737826277584457390524465632686540860651845799780472208683309174499205596873384308715222109197006530868609640435105730474889502256865410736302127305312284383394160292466430428332537191361454524529488836353833648093569170779531600337339901431068661967927888231323850593848400632132648015470438384694549286223741308077725841159943061282865082126551286789742997853554982291029784686640700326701708794824141051517452374754665465653947033598136199279430969928344065645618026724065582137684276748537902128894400947582830462357984665748748352168618879385079166807372372694875475940459400623161824696490560281488123524049475487409771714703337807848049648841992561287085125506674687934156477106316141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5faab67d5d4ef5a7e69d4f92d9c909ac1e0e1749
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meteolux.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meteolux.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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