legilux.public.lu

- Le Gouvernement du Grand-Duché de Luxembourg -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 51:2b:2f:13:24:21:6b:90:3b:7c:e0:24:96:ad:aa:2b was issued on by GEANT Vereniging.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Le Gouvernement du Grand-Duché de Luxembourg

Organization: Le Gouvernement du Grand-Duché de Luxembourg
Locality: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 51:2b:2f:13:24:21:6b:90:3b:7c:e0:24:96:ad:aa:2b
Serial Number (int): 107891691213263505552214589319181871659
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 57:99:78:42:4b:49:c7:d5:bc:6a:22:40:d6:83:be:83:e2:b0:54:21
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 70:53:ba:f2:f8:c5:f8:3c:d3:b1:cd:8a:7e:50:a8:a7:e4:d8:37:5d
Fingerprint (sha256): 8d:17:2f:d8:4e:25:79:07:c5:e1:e3:03:11:a3:1d:14:d0:05:ce:92:ce:ac:6f:dc:ca:d0:9b:41:95:ed:f0:b2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate legilux.public.lu

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for legilux.public.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

legilux.public.lu
*.eli.lu
*.gesetze.lu
*.journal-officiel.lu
*.journalofficiel.lu
*.legilux.lu
*.legilux.public.lu
*.legislation.lu
*.loi.lu
*.lois.lu
*.memorial.lu

Other certificates including the domain name public.lu

(limited to 100 certificates)
snj.public.lu
www.data.public.lu
crs.impotsdirects.public.lu
unicorn.digital-luxembourg.public.lu
meteolux.lu
ee.dev.cases.lu
*.data.public.lu
bts.public.lu
patent.public.lu
patent-mypage.public.lu
public.lu
www.data.public.lu
arcgis-portal.public.lu
snj.lu
security.public.lu
snj.lu
snj.lu
login.tst.sga.public.lu
eidasmw-test.public.lu
snj.lu
preview.data.public.lu
download.data.public.lu
snj.public.lu
snj.lu
login.sga.public.lu
mae-protocole.public.lu
*.data.public.lu
pag-upload.mi.public.lu
public.lu
security.public.lu
snj.lu
download.data.public.lu
public.lu
snj.public.lu
snj.lu
snj.lu
snj.public.lu
*.public.lu
ee.dev.cases.lu
snj.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
*.public.lu
pag-upload.mi.public.lu
snj.lu
snj.lu
ee.dev.cases.lu
www.tlicdac.dac.public.lu
snj.public.lu
www.data.public.lu
crstest.impotsdirects.public.lu
*.public.lu
ee.dev.cases.lu
patent.public.lu
access.s4b.public.lu
csvapi.data.public.lu
pscd.sga.public.lu
snj.public.lu
snj.lu
demoprod.data.public.lu
snj.public.lu
download.data.public.lu
ee.dev.cases.lu
download.data.public.lu
ee.cases.lu
csvapi.data.public.lu
www.igp.public.lu
www.data.public.lu
arcgis-portal.public.lu
download.data.public.lu
pag-upload.mi.public.lu
ee.dev.cases.lu
eshop.cna.public.lu
snj.lu
snj.lu
patent.public.lu
patent.public.lu
public.lu
snj.lu
snj.lu
mae-protocole.public.lu
public.lu
snj.public.lu
csvapi.data.public.lu
unicorn.digital-luxembourg.public.lu
snj.public.lu
sentry.data.public.lu
public.lu
download.data.public.lu
snj.public.lu
legilux.public.lu
pag-upload.mi.public.lu
www.statistiques.public.lu
*.data.public.lu
snj.public.lu
snj.public.lu
www.data.public.lu
patent.public.lu
patent-mypage.public.lu

Certificate

The complete raw certificate details for legilux.public.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107891691213263505552214589319181871659
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Le Gouvernement du Grand-Duché de Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legilux.public.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665392355980635004552313970289409983779841418853585648071281706974925380849635450333809556206070982270195108431508633176636622693748751685103938391281457874746741742842725950408088493042218276798408564881787258924701959917304932243370981291115478566106000289947474227952885678276485555800771648473760504136961564382859088612690295979635332054326928685968977942470860657482539832193289139063183346240723055441668895352436756190463572014254685254148239934557500254971934602022178806319326244856298714811582081762906601580889437232748731280636319829900443069244224208623878092343751900916606038050588508203077793717000531653155021855110415054712695649320609258115743189220949862074070013602169691082479490485743031407559065291490672181493797615370900867734036035700819491443705510519301602925848404516044315156446620288419079796066237012899695408999429349380428363843269269516520702889099224009710583189136098176008237740411890332348974546199041893257140628623180376945735597734004986683272570110122120210726913406104179385368307898569765093017238059495460862444264910059620702062184569522084359542882351601509780988259889766226186689140398070044263492915467853698528211431957305479651392841049911695801084473634526119392096657501001213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							579978424b49c7d5bc6a2240d683be83e2b05421
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (180 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legilux.public.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eli.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gesetze.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.journal-officiel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.journalofficiel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legilux.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legilux.public.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.legislation.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loi.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lois.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.memorial.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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