*.proxy04.bnl.lu

- Bibliothèque nationale -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 09:32:36:50:83:30:33:cf:f3:b3:2b:bf:2c:18:70:c5 was issued on by GEANT Vereniging.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bibliothèque nationale

Organization: Bibliothèque nationale
State / Province: Luxembourg
Country: LU

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 09:32:36:50:83:30:33:cf:f3:b3:2b:bf:2c:18:70:c5
Serial Number (int): 12223768433963391971575472279311118533
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 41:dc:17:14:b4:de:c3:8a:67:8c:03:59:fe:bf:8b:9c:ad:8f:87:9c
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 46:5a:9d:bc:cd:bc:61:4b:19:52:75:5a:2a:8b:28:dc:4a:5c:06:b2
Fingerprint (sha256): f7:d3:ac:98:e8:27:fb:34:4d:96:21:63:c5:c6:19:3a:75:46:c4:37:43:04:5e:7a:9c:84:c5:30:d7:25:ad:cc

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate *.proxy04.bnl.lu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.proxy04.bnl.lu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.proxy04.bnl.lu
proxy04.bnl.lu

Other certificates including the domain name bnl.lu

(limited to 100 certificates)
*.proxy02.bnl.lu
*.proxy.bnl.lu
*.proxy02.bnl.lu
*.proxy03.bnl.lu
auth.bnl.lu
bnl.lu
auth.bnl.lu
*.bnl.lu
*.proxy02.bnl.lu
*.proxy03.bnl.lu
auth.bnl.lu
auth.bnl.lu
*.proxy04.bnl.lu
bnl.lu
*.proxy04.bnl.lu
auth3.bnl.lu
bnl.lu
luxemburgensia.bnl.lu
*.proxy.bnl.lu
analytics.bnl.lu
bnl.lu
windbook.bnl.lu
bnl.lu
bnl.lu
wifiportal-1.bnl.lu
auth-dev.bnl.lu
*.bnl.lu
*.proxy03.bnl.lu
auth1.bnl.lu
bnl.lu
auth1.bnl.lu
bnl.lu
analytics.bnl.lu
*.proxy03.bnl.lu
bnl.lu
windbook.bnl.lu
mia.bnl.lu
*.proxy03.bnl.lu
*.proxy.bnl.lu
bnl.lu
auth.bnl.lu
auth3.bnl.lu
lida.bnl.lu
bnl.lu
*.proxy04.bnl.lu
*.proxy.bnl.lu
luxemburgensia.bnl.lu
bnl.lu

Certificate

The complete raw certificate details for *.proxy04.bnl.lu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12223768433963391971575472279311118533
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luxembourg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bibliothèque nationale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.proxy04.bnl.lu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761876643535352682978782681154601625431934562911432557510676341173628986071139091087214703131163937435062152351004576874518790103637615982147630114726452812120004701141207353612509734475819661698018519329578352407763387758173083938075831884157941047962674971672275319911771000638155998155489941525746409329459712116586672928548886592542269980453144361338312347674996313693551484319330773680278606163875187170151507036171278299670873984496320108355001467874303720861781427588980986722145124178068219879308824191848559450992718018434654236270793004482673390283689816923366244855657916415490425641092740187852725546713713402729489023490341965461240905440883833206113912055827849602747742078344220149167676749176620288061561505837925545666747826360716767074150308532362969523804953361531065176175235663355901274784535498145183377625275431125006166105570876054560696640925692286690494969438299370693985405515938391387982034054550432229453355679763975094378809447644364265542039311046763272458972415170555478633558260504270374531234234587992793883371204464433645571341732160334504017507431715759075304440170158651814363383885379953659899446991176936617343328476616798069872805404983486449127764933773063388751005112290774173377907513500867
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41dc1714b4dec38a678c0359febf8b9cad8f879c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.proxy04.bnl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy04.bnl.lu'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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