report.lukb.ch

- Luzerner Kantonalbank AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 6f:63:a0:1b:6f:29:c9:d1:14:9d:76:09:be:96:a2:06:be:e7:c2:22 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Luzerner Kantonalbank AG

Organization: Luzerner Kantonalbank AG
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 6f:63:a0:1b:6f:29:c9:d1:14:9d:76:09:be:96:a2:06:be:e7:c2:22
Serial Number (int): 635919696637234992418414928140802354415539831330
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: fb:72:26:61:9b:f7:22:85:54:cf:9c:6b:2c:02:7c:e0:7b:a6:0a:da
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 85:75:f3:29:55:32:69:a3:38:bd:05:7a:4a:2d:b2:2b:a9:d1:24:48
Fingerprint (sha256): 00:08:44:e0:e5:ec:bf:82:37:1e:38:71:c0:54:0e:1e:17:de:ad:a2:5d:b1:f4:5c:de:27:8b:13:81:d3:35:92

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate report.lukb.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for report.lukb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

report.lukb.ch

Other certificates including the domain name lukb.ch

(limited to 100 certificates)
report.lukb.ch
www.lukb.ch
pricetrends.io
webmail.lukb.ch
loren.propertyservicesexchange.com
www.bambiskitchen.com
www.lukb.ch
app.swipefwd.com
int-caml.lucorp.ch
variobend-dev.az2.at
metisengine.com
test-inba.lukb.ch
elixir.college
quote-push1.lukb.ch
pic-sportingindexacceptance.mentor.neccton.com
download.osmanturan.com
www.massagestudio-harmonia.ch
www.lukb.ch
staposetiti.com
www.joseantonioribeiro.com
inba.lukb.ch
www.lukb.ch
ggx01006-013.gadabout.games
nhayendathung.com
www.softcode.com
kigalirides.rw
uci-lukh-nwe-002.lukb.ch
jovanpetrov.com
login.source.topic.com.ar
www.lukb.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
www.softcode.com
call.telesastho.com
pxmystery.aureliencurti.fr
dev-ebics.lukb.ch
links.thevellaapp.com
kdvinhlong.xbot.com.vn
int-www.lukb.ch
secmail.lukb.ch
skillseastriding.co.uk
encaixat.webcoop.cat
api.freetrade.io
uci-lukt-np-001.int-ucc.lucorp.ch
www.syntacorp.com
qunying.es
staging.api.v2.tnsj.pt
dev-www.lukb.ch
www.anagramsgold.com
www.antonaparin.com
zerogermsmenus.com
listennow.usefulbots.com
auth.mqtizer.com
maximemivilledeschenes.com
na2.bqd.us
my2023.site
appl10-ocemd.lukb.ch
admin.loftyapps.com
kontakt.laburoso.ch
www.thuongthansohoc.vn
silvaconstructionandcleaning.com
stayc.re2fe.com
pruksamoney.co.th
maint-ebanking.lukb.ch
int-www.lukb.ch
todomundopurple.com.br
elektro-placzek.cz
reporting.oso-ai.com
quote-push2.lukb.ch
eas.lukb.ch
careers.lukb.ch
www.bidmytires.com
secmail.lukb.ch
sharefile.lukb.ch
uci-lukh-nwe-002.lukb.ch
secmail.lukb.ch
nlink.lukb.ch
secmail.lukb.ch
int-www.lukb.ch
vybinex.com
www.steelect.com
uci-lukh-np-001.ucc.lucorp.ch
www.dirtygoldfish.com
dev-www.lukb.ch
mo.lukb.ch
uci-lukt-nwc-001.int-ucc.lucorp.ch
mikulas.ddmpraha.app
apachi.app
mo.lukb.ch
juxco.de
appl06-ocemd.lukb.ch
int-www.lukb.ch
int-www.lukb.ch
webview.kairosgame.com
inba.lukb.ch
www.mvpsolutions.tech
uci-lukt-np-001.int-ucc.lucorp.ch
static.reality-overwritten.net
nbild.lukb.ch
eb99-www.lukb.ch

Certificate

The complete raw certificate details for report.lukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJwDCCB6igAwIBAgIUb2OgG28pydEUnXYJvpaiBr7nwiIwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgT1YgSUNBIDIwMjIgLSAxMB4XDTI0MDYwMzE0
MDEzNVoXDTI1MDYwMzE0MDEzNVowZzELMAkGA1UEBhMCQ0gxCzAJBgNVBAgMAkxV
MQ8wDQYDVQQHDAZMdXplcm4xITAfBgNVBAoMGEx1emVybmVyIEthbnRvbmFsYmFu
ayBBRzEXMBUGA1UEAxMOcmVwb3J0Lmx1a2IuY2gwggIiMA0GCSqGSIb3DQEBAQUA
A4ICDwAwggIKAoICAQCo2NJR3ZuoKMDv5VGrOU5XfUn/M/EZkKteCUvJLzeL3VqJ
DAwqNLHBeyjjbqa0CImdyM/NzW2jQoYQVCQITLRHfl1vKhdLMwTdfQqj2gj+VF/c
Pa07m+eYwDvdsUo4QxP8ALHouneKsBJqmbaDGcbbFFbLCaVTQuvfGHSSxvBI5SIT
HA//zBBEOUItIIGqXfU11U+MfnRi1RYdV9rFRmEXmsvYK2ydv7HpMzuookndUz/q
K994Rme9edYJ74tgWnN8gbgDGucF0WpEf9mZtjoQPj51LMDVM30rvQD8QOlyKsAF
e5ZLXTMWNqcZdnu39a3vMCAOAfSGifBAbgucr26jpXcTn5ymgldjxnX/GDxfUnbY
X40GcBwt+oLbBdmkuWoSfQU1F8gb+69UoywhNlXR5vHXA6lgZH+wDEiHTel80try
655kCL8IsvLYxLNtxsIuXDRol8oMLKZSIJLrCTZe3C4z1sp/fWZBuSK1sbE0xme/
Ab5N1KZN12EMyyIiDAWHo3FT9W8bZU3J2T4pF2s8E1i/xr9hwB8LgFtmqxgFKffE
eJqWE3cQkv7VfI84HrF2FWp7WbhcEEtZmlb16UC48VMk67AfdANtkjl7h6LoK5Hb
R1RtMdXxtplegChw7e6YWZAXixWoinWlZZN5ar+ajpmfqJZKy35ArrYAVlaIAwID
AQABo4IEeTCCBHUwgbIGCCsGAQUFBwEBBIGlMIGiMEwGCCsGAQUFBzAChkBodHRw
Oi8vYWlhLnN3aXNzc2lnbi5jaC9haXItMGYyYmY5YTUtZGQzNy00OGM5LWE4NWIt
MTJhY2RjYjhiZTQ1MFIGCCsGAQUFBzABhkZodHRwOi8vb2NzcC5zd2lzc3NpZ24u
Y2gvc2lnbi9vY3MtYWFjY2NlZDUtNjZlOC00MDY5LTliMWItZmQyOWFiNzNlZmVj
MG8GA1UdIARoMGYwCAYGZ4EMAQICMAgGBgQAj3oBBzBQBghghXQBWQIBAjBEMEIG
CCsGAQUFBwIBFjZodHRwczovL3JlcG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lz
c1NpZ25fQ1BTX1RMUy5wZGYwUQYDVR0fBEowSDBGoESgQoZAaHR0cDovL2NybC5z
d2lzc3NpZ24uY2gvY2RwLTk2YjYyZjVhLTZiNzMtNGRhNC04N2Y3LWNlNDAwMmMx
Y2QzNDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQD
AgWgMBkGA1UdEQQSMBCCDnJlcG9ydC5sdWtiLmNoMB0GA1UdDgQWBBT7ciZhm/ci
hVTPnGssAnzge6YK2jAfBgNVHSMEGDAWgBR8bwpvEw/ZjCRvJjTzXGtDbbcjtjCC
Am4GCisGAQQB1nkCBAIEggJeBIICWgJYAHYAKOKBOP2DIUXpqdaqdTdtg3eohRKz
wH9yQUgh3L3pjGYAAAGP3mfRQAAABAMARzBFAiEAtppRHbzGZPLTkW9yA4bu9LKM
+kVjoFGwZJxgeCEDn+cCIFr91iOQs/7l9K/NGnjF4n5r9xIo2vn9xYzzJMRrjzQ3
AHUA4JKz/AwdyOdoNh/eYbmWTQpSeBmKctZyxLBNpW1vVAQAAAGP3mfN5AAABAMA
RjBEAiA4Fw6UvQUb3xKYnL1iqNs9Ja9a1U80uC9jJs7syui4BgIgS04oOwzrapBo
pV6EEvTCo47IXzjzSaiSAMporhAZrMMAdgDPEVbu1S58r/OHW9lpLpvpGnFnSrAX
7KwB0lt3zsw7CAAAAY/eZ8zjAAAEAwBHMEUCIQDUcVO1MnOm2ymqj3Z4F6iHd4jf
zw1TWm7InbqYNYEWJAIgD5TxXWS2yPthn60QRcTPt6tzVyePhQrO1D+IYmWBDbcA
dwDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAY/eZ87iAAAEAwBI
MEYCIQCcHNwhdokIAMyuc6svIEHcqMl2Hj5xi5UXU+buwFt5tAIhAJO7btHOqd8F
6h4knjSBpkjxHiAmDYDcZ7BOXqH4clmlAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4b
jWnAsfpksWKaOd8AAAGP3mfM9QAABAMARzBFAiB0F7e3tixFiFG+0O29hQCVOk45
Rs9ZoG4wtrR5kfELCwIhAOBYNU/AjpuNmjlujUoraOXwQsDhCotDDXOQ/pLuJzqe
MA0GCSqGSIb3DQEBCwUAA4ICAQBZI6+O+RpqORlMnRqI7eZdSSLppe0bcRSrI4/q
j2dnE7hQir+TDUbjOhZap8dTENjFczFIQS7RnmJICxvoGiR+U76Enk4hlDztH2aP
O6OxiuWwWpvjbJynYULDneyr5/E4h/XjJKXBd7T6Vg/P/1Lt14li7DIOJ0ghuIuP
5Yg+HAkJ8+qSNfi0Sc11c0+osY+cwL67J7fHj6txkCUPPxzYIHZ2U7+i1plO2V3U
iHNfIwsL+HIv1IXJ2Fo+aZO0uygq9moaMX2Xc9eFVQU2PvqV3YyB+noUMJyB8ymg
jeHq61oeoYyomM4vA0BMV/ZzwMnQlwXKzqhyWj9OSioeGHRebyEa6rvpkbgXAmvA
RQZJk5LLoFt8ciUuFY0h+wPmunG1xUxylzDkffPVPRJsaJgT/fYQRyWepL5EWJC/
jufs0fvUnLJbrGv7eUZAuKoaNPtDpl95uEEumMLjYZ+wOoJZWk7OAwF6QnMRzcKO
N833s3jVK/D/PLophtw83SudJEyas+GcAgZhxAXLpyxOvqdbpSM/iFIsiJvrUOBx
bXdkCqxAAWCS4EannFPAeqFSDKEqdTtGJ/Cxhxew9SM+woHrcd41DyvpRMfJNK46
FZB9RXxZ4GbwpS7nQghuh4t8dkrhfAo9pYa+BUJzrl9Qf075YEdW+E7pqyULjSE0
YcVSDg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqNjSUd2bqCjA7+VRqzlO
V31J/zPxGZCrXglLyS83i91aiQwMKjSxwXso426mtAiJncjPzc1to0KGEFQkCEy0
R35dbyoXSzME3X0Ko9oI/lRf3D2tO5vnmMA73bFKOEMT/ACx6Lp3irASapm2gxnG
2xRWywmlU0Lr3xh0ksbwSOUiExwP/8wQRDlCLSCBql31NdVPjH50YtUWHVfaxUZh
F5rL2Ctsnb+x6TM7qKJJ3VM/6ivfeEZnvXnWCe+LYFpzfIG4AxrnBdFqRH/ZmbY6
ED4+dSzA1TN9K70A/EDpcirABXuWS10zFjanGXZ7t/Wt7zAgDgH0honwQG4LnK9u
o6V3E5+cpoJXY8Z1/xg8X1J22F+NBnAcLfqC2wXZpLlqEn0FNRfIG/uvVKMsITZV
0ebx1wOpYGR/sAxIh03pfNLa8uueZAi/CLLy2MSzbcbCLlw0aJfKDCymUiCS6wk2
XtwuM9bKf31mQbkitbGxNMZnvwG+TdSmTddhDMsiIgwFh6NxU/VvG2VNydk+KRdr
PBNYv8a/YcAfC4BbZqsYBSn3xHialhN3EJL+1XyPOB6xdhVqe1m4XBBLWZpW9elA
uPFTJOuwH3QDbZI5e4ei6CuR20dUbTHV8baZXoAocO3umFmQF4sVqIp1pWWTeWq/
mo6Zn6iWSst+QK62AFZWiAMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 635919696637234992418414928140802354415539831330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 14:01:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-03 14:01:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzerner Kantonalbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'report.lukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 688835495606635500204374818335555668896457952319836753983879844581710077780007413462038059368250318067258431472173848058520384099568367137531403636990312568547839034251377673837477622872183076298616004138719398738946720554404650316708771004531851942950160588643554374795883802175102099614348340694973889650950827523592649296386488905674441989663230862213884449566660699004648536527495948158489525423696998131863043412515854174332965986803785592559052658066460626929591556200310077922596436483403922148096143583131039879047286401190117769301134442559544711429021785863656167661371405247287577062365704176475995354518835170579690597295939179733669025860121685147605564522274350336772104387822270226782373297838713523033350530358869010611383432765034618758024935068378467672831771000685906221578463820723898467522076233739276904069004255990877657483837702721924785067466487395214499450805117250136957501177069069775168608902861589770480107901909096245529152030364194023851804783206636994894512550439520089509795895902985181930465908646008793203227055244771230238177104516323778698337651187791044689797493560861223628510089778974365616015633476610671491418590820646854328397424871852900555625223938292567596661913446509483740660906756099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report.lukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fb7226619bf7228554cf9c6b2c027ce07ba60ada
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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