int-opus.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 3e:96:57:cb:58:11:a5:8c:c6:a3:c9:18:43:f4:59:9a:70:c6:1d:d9 was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=int-opus.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 3e:96:57:cb:58:11:a5:8c:c6:a3:c9:18:43:f4:59:9a:70:c6:1d:d9Serial Number (int): 357310187534117882492322697413026391119664389593
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: 0d:06:04:36:56:99:6c:d4:51:97:24:a4:b2:29:f7:72:8f:46:10:62
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 0b:08:8c:84:a3:f7:24:ed:d7:20:eb:bb:5d:f5:5d:af:c7:7e:32:c9
Fingerprint (sha256): 00:28:56:63:59:21:a6:b5:90:b1:b7:a3:90:b6:39:ef:41:ee:ef:26:c7:c8:ff:01:c4:d0:54:fe:0b:fc:ce:fd
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate int-opus.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for int-opus.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
int-opus.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for int-opus.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJADCCBuigAwIBAgIUPpZXy1gRpYzGo8kYQ/RZmnDGHdkwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEyNDA3 MTg1N1oXDTI1MDEyNDA3MTg1N1owHTEbMBkGA1UEAxMSaW50LW9wdXMubHVjb3Jw LmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAosBS6vEuTqJLOTR8 zNhdSA1FOV/73G/bbW74nga6/VB+eFkU/NgHORSlr7A6uEo2tbNXfS+MNrKFPsLY 6FldZ1HpHTOCLMa6iO4+5mupVFVFYicVTY28c+iuDqj1AvHIF90zRWm4U6NEQI0I ftFlT8MhAsiKK2yg9kphPkrZf0qEftMgbj8nk6sncShPy5VB6A1VHruPgnt6eUvn 56qf2LvL6zUn5QfxGvgQRLI97lQCLcpI6G8SfMq01LEvNoWCxcZZya55lFXBTmnK +k/iauS60GQKdQbao187MB5uIU7eDQSWT6NGs/gxjZFP8vHk+EiUrQAGsO0P//yl Yi1EIYFWfQrR5YYok7ZxXRXv9kE3yasADzODrrMpbKs8DNBqGHtisuCoDRmcT+lE zX5aBAgpPi8cbwqTWTJgEqf1cUH2/zuuFTd9/D8vo3vSLCU5b0BONOrHFkL3czI9 wGz5tzmAVbOE/FOeK4wM2C9DdwfnO0HFE5i+nMina1hItiLLIO13356pbff2nG6f atwRoY4Y29xkDxpXzD2w6yH7ticrJvL703s8au4c8E4BFCc8WpVxKUTqWpQD0K9z 5oMZvUBj26i5AAeYiXxpID5i/gkp6CBtz4/ODp/538fjeo7Z1PKTwTRdZJBi+1s2 WP/rGWjQGoTU73rhJuBEdNBdBCkCAwEAAaOCBAMwggP/MIGyBggrBgEFBQcBAQSB pTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFi ODYzMzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZG aHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgt NDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYE AI96AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0 b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRK MEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04 NjQxLTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHREEFjAUghJpbnQtb3B1cy5s dWNvcnAuY2gwHQYDVR0OBBYEFA0GBDZWmWzUUZckpLIp93KPRhBiMB8GA1UdIwQY MBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIIB9AYKKwYBBAHWeQIEAgSCAeQEggHg Ad4AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAY06VhtWAAAE AwBGMEQCIHRV1Jqypcpp8CBEyEbUzUZK53XZX1C2cQuHs+r+8IP2AiBQ8t/F5lGC MD5yuiKf6aKkXKf2CoKtNhaFn6CIvLvN7gB1AM8RVu7VLnyv84db2Wkum+kacWdK sBfsrAHSW3fOzDsIAAABjTpWHFIAAAQDAEYwRAIgHb4aHUQ1e3E1SpYHpeLQDil6 6yQJaZ6zhCtTfqgSRRsCIAVo02l2EtmZSQFaH8r/GI23NTyHXraQ2fE8+JbfWP/n AHYAzPsPaoVxCWX+lZtTzumyfCLphVwNl422qX5UwP5MDbAAAAGNOlYdVgAABAMA RzBFAiBTL1GHH7vboSXx4IARvn9ZYzAXAoYvye101DoW9f8kBwIhAMal0dkivxj+ sznYbAAQtn00XEA8YZBf9J8kYD/v1/wkAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4b jWnAsfpksWKaOd8AAAGNOlYgMgAABAMARzBFAiA53L59rOvl1XzWaAdScMDXTbwx U0GgK5l0kCbdViAIzAIhAIuJBctymlDGZj1M/KutGi08uOB7AvbLFI/g+kx3sSW9 MA0GCSqGSIb3DQEBCwUAA4ICAQBoQ9PIqIpO5JhbdeF7hwZgOLPBYu2DdOMrgjMI k3ZmNMVunuBXYVz+NEdeQ/9KfW5tJfrvwRKQTghJFwxoe7VXlTxNvtqsPERehGXJ iW+sAf1BpUB/HRFnAy4jDOvN5pOyD38xhN1ySky4bWUkhi1r5p5UxucAmenPkMxS 7fsfPZQZ173eu3o95uTMDHvvIZdgcJLcTyRBmo1QaoEHmoiASqI+Zhw4GYk78ZLL KzVEXq4yG2yd/C/ooxwECZoPhDWeAuP7rP1LmPgzm3P/QoASylxaYSX5PayJ/dXQ geZH8Yx/PklJwfPbyCQt70ug0AMSFaLSIMpsOD/dGj9cpi7uQaljUiaRa6wFUTFM f1riO+Rcp0jG1AugMuiC4O/8X1XYW4gOA6IGkdwcsv5xdfDRLllrkcG53ygIicS2 8Xg6LTPRxsHiEgJmB/FZSnfJiiBa0yjewgVKHreYduApe9/n8RoWqulNSSPDVY// FFBRM+H2oyLAOzM/NdEXJoq0hh6pvhsuj5vjlHM74KPQka5NCcvDHa1X2jAGIq8M ehvG3TDSV5ezfS0L4LjOKV2YQ43A8o7YeS3/SQnhL3zx7c+YKVlSsvZe2EXO9adK qlbNnurRiEcanZHnE49Iw0AAK0MmcHrElv5w7ofFVDLTW5CG13uhNOtFGmQNektT 4YZWgQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAosBS6vEuTqJLOTR8zNhd SA1FOV/73G/bbW74nga6/VB+eFkU/NgHORSlr7A6uEo2tbNXfS+MNrKFPsLY6Fld Z1HpHTOCLMa6iO4+5mupVFVFYicVTY28c+iuDqj1AvHIF90zRWm4U6NEQI0IftFl T8MhAsiKK2yg9kphPkrZf0qEftMgbj8nk6sncShPy5VB6A1VHruPgnt6eUvn56qf 2LvL6zUn5QfxGvgQRLI97lQCLcpI6G8SfMq01LEvNoWCxcZZya55lFXBTmnK+k/i auS60GQKdQbao187MB5uIU7eDQSWT6NGs/gxjZFP8vHk+EiUrQAGsO0P//ylYi1E IYFWfQrR5YYok7ZxXRXv9kE3yasADzODrrMpbKs8DNBqGHtisuCoDRmcT+lEzX5a BAgpPi8cbwqTWTJgEqf1cUH2/zuuFTd9/D8vo3vSLCU5b0BONOrHFkL3czI9wGz5 tzmAVbOE/FOeK4wM2C9DdwfnO0HFE5i+nMina1hItiLLIO13356pbff2nG6fatwR oY4Y29xkDxpXzD2w6yH7ticrJvL703s8au4c8E4BFCc8WpVxKUTqWpQD0K9z5oMZ vUBj26i5AAeYiXxpID5i/gkp6CBtz4/ODp/538fjeo7Z1PKTwTRdZJBi+1s2WP/r GWjQGoTU73rhJuBEdNBdBCkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 357310187534117882492322697413026391119664389593 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 07:18:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 07:18:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-opus.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663967233735266619047213840343489952989773311474819600894100659360913341755080673733734318136304314989537588415702509659521502531051708234771195376846280345495849735374536609740162517271260085568754596372647714054414424016354013324339432844440871131559199523578294782982563191121189239665134790411951881369331951920167846257023673349558749953919953899721519398718918953226106134526092596302141091082312082432325571158349803127445482550505654312766065027166122702798855277789640059688032134289477782608541987821464309471378157581009893453324281112449317680701141915095762767375560437194459483937221766274085910965547387847261470311010875717015780528013565899390040979601677304169389096138046867009893990022301538870304034790693361120869813791712871955525700260158346865129068252897889978251301349195430410442842806064906556567151280584123788810833661240763783850050678902292754861166232117470730579092971583131147606120963850175182038531304650059546757055205009360128605191938701495186994913474907561921252626982236800411827524419552789937683463438669204452670281816408768452336455723987902376453041643043059764938215124123065166024919657318279309585343534653645885001899678644135451770693499651400740418734981349648916834183041319977 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-opus.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0d06043656996cd4519724a4b229f7728f461062 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 006843d3c8a88a4ee4985b75e17b87066038b3c162ed8374e32b82330893766634c56e9ee057615cfe34475e43ff4a7d6e6d25faefc112904e0849170c687bb557953c4dbedaac3c445e8465c9896fac01fd41a5407f1d1167032e230cebcde693b20f7f3184dd724a4cb86d6524862d6be69e54c6e70099e9cf90cc52edfb1f3d9419d7bddebb7a3de6e4cc0c7bef2197607092dc4f24419a8d506a81079a88804aa23e661c3819893bf192cb2b35445eae321b6c9dfc2fe8a31c04099a0f84359e02e3fbacfd4b98f8339b73ff428012ca5c5a6125f93dac89fdd5d081e647f18c7f3e4949c1f3dbc8242def4ba0d0031215a2d220ca6c383fdd1a3f5ca62eee41a9635226916bac0551314c7f5ae23be45ca748c6d40ba032e882e0effc5f55d85b880e03a20691dc1cb2fe7175f0d12e596b91c1b9df280889c4b6f1783a2d33d1c6c1e212026607f1594a77c98a205ad328dec2054a1eb79876e0297bdfe7f11a16aae94d4923c3558fff14505133e1f6a322c03b333f35d117268ab4861ea9be1b2e8f9be394733be0a3d091ae4d09cbc31dad57da300622af0c7a1bc6dd30d25797b37d2d0be0b8ce295d98438dc0f28ed8792dff4909e12f7cf1edcf98295952b2f65ed845cef5a74aaa56cd9eead188471a9d91e7138f48c340002b4326707ac496fe70ee87c55432d35b9086d77ba134eb451a640d7a4b53e1865681