int-opus.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 3e:96:57:cb:58:11:a5:8c:c6:a3:c9:18:43:f4:59:9a:70:c6:1d:d9 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=int-opus.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 3e:96:57:cb:58:11:a5:8c:c6:a3:c9:18:43:f4:59:9a:70:c6:1d:d9
Serial Number (int): 357310187534117882492322697413026391119664389593
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 0d:06:04:36:56:99:6c:d4:51:97:24:a4:b2:29:f7:72:8f:46:10:62
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 0b:08:8c:84:a3:f7:24:ed:d7:20:eb:bb:5d:f5:5d:af:c7:7e:32:c9
Fingerprint (sha256): 00:28:56:63:59:21:a6:b5:90:b1:b7:a3:90:b6:39:ef:41:ee:ef:26:c7:c8:ff:01:c4:d0:54:fe:0b:fc:ce:fd

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate int-opus.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int-opus.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int-opus.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for int-opus.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAosBS6vEuTqJLOTR8zNhd
SA1FOV/73G/bbW74nga6/VB+eFkU/NgHORSlr7A6uEo2tbNXfS+MNrKFPsLY6Fld
Z1HpHTOCLMa6iO4+5mupVFVFYicVTY28c+iuDqj1AvHIF90zRWm4U6NEQI0IftFl
T8MhAsiKK2yg9kphPkrZf0qEftMgbj8nk6sncShPy5VB6A1VHruPgnt6eUvn56qf
2LvL6zUn5QfxGvgQRLI97lQCLcpI6G8SfMq01LEvNoWCxcZZya55lFXBTmnK+k/i
auS60GQKdQbao187MB5uIU7eDQSWT6NGs/gxjZFP8vHk+EiUrQAGsO0P//ylYi1E
IYFWfQrR5YYok7ZxXRXv9kE3yasADzODrrMpbKs8DNBqGHtisuCoDRmcT+lEzX5a
BAgpPi8cbwqTWTJgEqf1cUH2/zuuFTd9/D8vo3vSLCU5b0BONOrHFkL3czI9wGz5
tzmAVbOE/FOeK4wM2C9DdwfnO0HFE5i+nMina1hItiLLIO13356pbff2nG6fatwR
oY4Y29xkDxpXzD2w6yH7ticrJvL703s8au4c8E4BFCc8WpVxKUTqWpQD0K9z5oMZ
vUBj26i5AAeYiXxpID5i/gkp6CBtz4/ODp/538fjeo7Z1PKTwTRdZJBi+1s2WP/r
GWjQGoTU73rhJuBEdNBdBCkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 357310187534117882492322697413026391119664389593
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 07:18:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 07:18:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-opus.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663967233735266619047213840343489952989773311474819600894100659360913341755080673733734318136304314989537588415702509659521502531051708234771195376846280345495849735374536609740162517271260085568754596372647714054414424016354013324339432844440871131559199523578294782982563191121189239665134790411951881369331951920167846257023673349558749953919953899721519398718918953226106134526092596302141091082312082432325571158349803127445482550505654312766065027166122702798855277789640059688032134289477782608541987821464309471378157581009893453324281112449317680701141915095762767375560437194459483937221766274085910965547387847261470311010875717015780528013565899390040979601677304169389096138046867009893990022301538870304034790693361120869813791712871955525700260158346865129068252897889978251301349195430410442842806064906556567151280584123788810833661240763783850050678902292754861166232117470730579092971583131147606120963850175182038531304650059546757055205009360128605191938701495186994913474907561921252626982236800411827524419552789937683463438669204452670281816408768452336455723987902376453041643043059764938215124123065166024919657318279309585343534653645885001899678644135451770693499651400740418734981349648916834183041319977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-opus.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d06043656996cd4519724a4b229f7728f461062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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