old-opus.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 55:b7:ba:fd:1c:18:12:68:49:36:d3:4e:a9:ad:dc:f1:b2:03:d3:9e was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=old-opus.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 55:b7:ba:fd:1c:18:12:68:49:36:d3:4e:a9:ad:dc:f1:b2:03:d3:9e
Serial Number (int): 489361540905322974350368727435374192947928224670
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 47:7f:06:9c:53:a9:6f:7d:64:d7:f4:22:d7:9d:cc:47:1b:ab:c5:54
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): f4:be:3a:12:fb:21:61:af:80:7b:7f:d9:ee:ce:ad:3e:1e:da:e5:54
Fingerprint (sha256): 01:e8:10:0d:c4:7b:3a:32:74:bf:5b:a2:27:c8:ff:62:dc:12:e8:05:c8:75:77:df:90:bb:b3:44:86:b3:14:e1

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate old-opus.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for old-opus.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

old-opus.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for old-opus.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 489361540905322974350368727435374192947928224670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 07:39:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-28 07:39:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'old-opus.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 561823549176450278289082130847924217063251129397051921826654243475359393009470796520314129189263402375460195029223251500441717800653318036891366985088204682712029006266750683941245747479913158107059602530639819963012946127615425681147358816951440569813854143128316330243057623255491915372619163579793278311985146703167259931371805676262451133955333822113270025596045442878270598331795205127707926689283370669034062970214775895982638481866164791724106083059862324457569394924899630541035946055535491671186113882415264003931911598734655234016397327308389626898187862920613266022223518552225062515731494939235286810803894044035045631507243500547628620283718570693303160001356986563697730985421152304184571660593362669372487555532731514026111100284276152987261400346739691574763807592735278241437565434629663024700454737518630726395341312256823760809103857340573988079552703489399970744644600477964271340008469859389897001056867464098099952811734736587996864868677639655143199123456499024225824444384341573193241207904144897003402972841415519231609482114495313095340116293740432887725479808586210346659417733380563062626303575409111029741547209262436440003769426081942056948271087410362528108428043435431383845943514295821086808268645083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old-opus.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							477f069c53a96f7d64d7f422d79dcc471babc554
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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