old-opus.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 55:b7:ba:fd:1c:18:12:68:49:36:d3:4e:a9:ad:dc:f1:b2:03:d3:9e was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=old-opus.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 55:b7:ba:fd:1c:18:12:68:49:36:d3:4e:a9:ad:dc:f1:b2:03:d3:9eSerial Number (int): 489361540905322974350368727435374192947928224670
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 47:7f:06:9c:53:a9:6f:7d:64:d7:f4:22:d7:9d:cc:47:1b:ab:c5:54
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): f4:be:3a:12:fb:21:61:af:80:7b:7f:d9:ee:ce:ad:3e:1e:da:e5:54
Fingerprint (sha256): 01:e8:10:0d:c4:7b:3a:32:74:bf:5b:a2:27:c8:ff:62:dc:12:e8:05:c8:75:77:df:90:bb:b3:44:86:b3:14:e1
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate old-opus.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for old-opus.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
old-opus.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for old-opus.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJADCCBuigAwIBAgIUVbe6/RwYEmhJNtNOqa3c8bID054wDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEyODA3 Mzk1MFoXDTI1MDEyODA3Mzk1MFowHTEbMBkGA1UEAxMSb2xkLW9wdXMubHVjb3Jw LmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAiba/zeoKRm8ROAsg crX40cX6ncleEEoTXd3SQyRUxtVVIoZ6UNbplf7bH0VgUs9XuOF/0JqgmcSNsWHm 0Ex9EsDawrvgRdkjJNHnKxb7gydv0EGXWs8MV/E5TwOsrENJnx4zlIhgEDXKDBIJ oYuzkTNgH+F/4ksk2PuCs5OS5MhZ7zz1hMCiam5snmtptDjT2Kt3uPIb9Rqnk559 B/jfa1vKHKkehuVCi3KFMRHOeJYYdtPQf8exMCNx2KWiz+z736cVXoLKcOBby11k zUVWqn4nl23aW9DISA9t83zHqLUd7Ayq5TkUHw61FxRLzxORKHLDKUwbZwVJk6qw MwmfeD81isOde8ZQY6y/wqETF7MpemhUzZch46SpPupXJMaAOvmPZGF4tVrSSbtb r8M2IOG93KlcbJxsbud4Mg2Ra8Ze6Q3Q+jrHNORql4Hw6KKW1IyIS0rQwgy12FCu FTsKyqawFd1lZxXUjMlw33i/M7rbLUkXda8C3mKsUR3fa4NZi7fF8AsIAMmnXREz RYZq4k7b1se0El3iSs9We2CIM3+p2gEjGwaoQUgwbFCJCMo90rQi349LlUe3UGMu WMLT3M18BwWLDpUgWbcJ2LSWfjNXNTb3cuAEd02NH5QNUlVSmtFN4e/ieNxuk2qf TisBpH8fSS3T4YZkA8RlwokYotsCAwEAAaOCBAMwggP/MIGyBggrBgEFBQcBAQSB pTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFi ODYzMzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZG aHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgt NDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYE AI96AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0 b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRK MEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04 NjQxLTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHREEFjAUghJvbGQtb3B1cy5s dWNvcnAuY2gwHQYDVR0OBBYEFEd/BpxTqW99ZNf0ItedzEcbq8VUMB8GA1UdIwQY MBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIIB9AYKKwYBBAHWeQIEAgSCAeQEggHg Ad4AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAY1PAqlxAAAE AwBGMEQCIBrZ0w72fGOM6mZDimA2x3jUh+4d09FbJ5dTgUMSE8IZAiACBCYEoVO9 OZQZ+RVoXLi1DvBlscO6DXIswcZj8Na+egB1AM8RVu7VLnyv84db2Wkum+kacWdK sBfsrAHSW3fOzDsIAAABjU8CquUAAAQDAEYwRAIgT2S7gjgwwgiBi3s3ATXaQz8y vL80GjEK+HQ1Q+wbCxICICH1AxIbcVP5l797IX03omuqpzyzjPItj5myIUjRtO1C AHYAzPsPaoVxCWX+lZtTzumyfCLphVwNl422qX5UwP5MDbAAAAGNTwKsFAAABAMA RzBFAiEArvwXpDEeyylmFJXTZVrOO1GGEx03D+wFxZ+PMY9Y3XECICOVT45T7kof V/uofV97pGv0phaTo7QWWFOxAW2WO+/EAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4b jWnAsfpksWKaOd8AAAGNTwKtBgAABAMARzBFAiEAkyUkboA8OJRVSF8XjBbId+iY sNboO8IG1R/dpbL+ds8CIE3FBjV0tM1lgIdRulzGloS/PPuB4wwfVERnWwohuP7E MA0GCSqGSIb3DQEBCwUAA4ICAQBgnT/1QoQSGFH7cRwVc5zbnABrCgg5mj1EL3YC +oXZin0+8y6bwKJ3042/zKsoRn0GtnCb6sspHkMJAVUjiQI0QPk30FER/eiJAafO h1OpZP0unHbs54AnBUpsh0qQTqNEpC4xVLvgpzVgQAWs62lhCap8HwCxMITe2z0K fRt8us35toAobsnpwSeWZ0oHJTYvIaoYqWNqr14sEQInIeMWTZMtAAI4gaTWoV1d BiyfZeiibjOolhxJzlpB+sRUpk7sCeYmzgI/ekbbwDEKFxEiZpcAfDN7CWK/Bq0C /m0mAkaPKTxTytsE3rKl0piNN7VSFVDuR7vUQ4K7Cs/lOomBUuO018ERtWe8ZN2O FrBvSlSgxr38zVXczVQqczzW6KS78HzXWdLu8M+JXdWFtfouYUnY86LJ+QsVwtBo vAvYTD+vv5juqg5KsgLdoczYCyeC1S0lff78rRx4NgOSmoSqdYc3B1VqXnx3Bp9R BrIIP35qJhkynPaRoqjLPMBG8N0kTdAeGJL20QZg232vfK+ubTs3zdkcOobkR2PL cXqf8daq1QVDssT8FMa/0hnlzEkrztaPnSK4WaJi0Q00wRSjIcqpjoi+ZGb8nIJo iUzayJ0Q5IsCTOpNiyOfKTpXERGuYE4Lz0GEbr4ZgbSnVpJnAdbqpu1V7FkTS8kf xtg50Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAiba/zeoKRm8ROAsgcrX4 0cX6ncleEEoTXd3SQyRUxtVVIoZ6UNbplf7bH0VgUs9XuOF/0JqgmcSNsWHm0Ex9 EsDawrvgRdkjJNHnKxb7gydv0EGXWs8MV/E5TwOsrENJnx4zlIhgEDXKDBIJoYuz kTNgH+F/4ksk2PuCs5OS5MhZ7zz1hMCiam5snmtptDjT2Kt3uPIb9Rqnk559B/jf a1vKHKkehuVCi3KFMRHOeJYYdtPQf8exMCNx2KWiz+z736cVXoLKcOBby11kzUVW qn4nl23aW9DISA9t83zHqLUd7Ayq5TkUHw61FxRLzxORKHLDKUwbZwVJk6qwMwmf eD81isOde8ZQY6y/wqETF7MpemhUzZch46SpPupXJMaAOvmPZGF4tVrSSbtbr8M2 IOG93KlcbJxsbud4Mg2Ra8Ze6Q3Q+jrHNORql4Hw6KKW1IyIS0rQwgy12FCuFTsK yqawFd1lZxXUjMlw33i/M7rbLUkXda8C3mKsUR3fa4NZi7fF8AsIAMmnXREzRYZq 4k7b1se0El3iSs9We2CIM3+p2gEjGwaoQUgwbFCJCMo90rQi349LlUe3UGMuWMLT 3M18BwWLDpUgWbcJ2LSWfjNXNTb3cuAEd02NH5QNUlVSmtFN4e/ieNxuk2qfTisB pH8fSS3T4YZkA8RlwokYotsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 489361540905322974350368727435374192947928224670 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 07:39:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-28 07:39:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'old-opus.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 561823549176450278289082130847924217063251129397051921826654243475359393009470796520314129189263402375460195029223251500441717800653318036891366985088204682712029006266750683941245747479913158107059602530639819963012946127615425681147358816951440569813854143128316330243057623255491915372619163579793278311985146703167259931371805676262451133955333822113270025596045442878270598331795205127707926689283370669034062970214775895982638481866164791724106083059862324457569394924899630541035946055535491671186113882415264003931911598734655234016397327308389626898187862920613266022223518552225062515731494939235286810803894044035045631507243500547628620283718570693303160001356986563697730985421152304184571660593362669372487555532731514026111100284276152987261400346739691574763807592735278241437565434629663024700454737518630726395341312256823760809103857340573988079552703489399970744644600477964271340008469859389897001056867464098099952811734736587996864868677639655143199123456499024225824444384341573193241207904144897003402972841415519231609482114495313095340116293740432887725479808586210346659417733380563062626303575409111029741547209262436440003769426081942056948271087410362528108428043435431383845943514295821086808268645083 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old-opus.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 477f069c53a96f7d64d7f422d79dcc471babc554 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes) 01de0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018d4f02a971000004030046304402201ad9d30ef67c638cea66438a6036c778d487ee1dd3d15b27975381431213c219022002042604a153bd399419f915685cb8b50ef065b1c3ba0d722cc1c663f0d6be7a007500cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d4f02aae5000004030046304402204f64bb823830c208818b7b370135da433f32bcbf341a310af8743543ec1b0b12022021f503121b7153f997bf7b217d37a26baaa73cb38cf22d8f99b22148d1b4ed42007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018d4f02ac140000040300473045022100aefc17a4311ecb29661495d3655ace3b5186131d370fec05c59f8f318f58dd71022023954f8e53ee4a1f57fba87d5f7ba46bf4a61693a3b4165853b1016d963befc40076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d4f02ad0600000403004730450221009325246e803c389455485f178c16c877e898b0d6e83bc206d51fdda5b2fe76cf02204dc5063574b4cd65808751ba5cc69684bf3cfb81e30c1f5444675b0a21b8fec4 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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