dlp-admin.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 10:25:f9:84:75:32:a5:c7:19:07:50:3e:d5:fa:91:a1:21:ce:d4:59 was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dlp-admin.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 10:25:f9:84:75:32:a5:c7:19:07:50:3e:d5:fa:91:a1:21:ce:d4:59Serial Number (int): 92190715937779160030756118187381560670912697433
Serial Number lenght: 157 bits, 20 octets
SubjectKeyId: 07:6a:ad:33:89:7d:0d:f3:dd:9c:88:8b:6a:d5:db:66:b4:41:54:8f
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): b4:ff:a1:2c:fa:1f:bf:8d:15:63:7f:aa:90:f8:95:5d:52:2f:34:e3
Fingerprint (sha256): 03:ee:bc:c7:5a:4f:50:fd:8c:1b:86:17:37:db:d4:23:d8:e1:13:d3:53:22:1f:9e:52:02:6b:ae:ad:12:fb:33
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate dlp-admin.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dlp-admin.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dlp-admin.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for dlp-admin.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJfjCCB2agAwIBAgIUECX5hHUypccZB1A+1fqRoSHO1FkwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDYxMTA4 MjYyMloXDTI1MDYxMTA4MjYyMlowHjEcMBoGA1UEAxMTZGxwLWFkbWluLmx1Y29y cC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALp381qX9Q06vI04 QJS1Hp3uwa1bc1xLMMrDaRqtIm+S8wpOPnuVHbycDJbg/UED6I0+xu0vchtiz55e u2ELfRVmcASaE3x7EJjv2AWHVQUkT1tm1HzTlzJhxS7CqrHtZveztB0gGqjyB38x LjtvNYdq8lV3uRUvSGB3tFushU7mmmLbP1uF76Nd7DGjzZSVLtIRfzD8Nj9+siBG VpJrteQYSykdRSNb9aBL3sZDd0n7ZMljU8g3gmeibKGK0IOPlGDw+kUjCRopzeig kQWfZ8KWGS6HMxdFUfNjsLvcsqNDBtg/xtnZpuIYRB3Pbyf+1v4IJFTAQaAHwxF6 7cU4kLSrI0IsvtVl/r5R9WA9OYc4DeiEoWIBJ9BzccGbdgjXJJY11WPeZC8JK1hX sKXvNZ95BIuLqvSkRYIEUqlfTeaNGqPZ7Pg0p5MQYyEQd5wGukwCBfEFuJPHxBB8 6N3q7uo3h80vmOVXRa2ChH/fmfIbsLDquBNjO1HNYXlvamZSN7xyN6OX6bZgnZnz OsVz2T3u7Bk7CewzWESQ2Nvbke6RbKvARA2gRcUi5i7bEYJmBqhQ1pt7CLBkQFXI N7ujQHc+i1WUMOcMoYn7M8CNnXbaFtWKpRApuxmE9B15NT8eZ4L2+pQUG82S9386 tsaX+4zrA95D25EziSzl/asM1GwjAgMBAAGjggSAMIIEfDCBsgYIKwYBBQUHAQEE gaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fpci0x Yjg2MzM4NS1mNGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYBBQUHMAGG Rmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2VkNS02NmU4 LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwBAgEwCAYG BACPegEGMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3Np dG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBRBgNVHR8E SjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5NzIzYjIt ODY0MS00NjQyLTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwHgYDVR0RBBcwFYITZGxwLWFkbWlu Lmx1Y29ycC5jaDAdBgNVHQ4EFgQUB2qtM4l9DfPdnIiLatXbZrRBVI8wHwYDVR0j BBgwFoAU671/SZOMye7sorr3HNJn8IOx6t4wggJwBgorBgEEAdZ5AgQCBIICYASC AlwCWgB1ACjigTj9gyFF6anWqnU3bYN3qIUSs8B/ckFIIdy96YxmAAABkAZnyMUA AAQDAEYwRAIgWhD3W5JsygwlGdRmYDGENzTv4E+lLWpmqSLgm/D2yAQCIG1k+NRn R3r64/O58Cpk6NhK89Y+QVY9q6OVGW61tsTUAHYA4JKz/AwdyOdoNh/eYbmWTQpS eBmKctZyxLBNpW1vVAQAAAGQBmfGnQAABAMARzBFAiEA8qHMQCwO+tl9vdI+89vR GxKz+wBTfTgc9A/YsHWYajICIA55TzxtRYMIwD/54GLiAAlQZ3qLIgLOd5PmT0N7 pwRdAHcAzxFW7tUufK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGQBmfFgwAA BAMASDBGAiEAyKtZ1zXK0+DMYWFXe3Pg9oa+Dmb8CfyL6rUSQSL4jZ4CIQCDLxVb HqV+ibjYKYPsaBHVPuOMi4oaJdYKeByhb6AUWAB3AMz7D2qFcQll/pWbU87psnwi 6YVcDZeNtql+VMD+TA2wAAABkAZnxdkAAAQDAEgwRgIhAISjTaUaXBnGUYp1L8Zc SnHxKIyh7cr8TlULIwiZvtlFAiEA2t4cLpGO2XUp3MxWbzbw2/IbaW/a8X8Kuf2+ ATh+BHIAdwBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAZAGZ8ef AAAEAwBIMEYCIQDtb182jFaE1B8qrlkG06yhGZ5LiwoZmzq9ts1+4QGSSgIhAKMl g9q2GVWvhp9TxWAiQ/R6N0AFK5oKd48xNT0rWTfWMA0GCSqGSIb3DQEBCwUAA4IC AQCW0CslmYiYMBp5+Zu2/+di+c+0BwihkrELcRxQ/rcChPbdQVqRaMrTUdUKSMdY 9NQiGCsPptBwu+Atp02+6MAa4lKg/HnWQqZ09WjBs0Qo0dpBFgNQmtzsaj72uPUg Jiz4YZ5CZgHhlrmJFAY/4+23/JsTBklDxLJPep6GOMqayEiOS0SmoUC8YY0N4Guj c7855vgW3Nx2fYMinRucqN5gXZJWAedRulPFy1k8jmm8O5/+Vz/z+T2VUedlm1sN 6UlVpGk4ZVuluXZJsy/Uq0PnYdu6oF24R5dxTgJh1lBJH5oazScgUKU3d2zqNXK5 m++yz+l3mvsix6DwhrW1GaO5XZb4hV/sAHJjvWsUlc/ceYcgR0G3PHuUq3GL1ntr dLm1ocGQWBeXDWnq6Hdx85jouYP3Z61TMjhgxV8DGff+6mgRaFV3xMnQQb73jqfu 3PoPOhlkihh4BNsOuonhXIhfpoFOvAAqvHWsOAx5Au+6tUo0+N6ZtZNPFm9HNAw3 TTjcc4iUs/eFya/8/e6OAkMrrmCvVebq4tj0ipzBuAT8L0SoCBxbniJ+8oKy+e4B 2VIXwu/WB/phQLeCMMSJn/c5iUU1oueEEZf8M1NLbB2BTBTblP8DZ8X19V5yDHRp aI4lKO5u/fhuf0iV/6Dfowwt8K8GKg0KkFI8cXLHIo+Zyg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAunfzWpf1DTq8jThAlLUe ne7BrVtzXEswysNpGq0ib5LzCk4+e5UdvJwMluD9QQPojT7G7S9yG2LPnl67YQt9 FWZwBJoTfHsQmO/YBYdVBSRPW2bUfNOXMmHFLsKqse1m97O0HSAaqPIHfzEuO281 h2ryVXe5FS9IYHe0W6yFTuaaYts/W4Xvo13sMaPNlJUu0hF/MPw2P36yIEZWkmu1 5BhLKR1FI1v1oEvexkN3SftkyWNTyDeCZ6JsoYrQg4+UYPD6RSMJGinN6KCRBZ9n wpYZLoczF0VR82Owu9yyo0MG2D/G2dmm4hhEHc9vJ/7W/ggkVMBBoAfDEXrtxTiQ tKsjQiy+1WX+vlH1YD05hzgN6IShYgEn0HNxwZt2CNckljXVY95kLwkrWFewpe81 n3kEi4uq9KRFggRSqV9N5o0ao9ns+DSnkxBjIRB3nAa6TAIF8QW4k8fEEHzo3eru 6jeHzS+Y5VdFrYKEf9+Z8huwsOq4E2M7Uc1heW9qZlI3vHI3o5fptmCdmfM6xXPZ Pe7sGTsJ7DNYRJDY29uR7pFsq8BEDaBFxSLmLtsRgmYGqFDWm3sIsGRAVcg3u6NA dz6LVZQw5wyhifszwI2ddtoW1YqlECm7GYT0HXk1Px5ngvb6lBQbzZL3fzq2xpf7 jOsD3kPbkTOJLOX9qwzUbCMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 92190715937779160030756118187381560670912697433 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 08:26:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-11 08:26:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dlp-admin.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760725342582315586904708889512190264071023700699823449960447293102459519195878535612731811531838935501093448048197233453150736365705807910461744528709215882573546964759158414879257121163026853086776515758171173565980001605067618736248453955245133212508898151766040243797001847318919307972369985890995172433192266888522125529463520768455529145698683248341240405313662115700476994984669609347197016504055450516741952746512688912435629355243478915089126830251221474116021478207757678210542573622720329023807827971731905568689217544474894726771630013070917766092922285140584384209936324682397974929226615412255119258475850147492392212988379556002405092364866441712649250044939799471629984148279141940638134497849082837823452553087929573694400344419277459437230312821879080433769977478081892768218537477064317764053264418924737423893127414971438931831480557097615139554200432730105418245022115934725982647629732629663907424376657572053103131531396458267774970197598061359155244385216263171298190254878938842331861972038297801119597203432720264311029092827315542540848140443527469150018929124128520290688895994538931615944509799121842601025411013981573991119388144126777263587200375453363695043238621531536948436969151185005945996684061731 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlp-admin.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 076aad33897d0df3dd9c888b6ad5db66b441548f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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