dlp-admin.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 10:25:f9:84:75:32:a5:c7:19:07:50:3e:d5:fa:91:a1:21:ce:d4:59 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dlp-admin.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 10:25:f9:84:75:32:a5:c7:19:07:50:3e:d5:fa:91:a1:21:ce:d4:59
Serial Number (int): 92190715937779160030756118187381560670912697433
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 07:6a:ad:33:89:7d:0d:f3:dd:9c:88:8b:6a:d5:db:66:b4:41:54:8f
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): b4:ff:a1:2c:fa:1f:bf:8d:15:63:7f:aa:90:f8:95:5d:52:2f:34:e3
Fingerprint (sha256): 03:ee:bc:c7:5a:4f:50:fd:8c:1b:86:17:37:db:d4:23:d8:e1:13:d3:53:22:1f:9e:52:02:6b:ae:ad:12:fb:33

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate dlp-admin.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dlp-admin.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dlp-admin.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for dlp-admin.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92190715937779160030756118187381560670912697433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 08:26:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-11 08:26:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dlp-admin.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760725342582315586904708889512190264071023700699823449960447293102459519195878535612731811531838935501093448048197233453150736365705807910461744528709215882573546964759158414879257121163026853086776515758171173565980001605067618736248453955245133212508898151766040243797001847318919307972369985890995172433192266888522125529463520768455529145698683248341240405313662115700476994984669609347197016504055450516741952746512688912435629355243478915089126830251221474116021478207757678210542573622720329023807827971731905568689217544474894726771630013070917766092922285140584384209936324682397974929226615412255119258475850147492392212988379556002405092364866441712649250044939799471629984148279141940638134497849082837823452553087929573694400344419277459437230312821879080433769977478081892768218537477064317764053264418924737423893127414971438931831480557097615139554200432730105418245022115934725982647629732629663907424376657572053103131531396458267774970197598061359155244385216263171298190254878938842331861972038297801119597203432720264311029092827315542540848140443527469150018929124128520290688895994538931615944509799121842601025411013981573991119388144126777263587200375453363695043238621531536948436969151185005945996684061731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlp-admin.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							076aad33897d0df3dd9c888b6ad5db66b441548f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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