norma4040046.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 55:66:61:8e:44:2f:f6:4a:3b:03:9c:7b:2e:3e:11:99:44:58:15:ab was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=norma4040046.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 55:66:61:8e:44:2f:f6:4a:3b:03:9c:7b:2e:3e:11:99:44:58:15:abSerial Number (int): 487547389832744503657076329134940738393151641003
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 00:a1:1f:c5:98:55:3f:43:9b:cc:91:a3:b1:f0:aa:70:01:f6:19:00
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 52:3f:26:d6:22:09:a5:de:ee:36:d8:18:1a:26:a7:a2:fa:c3:82:5d
Fingerprint (sha256): 04:3b:b3:ed:5d:45:5e:41:af:81:b7:c1:f4:10:2a:db:3c:80:51:dd:8c:78:45:06:a2:04:fc:d4:d6:73:99:39
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate norma4040046.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for norma4040046.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
norma4040046.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for norma4040046.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJgTCCB2mgAwIBAgIUVWZhjkQv9ko7A5x7Lj4RmURYFaswDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDYxMzEx NTYzNVoXDTI1MDYxMzExNTYzNVowITEfMB0GA1UEAxMWbm9ybWE0MDQwMDQ2Lmx1 Y29ycC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKPuH0B6dy8u ZYo9H7sf/kvc/XooH6jjT8uE02K5MWs/doXiwJ/KI7cp/b0wHqCcAG9VcmCZhYo8 bQVSWQcMipe/RMSVmwx/r2nBB+F1UDNSJZcSd70j/bX5v/kAOEGMTntblylsveGB RVPWfV3V0lEm889cARArTjMx0lIcUiYxyzbW3CRoYbZavEj/CNVnjMCe5BN0pDv7 ODPDLNBiJh+bSC2m7AfYbFodr2NfUtr85c9rixuD/wtK33iLrZUNUViehwNFDkaQ DnIzzac4piJpJVKP1hZIy/c+hxtaZdQnVFBKom/mOeQ96teFwOaJmLVMU+XnzknY v1Vvpgcm8yKoqf93gQLf/8M7BCXYoGONAoXNwLFIvp1qc5Ys1TJVR45nmEtWgVtv 6gDVN/5eio7kavFOBGY+LqDZowxZU3h4DBcySK+EhGwsIGI4t/9Iv0lahFbrwnaA 62GGXh9w3aUSfvrbb1wRDlGzlFmVBRCcwtkAqOraMuW8nGvgiKqgYjaYnsdUsvWn rt+DtYiiC4+kkeQz/HLoa2MScNNl/QRUB1gKgVu4Mi0dc6ZdZ5I+Mr5IkCdfZU2o t8UOOufSK/2SIA9Q8lF/pX3g+cH2QUXRtoaHitVnk5n40xej6sqcQKTZHuFQokk/ P5uDLw0ha7M/BHt+iMEG/ORhRTxThyklAgMBAAGjggSAMIIEfDCBsgYIKwYBBQUH AQEEgaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fp ci0xYjg2MzM4NS1mNGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYBBQUH MAGGRmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2VkNS02 NmU4LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwBAgEw CAYGBACPegEGMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVw b3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBRBgNV HR8ESjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5NzIz YjItODY0MS00NjQyLTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwIQYDVR0RBBowGIIWbm9ybWE0 MDQwMDQ2Lmx1Y29ycC5jaDAdBgNVHQ4EFgQUAKEfxZhVP0ObzJGjsfCqcAH2GQAw HwYDVR0jBBgwFoAU671/SZOMye7sorr3HNJn8IOx6t4wggJtBgorBgEEAdZ5AgQC BIICXQSCAlkCVwB2ACjigTj9gyFF6anWqnU3bYN3qIUSs8B/ckFIIdy96YxmAAAB kBF09g8AAAQDAEcwRQIgZ74PENFSwKil6CZkxK+W1JxncUyGpG7ms0WiZcEVfwwC IQDCDqflrTEEPbte0iydAwWpHDfnz067l2Bj3b0pVQDCiAB2AOCSs/wMHcjnaDYf 3mG5lk0KUngZinLWcsSwTaVtb1QEAAABkBF08+0AAAQDAEcwRQIgA/uQdOHlNiqO XbfZJVwnO43/I8qtxMWmuEFQ5/umkX4CIQDNwR7rmU2mA61MH1IlDXuMBAuZyUfV 6Mo58XxIedjT9gB2AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAAB kBF08roAAAQDAEcwRQIhANJO9wtLYjJLF9pcoe8e5jMwsLXBjfRNnjK96SqaGHvl AiAXDjVbJsNBuyTnb7OVp9B8gZR0uTpCD05rsBaeu+qHcwB2AMz7D2qFcQll/pWb U87psnwi6YVcDZeNtql+VMD+TA2wAAABkBF08xUAAAQDAEcwRQIgBxm+PYqhYzsi qhZRsdURDgQDJ6PCTJmbDMPj9pgin80CIQCuQGrWS1WFT9qwoU2shbJy4E0Un7qU MsOTR4x2ehoIRQB1AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAAB kBF09M8AAAQDAEYwRAIgWV8SUvN+epl3tVT37c/676j6GmqV6MhZ/aCGFB6/WlQC IGmTKHmFMAtt39RY3GudSc09H2ipFKkTVCBifZAPcD7QMA0GCSqGSIb3DQEBCwUA A4ICAQB9+huz63+VHXn7BXVmYeOz4XvCLHwEqnsgWFhKsOjCAnb3sMqty6XK8DVj bqVMvx7hgbFsK3xPpsOCbwOckgvN3dKEpHJ85e9Ybch8VJO3PcnQLVDhrmxZiroo s5gqclFzKe2GV0q2uK4Dj8Oe+Nvgkiv1g2cURCbv+BnAr1tfLW6K9kE+0Ci+tUWW 0DyiW2nLw3XrN6BaIfZuFWojl/k7QC6ZzZT8/3B93yvFls+92TB4DJifIqzPgAAg Fqe/TO57lhLOSBOTGVNSQzPmdO/VmAoSdt0+r1m/ho7rW1Fcalr/h2pmtFh4/M8K eHA9ndoM9dV0R0CAz1oU5uW0FOPSiSWYrY9oUVXFcAgEJGoFqYB4SPyxRDFqMxtB VaNVqTzIwnxsNM61/RKp89zPVkzu47b/3IOmLuh195ya8w+4xM5XXZeSM+y4SnCO iQsHcngiFjZkGY00xt6KNyqsrMgyECploKkBH3iB8nhmKPrPudW9EkIsK7YxDejJ SNCkNXu5+ZHOodLDgXuvVkJsSx/Lic+5KFYgjUNo1qQfTOSG5FXiOPfhSO9Sy5cB Rrgbhouip7ORdCv74CiFKX3eno/Ieb3nu41jGx1oumjefSFMyBOwExO9k9InP+sM GALQXulI+OxUoIf7K1k9oiJkJHls3mCgNdVP2ZYqnYlhH/ReYQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo+4fQHp3Ly5lij0fux/+ S9z9eigfqONPy4TTYrkxaz92heLAn8ojtyn9vTAeoJwAb1VyYJmFijxtBVJZBwyK l79ExJWbDH+vacEH4XVQM1IllxJ3vSP9tfm/+QA4QYxOe1uXKWy94YFFU9Z9XdXS USbzz1wBECtOMzHSUhxSJjHLNtbcJGhhtlq8SP8I1WeMwJ7kE3SkO/s4M8Ms0GIm H5tILabsB9hsWh2vY19S2vzlz2uLG4P/C0rfeIutlQ1RWJ6HA0UORpAOcjPNpzim ImklUo/WFkjL9z6HG1pl1CdUUEqib+Y55D3q14XA5omYtUxT5efOSdi/VW+mBybz Iqip/3eBAt//wzsEJdigY40Chc3AsUi+nWpzlizVMlVHjmeYS1aBW2/qANU3/l6K juRq8U4EZj4uoNmjDFlTeHgMFzJIr4SEbCwgYji3/0i/SVqEVuvCdoDrYYZeH3Dd pRJ++ttvXBEOUbOUWZUFEJzC2QCo6toy5byca+CIqqBiNpiex1Sy9aeu34O1iKIL j6SR5DP8cuhrYxJw02X9BFQHWAqBW7gyLR1zpl1nkj4yvkiQJ19lTai3xQ4659Ir /ZIgD1DyUX+lfeD5wfZBRdG2hoeK1WeTmfjTF6PqypxApNke4VCiST8/m4MvDSFr sz8Ee36IwQb85GFFPFOHKSUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 487547389832744503657076329134940738393151641003 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 11:56:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-13 11:56:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'norma4040046.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668776722623977928372568975810933087598777706943750108352496309744473616813950885313402608457705253403007065408415504392869380119899009889384358903277810072363029476659136292481840105633772216818551982461064886331937516535410173611738634516515802862016796369968914246994701398648936734144366458463524907184188335404329988524393619240401892449244572561041603662484934749465494912347538886954396071389929009037939792542437159865595715568814167287919718377514223481809956385473715571143077663050056289347111791816742200660465662528846660821981115331420550931939370955761886089986946874225640680420053345960966971965204434078300344606347475701881617437384648738927014088770765121254558322372029183196679459065045478565257285982289747075260775234555071367400881457653419884324158804443119892357273709760362916305987132596924396678216280589585527100318634914946922786978222145740181768918287638634721374312643353282140052471146143308963894468709453338867489229672062914610448062731489577593210993257029663338995565811005448082435942684153908190988824639430935468240873898682420899284431232549614518083677478420428763559788173856033348205162461452343215301663132698984022312585423986891494364145637641541882270828828312953441210807318161701 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma4040046.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 00a11fc598553f439bcc91a3b1f0aa7001f61900 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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