norma4040046.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 55:66:61:8e:44:2f:f6:4a:3b:03:9c:7b:2e:3e:11:99:44:58:15:ab was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=norma4040046.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 55:66:61:8e:44:2f:f6:4a:3b:03:9c:7b:2e:3e:11:99:44:58:15:ab
Serial Number (int): 487547389832744503657076329134940738393151641003
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 00:a1:1f:c5:98:55:3f:43:9b:cc:91:a3:b1:f0:aa:70:01:f6:19:00
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 52:3f:26:d6:22:09:a5:de:ee:36:d8:18:1a:26:a7:a2:fa:c3:82:5d
Fingerprint (sha256): 04:3b:b3:ed:5d:45:5e:41:af:81:b7:c1:f4:10:2a:db:3c:80:51:dd:8c:78:45:06:a2:04:fc:d4:d6:73:99:39

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate norma4040046.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for norma4040046.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

norma4040046.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for norma4040046.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 487547389832744503657076329134940738393151641003
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 11:56:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-13 11:56:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'norma4040046.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 668776722623977928372568975810933087598777706943750108352496309744473616813950885313402608457705253403007065408415504392869380119899009889384358903277810072363029476659136292481840105633772216818551982461064886331937516535410173611738634516515802862016796369968914246994701398648936734144366458463524907184188335404329988524393619240401892449244572561041603662484934749465494912347538886954396071389929009037939792542437159865595715568814167287919718377514223481809956385473715571143077663050056289347111791816742200660465662528846660821981115331420550931939370955761886089986946874225640680420053345960966971965204434078300344606347475701881617437384648738927014088770765121254558322372029183196679459065045478565257285982289747075260775234555071367400881457653419884324158804443119892357273709760362916305987132596924396678216280589585527100318634914946922786978222145740181768918287638634721374312643353282140052471146143308963894468709453338867489229672062914610448062731489577593210993257029663338995565811005448082435942684153908190988824639430935468240873898682420899284431232549614518083677478420428763559788173856033348205162461452343215301663132698984022312585423986891494364145637641541882270828828312953441210807318161701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma4040046.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00a11fc598553f439bcc91a3b1f0aa7001f61900
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (601 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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