dev-zertifikate.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 5b:52:d8:a0:59:2e:5f:c2:75:ec:07:c7:73:06:09:fc:b0:b6:f7:37 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev-zertifikate.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 5b:52:d8:a0:59:2e:5f:c2:75:ec:07:c7:73:06:09:fc:b0:b6:f7:37
Serial Number (int): 521365692068730954882272925493808330184108472119
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 72:a9:14:e5:2e:f1:70:25:9c:22:12:1b:17:e1:20:1a:47:8a:be:67
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 07:3f:fb:2d:b3:04:37:17:db:a6:31:47:84:97:28:d3:cc:a6:e3:f6
Fingerprint (sha256): 04:aa:88:f9:a6:5d:02:29:75:81:3c:62:c6:1c:ad:33:75:6b:a4:a1:1a:56:bf:11:97:71:14:d1:58:71:de:39

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate dev-zertifikate.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-zertifikate.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-zertifikate.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for dev-zertifikate.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 521365692068730954882272925493808330184108472119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 05:04:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 05:04:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-zertifikate.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 588739858266146169376912386341595959600818767124257156044980816188421228847066181126740942557088377083747901729107201957159686537506574099972692870272904198859307083442303285149955960236935237455964470388555897022182334169237495332123288522496142093452427866780303183536885563791088012057021099589003073391379390345178803976112139340953345951826449488295042209060094684766170655596239155938727620145393965040014761973843750695566134415400137360483366051356892893474829810063844528947796506948120506517481827911350112138487686101544024047513462115871977108553582155730813543389436792732981908441860042681144666987128435045520147894633741606459918283335085909775015886815372119669024058521758892828923867106602644335358467970823170641102830743924519254821990814634082251081143905194602936965188888796365621512926893129094513334069291397851768408345997817568539501442826571109907205900634944797862246609529328337151059670388313586501085900464035534062274160124127587215032751788241125004019339960150239541739121783470165190748165499314397370444490350228744027761269556517508271480320919705811275967001006920145190793367705000970500286908039662227439263113709457398602706942048771747792720274491813781617984818138529505783738176840591499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-zertifikate.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							72a914e52ef170259c22121b17e1201a478abe67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e10075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018d539abde600000403004630440220328acc87c88fee3b4e9d4e5b599d8886cc176bd01fb5087e01003ad5934f2a1e022007b1ce6010c927aeb33ee133e6dd8d61bee60ab2386a9cba370236ef477ab700007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d539ac0540000040300483046022100a4b808425256e68f26440c7dd5f3fafafb23c3d4f65f305204af8fee252ab794022100b8992d8201af27e25e4f745043e1aaef6af866cdfb8da24894efe1c4d7089b9b007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018d539ac3230000040300483046022100eb39472d51e85fee4e2a1f3b5eee3d33d6397235d2eaea7c8d921550a00638f2022100b8b47f53204f12ff59c217237a4215290d91562beab57e202d4e54743f09a4730076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d539ac4380000040300473045022100a1fd8c057f8b66696329e608910312c5cd4f38cf1747dc09e5f0c9fe96a84cbf02205784d3e25a600accc5e3fa9bb5a0f82f207768f8c380da2c6f123e93399e7eb1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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