dev-zertifikate.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 5b:52:d8:a0:59:2e:5f:c2:75:ec:07:c7:73:06:09:fc:b0:b6:f7:37 was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dev-zertifikate.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 5b:52:d8:a0:59:2e:5f:c2:75:ec:07:c7:73:06:09:fc:b0:b6:f7:37Serial Number (int): 521365692068730954882272925493808330184108472119
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: 72:a9:14:e5:2e:f1:70:25:9c:22:12:1b:17:e1:20:1a:47:8a:be:67
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 07:3f:fb:2d:b3:04:37:17:db:a6:31:47:84:97:28:d3:cc:a6:e3:f6
Fingerprint (sha256): 04:aa:88:f9:a6:5d:02:29:75:81:3c:62:c6:1c:ad:33:75:6b:a4:a1:1a:56:bf:11:97:71:14:d1:58:71:de:39
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate dev-zertifikate.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev-zertifikate.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev-zertifikate.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for dev-zertifikate.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJETCCBvmgAwIBAgIUW1LYoFkuX8J17AfHcwYJ/LC29zcwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEyOTA1 MDQyNVoXDTI1MDEyOTA1MDQyNVowJDEiMCAGA1UEAxMZZGV2LXplcnRpZmlrYXRl Lmx1Y29ycC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJBPw1ZD PACrt6RqelM6B1IguJqguFFG8Sxf9hMsEIKXoJJ06+PTo2MF6Xt3tGnGfTS05WZA VpE8gt68H4DqFoBoHYguYO6WhhfBBm91pNU4VdsaFuqovVu6am0gQko80UNd/cfY zQMAJ6MD1hEN3C8ZJhL2nduknRUi6I2Fww9NXfO1xaey5XlmV6kZU/017ch6+cH4 3WzV9KbTzzmZs5c2I1A6E9nqwSkv3y3HvDfJbn8nWisAPLXkUO5uRn+l20sujD2c qvfH03ZnX1AOKbxTPQhYXZpwbRhJhVb9qjwvzPpm5kJfZKsD6ueY5aGXh2I4YcpI u5sppQ6/7BDEmZ3air2XbOP1k7UlYpZ/VopemGQDImfky76Rocql+Hxf3QnMQLZ5 cw4GWQcya5r+HsZn/47U3QB1yf/azJ3eGpUddLO+tjgE7XYeFwzDGcHTOkJpQZ68 D1KejJkzqWp6KjxDEyUpYpI0DCcU6CmZcODh790Ib7OAIjKS7zgEYy7Eq+hRsHG/ 98E/Pb3CexKNpg8DVKpyaYbmMzLIjIpl/gK5F2c8uv40vjs5fbZW2tGaWCbwpJ4Q s0nbmroMy9Sj77B3XXb0n4H0fHbim7aXO3JhFMBr5oTrLlAs+xB/isMQmgZ+5ihX /yy4ilipJ82QCAKRG6tM1Mx7vz3jioSCYuiLAgMBAAGjggQNMIIECTCBsgYIKwYB BQUHAQEEgaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNo L2Fpci0xYjg2MzM4NS1mNGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYB BQUHMAGGRmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2Vk NS02NmU4LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwB AgEwCAYGBACPegEGMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8v cmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBR BgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5 NzIzYjItODY0MS00NjQyLTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwJAYDVR0RBB0wG4IZZGV2 LXplcnRpZmlrYXRlLmx1Y29ycC5jaDAdBgNVHQ4EFgQUcqkU5S7xcCWcIhIbF+Eg GkeKvmcwHwYDVR0jBBgwFoAU671/SZOMye7sorr3HNJn8IOx6t4wggH3BgorBgEE AdZ5AgQCBIIB5wSCAeMB4QB1AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0H E9MMAAABjVOaveYAAAQDAEYwRAIgMorMh8iP7jtOnU5bWZ2IhswXa9AftQh+AQA6 1ZNPKh4CIAexzmAQySeusz7hM+bdjWG+5gqyOGqcujcCNu9HercAAHcAzxFW7tUu fK/zh1vZaS6b6RpxZ0qwF+ysAdJbd87MOwgAAAGNU5rAVAAABAMASDBGAiEApLgI QlJW5o8mRAx91fP6+vsjw9T2XzBSBK+P7iUqt5QCIQC4mS2CAa8n4l5PdFBD4arv avhmzfuNokiU7+HE1wibmwB3AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+VMD+ TA2wAAABjVOawyMAAAQDAEgwRgIhAOs5Ry1R6F/uTiofO17uPTPWOXI10urqfI2S FVCgBjjyAiEAuLR/UyBPEv9ZwhcjekIVKQ2RVivqtX4gLU5UdD8JpHMAdgBOdaMn XJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY1TmsQ4AAAEAwBHMEUCIQCh /YwFf4tmaWMp5giRAxLFzU84zxdH3Anl8Mn+lqhMvwIgV4TT4lpgCszF4/qbtaD4 LyB3aPjDgNosbxI+kzmefrEwDQYJKoZIhvcNAQELBQADggIBADequbMdmOFOWN9a l3K3tvYiBRCEA7gntcbd3uap7p0PMkOnf77FvhAySD5wqvq/Nfhc8rJIRVWgwAy9 Ahgt7RxiOIFOOiwnfHwxwj7BRffwpuA0Fy8fXmTR+6KMu9nFaFxOt5azWJ+FxauV 8wBK41SSxq01FJZDgt98WAZJmPe+RT8kTkMENuOdRmB9MMnGxan9wzvE1XH+bArI PwNFQmm8aSi3+k+4MKl8uAIpclv8u4ZYZ4sXIMxM0ZxGvi4OHfSIgAHWJVaVUcXf AKcmbtyUnc8J4YK4TrvKXSMoNvoDW2rJMHmjpH/XOgNiWYGX2ZVeO2kaQTs7S7Rz n9Lbl/5PPAXmDyfLRMhDostlMjGWNFW5Jprn9ZCwypFwZWDM3ugAdaiCkZgyFABC PmmidzN0a3B5PYG/gd1k6xebIMAhIqzXLYcNS7Y2uAAQlRMi7dpxCec5dFFan6Q0 V095YdkSpJfmffrjv4F4IC3pxFa2Ny41w7mDiJ1PygFKDv11kJBX0au/F7SPNnxi EcV/GiqG7KgmysxsiQZ1U1WzwdhNvk7MIqd2evxoNaaH4EWJMCPX7rR/Jo1q0wAI SK2+yJcBID4M4iVHje6aJ8w7yYLx3dG32NYcrDczUbtoH3amkUDushuthgjOs3bK x4AvO8pHlw5LpicIYxffUubY0uNH -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkE/DVkM8AKu3pGp6UzoH UiC4mqC4UUbxLF/2EywQgpegknTr49OjYwXpe3e0acZ9NLTlZkBWkTyC3rwfgOoW gGgdiC5g7paGF8EGb3Wk1ThV2xoW6qi9W7pqbSBCSjzRQ139x9jNAwAnowPWEQ3c LxkmEvad26SdFSLojYXDD01d87XFp7LleWZXqRlT/TXtyHr5wfjdbNX0ptPPOZmz lzYjUDoT2erBKS/fLce8N8lufydaKwA8teRQ7m5Gf6XbSy6MPZyq98fTdmdfUA4p vFM9CFhdmnBtGEmFVv2qPC/M+mbmQl9kqwPq55jloZeHYjhhyki7mymlDr/sEMSZ ndqKvZds4/WTtSViln9Wil6YZAMiZ+TLvpGhyqX4fF/dCcxAtnlzDgZZBzJrmv4e xmf/jtTdAHXJ/9rMnd4alR10s762OATtdh4XDMMZwdM6QmlBnrwPUp6MmTOpanoq PEMTJSlikjQMJxToKZlw4OHv3Qhvs4AiMpLvOARjLsSr6FGwcb/3wT89vcJ7Eo2m DwNUqnJphuYzMsiMimX+ArkXZzy6/jS+Ozl9tlba0ZpYJvCknhCzSduaugzL1KPv sHdddvSfgfR8duKbtpc7cmEUwGvmhOsuUCz7EH+KwxCaBn7mKFf/LLiKWKknzZAI ApEbq0zUzHu/PeOKhIJi6IsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 521365692068730954882272925493808330184108472119 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 05:04:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 05:04:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-zertifikate.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 588739858266146169376912386341595959600818767124257156044980816188421228847066181126740942557088377083747901729107201957159686537506574099972692870272904198859307083442303285149955960236935237455964470388555897022182334169237495332123288522496142093452427866780303183536885563791088012057021099589003073391379390345178803976112139340953345951826449488295042209060094684766170655596239155938727620145393965040014761973843750695566134415400137360483366051356892893474829810063844528947796506948120506517481827911350112138487686101544024047513462115871977108553582155730813543389436792732981908441860042681144666987128435045520147894633741606459918283335085909775015886815372119669024058521758892828923867106602644335358467970823170641102830743924519254821990814634082251081143905194602936965188888796365621512926893129094513334069291397851768408345997817568539501442826571109907205900634944797862246609529328337151059670388313586501085900464035534062274160124127587215032751788241125004019339960150239541739121783470165190748165499314397370444490350228744027761269556517508271480320919705811275967001006920145190793367705000970500286908039662227439263113709457398602706942048771747792720274491813781617984818138529505783738176840591499 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-zertifikate.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 72a914e52ef170259c22121b17e1201a478abe67 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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