int-ecm-trans.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 0f:e2:63:14:81:3d:63:73:f1:64:f4:42:de:33:81:60:16:81:6f:43 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=int-ecm-trans.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:e2:63:14:81:3d:63:73:f1:64:f4:42:de:33:81:60:16:81:6f:43
Serial Number (int): 90683461070969255085793671715657239228242292547
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 28:a9:a2:fb:bd:b8:2a:c3:89:b4:7d:92:3c:00:12:68:97:1f:9c:42
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 07:0c:e5:6f:d4:56:fc:04:97:e5:1d:06:19:70:5d:6b:7d:c9:e7:74
Fingerprint (sha256): 05:df:08:15:6c:6a:a6:41:79:7d:dd:55:24:09:61:fe:7f:de:d6:3d:37:03:3e:03:04:42:2d:68:df:ec:7c:db

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate int-ecm-trans.lucorp.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int-ecm-trans.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int-ecm-trans.lucorp.ch
norma4040172.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for int-ecm-trans.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJJjCCBw6gAwIBAgIUD+JjFIE9Y3PxZPRC3jOBYBaBb0MwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDExMTE0
MzQyOVoXDTI1MDExMTE0MzQyOVowIjEgMB4GA1UEAxMXaW50LWVjbS10cmFucy5s
dWNvcnAuY2gwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQ3IUJ5Ze9
qN5bvPbj/xMJPvX7FTn5gSW/MFtgXl2qZ2yDOdYoHQDJenvOTBhWn2Ye9z8kSbib
aKUOQ51ksPyTcwR3UQ0kR2g5pm6qoI2PPsq171OIQEg/f5hH3Ou8wwHV+Cr/w774
eXRA03NpinzhVCZd5VjCGllLSIVARs6JB0gGY/tSCJdcPwg5vFDJgBK+2X5/XAHl
3U7to4QQHEo0EE+JmZcaSdZ7SU23tEslFaogbuEQ12sjBQTKHRJCyCDdwWwbX6za
vG8QitC4P0ZzI12K3uHoIwzlejbVpsWwDUptsAU2vAIJJa400bNfoXqtI+wy88zH
n36UKNAURtvLdoXxrFODBHBQ3uYyvb+3j2gfqPi2F3G7wpMP3qKjdCaCuXQtneen
BUJVouows0eBz/g6m6enqMYb5/BOZEgPmAZ2xC3v1etJFr9lyjb+7e6hwY5dLA5k
J3JgiM3OSsi46Lc6dP85qm02xRhEFzDpyzFFloD3Y/8cCUDYy1SJpUiZRGuf5vzg
ALaBantmMw5fIwDZ+ICf47GA26ddwAF/o5lefm9ERPF2x+SBjVTiNUmi/1oZmp96
nvaPO6Qsmt499EcuOkm5b5wS0ID8OqA2f6qsag4MCFa3mt/oIP0zL4aQ07/wCa0K
qGad5J7TCl95OPgAMCjIp+myC2o7Hr3M7QIDAQABo4IEJDCCBCAwgbIGCCsGAQUF
BwEBBIGlMIGiMEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9h
aXItMWI4NjMzODUtZjRhOS00N2ZhLTg4YTUtMmE1YWJmZDRhMTY3MFIGCCsGAQUF
BzABhkZodHRwOi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUt
NjZlOC00MDY5LTliMWItZmQyOWFiNzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQIB
MAgGBgQAj3oBBjBQBghghXQBWQIBATBEMEIGCCsGAQUFBwIBFjZodHRwczovL3Jl
cG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYD
VR0fBEowSDBGoESgQoZAaHR0cDovL2NybC5zd2lzc3NpZ24uY2gvY2RwLTY3OTcy
M2IyLTg2NDEtNDY0Mi04NTAwLWY2ZDJmZjM3ZTZiYTAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDoGA1UdEQQzMDGCF2ludC1l
Y20tdHJhbnMubHVjb3JwLmNoghZub3JtYTQwNDAxNzIubHVjb3JwLmNoMB0GA1Ud
DgQWBBQoqaL7vbgqw4m0fZI8ABJolx+cQjAfBgNVHSMEGDAWgBTrvX9Jk4zJ7uyi
uvcc0mfwg7Hq3jCCAfgGCisGAQQB1nkCBAIEggHoBIIB5AHiAHcAVYHUwhaQNgFK
6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAGM+PIt1QAABAMASDBGAiEAnPafWCXS
XpyMIOWcRjnrC5GyOt5pZAFlPJW0TsG/GxYCIQD+YsUZN03WZsJwJMzvmOb/1KKh
DC2QwiHZvoYogpg9LgB2AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsI
AAABjPjyLuMAAAQDAEcwRQIgHUW+7UOvwuCY3pJUpOZOvdM0zLg+eiajwUyvjwXw
lpkCIQDkdmisr9dnBDiB0BOGVC2jr3hun4m250CNjdlx9ay6TwB3AMz7D2qFcQll
/pWbU87psnwi6YVcDZeNtql+VMD+TA2wAAABjPjyMbwAAAQDAEgwRgIhALVo5oSF
BmfVAtTSfVJ4jjqCTFZnYcuG/Tv5b5IGoOAPAiEA2vBZVmDQsPFCCtOuD1111UBa
oy86kXvi4ehiAVLOnTUAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo5
3wAAAYz48jLnAAAEAwBHMEUCIC8R6VutDjffXDi5on8c6uTK+6AV98GXPS2qqy1t
Y4S1AiEAmLiQWyBlLdcWVsycntvFr3QBA6wb7irBUOsGlrInik0wDQYJKoZIhvcN
AQELBQADggIBAD6l4Ce5Cj0HkFP0BmrXIcWMgZWK3cVx7nfJKcgdyt5pVBWEXX0h
FZVcVIG5RCDyC8OdT+2zHz+WwWd4H+neiCfOhPEk6El9S/6zyOZac0OrVYRMZ0eJ
uGRQXtccpbMGYXbEFW6SWr7Mrs+hUN9nufo0pfUm8+LB1foU8I5RPI2PEpQouVpp
7xTrezCk+u93ck6LYdPwS9Lydw5oAhQ7vxfEihOwgwR8fkRTfh6DRVv3gPYh57GD
rG3L51uB5QVvFBP7ljU9optGi53r73zCF756tnGyVWDVAG8wI4EHttqfKF53jiIG
W79fuqhvVmdBPIMJfZPhpXFTLklNJptO7zoV14ZBhENLnCXGsg1+8U9R5eUIJ+z8
hZT88kv+TxluHA4WoZ6vjfXkkzyRlObavNJubnFjK06+EZohJp7Iig3xTOkGV3dz
voq2xiT4fSi/pmMaHnLEM4ulhMjPS9q3T3tKxFVXO65R4Lw8zw6CWsc6RSZf1Gl/
nAljdN32jfWyUbzlRUGqkPerzJWzVBXUviU9LvncOLC0ShjF8JFaxYVmOWkatDRM
8KWJDLQ4a+VFnByQgNqK54FiThnnVS+O4dugPRva+V524ea8zBJs1LZxL5mw+2O9
VB+NJDlQnHdYp9UQZdQJPF0120aZWR8+LrN7D3qF0Jop226lJw9c3gNV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90683461070969255085793671715657239228242292547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 14:34:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 14:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-ecm-trans.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852080191982676970297010793722774330667312053601273707085582176713283438028078208655167111526767930005851663863715919348446206161933801448220740449837873395395486029022366730548492566700181393869544188724133709979709492450304826895965475051558798891171511548753702122519792406489790440731864683374857333216825593783643863079307364365083117980475028620768675792746019168315825038801930617771346454701872288274391617574338388823127020113534054619070356708171200623250305190639900087851473258943180294629565178132559366683602396565505944204160519595309513885390448045038706129501705996724323686520569055068981589311723177611471763865893265483616857667503326251243309725102267098182767139657248289698361050390398093953771314834112276322959526168888212015864919565929842579431960701665763740709613602520874847329735158495022688566756100551389999041837957043579492701136452561937720315833847606157766946184176546664154049751678818838639308105544744562214586778159688340310414005044667026759551053625758577952702198111654284327365052534955385065541332621761081343211864058033554086191418292193595707245101160434290034846744030988515865094809941858544328783244771352312015216418517244360214853130087651861819753369691610858064539234011565293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-ecm-trans.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma4040172.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28a9a2fbbdb82ac389b47d923c001268971f9c42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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