int-ecm-trans.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 0f:e2:63:14:81:3d:63:73:f1:64:f4:42:de:33:81:60:16:81:6f:43 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=int-ecm-trans.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:e2:63:14:81:3d:63:73:f1:64:f4:42:de:33:81:60:16:81:6f:43Serial Number (int): 90683461070969255085793671715657239228242292547
Serial Number lenght: 156 bits, 20 octets
SubjectKeyId: 28:a9:a2:fb:bd:b8:2a:c3:89:b4:7d:92:3c:00:12:68:97:1f:9c:42
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 07:0c:e5:6f:d4:56:fc:04:97:e5:1d:06:19:70:5d:6b:7d:c9:e7:74
Fingerprint (sha256): 05:df:08:15:6c:6a:a6:41:79:7d:dd:55:24:09:61:fe:7f:de:d6:3d:37:03:3e:03:04:42:2d:68:df:ec:7c:db
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate int-ecm-trans.lucorp.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for int-ecm-trans.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
int-ecm-trans.lucorp.ch
norma4040172.lucorp.ch
norma4040172.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for int-ecm-trans.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJJjCCBw6gAwIBAgIUD+JjFIE9Y3PxZPRC3jOBYBaBb0MwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDExMTE0 MzQyOVoXDTI1MDExMTE0MzQyOVowIjEgMB4GA1UEAxMXaW50LWVjbS10cmFucy5s dWNvcnAuY2gwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDQ3IUJ5Ze9 qN5bvPbj/xMJPvX7FTn5gSW/MFtgXl2qZ2yDOdYoHQDJenvOTBhWn2Ye9z8kSbib aKUOQ51ksPyTcwR3UQ0kR2g5pm6qoI2PPsq171OIQEg/f5hH3Ou8wwHV+Cr/w774 eXRA03NpinzhVCZd5VjCGllLSIVARs6JB0gGY/tSCJdcPwg5vFDJgBK+2X5/XAHl 3U7to4QQHEo0EE+JmZcaSdZ7SU23tEslFaogbuEQ12sjBQTKHRJCyCDdwWwbX6za vG8QitC4P0ZzI12K3uHoIwzlejbVpsWwDUptsAU2vAIJJa400bNfoXqtI+wy88zH n36UKNAURtvLdoXxrFODBHBQ3uYyvb+3j2gfqPi2F3G7wpMP3qKjdCaCuXQtneen BUJVouows0eBz/g6m6enqMYb5/BOZEgPmAZ2xC3v1etJFr9lyjb+7e6hwY5dLA5k J3JgiM3OSsi46Lc6dP85qm02xRhEFzDpyzFFloD3Y/8cCUDYy1SJpUiZRGuf5vzg ALaBantmMw5fIwDZ+ICf47GA26ddwAF/o5lefm9ERPF2x+SBjVTiNUmi/1oZmp96 nvaPO6Qsmt499EcuOkm5b5wS0ID8OqA2f6qsag4MCFa3mt/oIP0zL4aQ07/wCa0K qGad5J7TCl95OPgAMCjIp+myC2o7Hr3M7QIDAQABo4IEJDCCBCAwgbIGCCsGAQUF BwEBBIGlMIGiMEwGCCsGAQUFBzAChkBodHRwOi8vYWlhLnN3aXNzc2lnbi5jaC9h aXItMWI4NjMzODUtZjRhOS00N2ZhLTg4YTUtMmE1YWJmZDRhMTY3MFIGCCsGAQUF BzABhkZodHRwOi8vb2NzcC5zd2lzc3NpZ24uY2gvc2lnbi9vY3MtYWFjY2NlZDUt NjZlOC00MDY5LTliMWItZmQyOWFiNzNlZmVjMG8GA1UdIARoMGYwCAYGZ4EMAQIB MAgGBgQAj3oBBjBQBghghXQBWQIBATBEMEIGCCsGAQUFBwIBFjZodHRwczovL3Jl cG9zaXRvcnkuc3dpc3NzaWduLmNvbS9Td2lzc1NpZ25fQ1BTX1RMUy5wZGYwUQYD VR0fBEowSDBGoESgQoZAaHR0cDovL2NybC5zd2lzc3NpZ24uY2gvY2RwLTY3OTcy M2IyLTg2NDEtNDY0Mi04NTAwLWY2ZDJmZjM3ZTZiYTAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDgYDVR0PAQH/BAQDAgWgMDoGA1UdEQQzMDGCF2ludC1l Y20tdHJhbnMubHVjb3JwLmNoghZub3JtYTQwNDAxNzIubHVjb3JwLmNoMB0GA1Ud DgQWBBQoqaL7vbgqw4m0fZI8ABJolx+cQjAfBgNVHSMEGDAWgBTrvX9Jk4zJ7uyi uvcc0mfwg7Hq3jCCAfgGCisGAQQB1nkCBAIEggHoBIIB5AHiAHcAVYHUwhaQNgFK 6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAGM+PIt1QAABAMASDBGAiEAnPafWCXS XpyMIOWcRjnrC5GyOt5pZAFlPJW0TsG/GxYCIQD+YsUZN03WZsJwJMzvmOb/1KKh DC2QwiHZvoYogpg9LgB2AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsI AAABjPjyLuMAAAQDAEcwRQIgHUW+7UOvwuCY3pJUpOZOvdM0zLg+eiajwUyvjwXw lpkCIQDkdmisr9dnBDiB0BOGVC2jr3hun4m250CNjdlx9ay6TwB3AMz7D2qFcQll /pWbU87psnwi6YVcDZeNtql+VMD+TA2wAAABjPjyMbwAAAQDAEgwRgIhALVo5oSF BmfVAtTSfVJ4jjqCTFZnYcuG/Tv5b5IGoOAPAiEA2vBZVmDQsPFCCtOuD1111UBa oy86kXvi4ehiAVLOnTUAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo5 3wAAAYz48jLnAAAEAwBHMEUCIC8R6VutDjffXDi5on8c6uTK+6AV98GXPS2qqy1t Y4S1AiEAmLiQWyBlLdcWVsycntvFr3QBA6wb7irBUOsGlrInik0wDQYJKoZIhvcN AQELBQADggIBAD6l4Ce5Cj0HkFP0BmrXIcWMgZWK3cVx7nfJKcgdyt5pVBWEXX0h FZVcVIG5RCDyC8OdT+2zHz+WwWd4H+neiCfOhPEk6El9S/6zyOZac0OrVYRMZ0eJ uGRQXtccpbMGYXbEFW6SWr7Mrs+hUN9nufo0pfUm8+LB1foU8I5RPI2PEpQouVpp 7xTrezCk+u93ck6LYdPwS9Lydw5oAhQ7vxfEihOwgwR8fkRTfh6DRVv3gPYh57GD rG3L51uB5QVvFBP7ljU9optGi53r73zCF756tnGyVWDVAG8wI4EHttqfKF53jiIG W79fuqhvVmdBPIMJfZPhpXFTLklNJptO7zoV14ZBhENLnCXGsg1+8U9R5eUIJ+z8 hZT88kv+TxluHA4WoZ6vjfXkkzyRlObavNJubnFjK06+EZohJp7Iig3xTOkGV3dz voq2xiT4fSi/pmMaHnLEM4ulhMjPS9q3T3tKxFVXO65R4Lw8zw6CWsc6RSZf1Gl/ nAljdN32jfWyUbzlRUGqkPerzJWzVBXUviU9LvncOLC0ShjF8JFaxYVmOWkatDRM 8KWJDLQ4a+VFnByQgNqK54FiThnnVS+O4dugPRva+V524ea8zBJs1LZxL5mw+2O9 VB+NJDlQnHdYp9UQZdQJPF0120aZWR8+LrN7D3qF0Jop226lJw9c3gNV -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0NyFCeWXvajeW7z24/8T CT71+xU5+YElvzBbYF5dqmdsgznWKB0AyXp7zkwYVp9mHvc/JEm4m2ilDkOdZLD8 k3MEd1ENJEdoOaZuqqCNjz7Kte9TiEBIP3+YR9zrvMMB1fgq/8O++Hl0QNNzaYp8 4VQmXeVYwhpZS0iFQEbOiQdIBmP7UgiXXD8IObxQyYASvtl+f1wB5d1O7aOEEBxK NBBPiZmXGknWe0lNt7RLJRWqIG7hENdrIwUEyh0SQsgg3cFsG1+s2rxvEIrQuD9G cyNdit7h6CMM5Xo21abFsA1KbbAFNrwCCSWuNNGzX6F6rSPsMvPMx59+lCjQFEbb y3aF8axTgwRwUN7mMr2/t49oH6j4thdxu8KTD96io3Qmgrl0LZ3npwVCVaLqMLNH gc/4Opunp6jGG+fwTmRID5gGdsQt79XrSRa/Zco2/u3uocGOXSwOZCdyYIjNzkrI uOi3OnT/OaptNsUYRBcw6csxRZaA92P/HAlA2MtUiaVImURrn+b84AC2gWp7ZjMO XyMA2fiAn+OxgNunXcABf6OZXn5vRETxdsfkgY1U4jVJov9aGZqfep72jzukLJre PfRHLjpJuW+cEtCA/DqgNn+qrGoODAhWt5rf6CD9My+GkNO/8AmtCqhmneSe0wpf eTj4ADAoyKfpsgtqOx69zO0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 90683461070969255085793671715657239228242292547 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 14:34:29 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 14:34:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-ecm-trans.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852080191982676970297010793722774330667312053601273707085582176713283438028078208655167111526767930005851663863715919348446206161933801448220740449837873395395486029022366730548492566700181393869544188724133709979709492450304826895965475051558798891171511548753702122519792406489790440731864683374857333216825593783643863079307364365083117980475028620768675792746019168315825038801930617771346454701872288274391617574338388823127020113534054619070356708171200623250305190639900087851473258943180294629565178132559366683602396565505944204160519595309513885390448045038706129501705996724323686520569055068981589311723177611471763865893265483616857667503326251243309725102267098182767139657248289698361050390398093953771314834112276322959526168888212015864919565929842579431960701665763740709613602520874847329735158495022688566756100551389999041837957043579492701136452561937720315833847606157766946184176546664154049751678818838639308105544744562214586778159688340310414005044667026759551053625758577952702198111654284327365052534955385065541332621761081343211864058033554086191418292193595707245101160434290034846744030988515865094809941858544328783244771352312015216418517244360214853130087651861819753369691610858064539234011565293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-ecm-trans.lucorp.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma4040172.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 28a9a2fbbdb82ac389b47d923c001268971f9c42 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 003ea5e027b90a3d079053f4066ad721c58c81958addc571ee77c929c81dcade695415845d7d2115955c5481b94420f20bc39d4fedb31f3f96c167781fe9de8827ce84f124e8497d4bfeb3c8e65a7343ab55844c674789b864505ed71ca5b3066176c4156e925abeccaecfa150df67b9fa34a5f526f3e2c1d5fa14f08e513c8d8f129428b95a69ef14eb7b30a4faef77724e8b61d3f04bd2f2770e6802143bbf17c48a13b083047c7e44537e1e83455bf780f621e7b183ac6dcbe75b81e5056f1413fb96353da29b468b9debef7cc217be7ab671b25560d5006f30238107b6da9f285e778e22065bbf5fbaa86f5667413c83097d93e1a571532e494d269b4eef3a15d7864184434b9c25c6b20d7ef14f51e5e50827ecfc8594fcf24bfe4f196e1c0e16a19eaf8df5e4933c9194e6dabcd26e6e71632b4ebe119a21269ec88a0df14ce906577773be8ab6c624f87d28bfa6631a1e72c4338ba584c8cf4bdab74f7b4ac455573bae51e0bc3ccf0e825ac73a45265fd4697f9c096374ddf68df5b251bce54541aa90f7abcc95b35415d4be253d2ef9dc38b0b44a18c5f0915ac5856639691ab4344cf0a5890cb4386be5459c1c9080da8ae781624e19e7552f8ee1dba03d1bdaf95e76e1e6bccc126cd4b6712f99b0fb63bd541f8d2439509c7758a7d51065d4093c5d35db4699591f3e2eb37b0f7a85d09a29db6ea5270f5cde0355