*.ops.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 26:22:e4:45:94:34:bb:7d:92:1d:48:65:ea:fd:48:03:7e:a2:23:49 was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.ops.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 26:22:e4:45:94:34:bb:7d:92:1d:48:65:ea:fd:48:03:7e:a2:23:49Serial Number (int): 217719759905731247560808860544512195012782596937
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: 61:ac:5c:6b:16:ab:4f:7c:ee:22:bf:24:77:91:34:e4:da:68:01:4b
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 1f:b2:4c:db:cd:f4:ef:59:c0:4b:f1:90:0f:5c:36:29:4c:47:a7:c8
Fingerprint (sha256): 06:3c:7f:8d:dd:85:11:cd:84:7a:e0:9a:84:49:4e:20:a9:4e:b8:af:b4:b9:6f:50:ec:0e:53:5d:99:33:9d:2d
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate *.ops.lucorp.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.ops.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.ops.lucorp.ch
ops.lucorp.ch
ops.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for *.ops.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJgTCCB2mgAwIBAgIUJiLkRZQ0u32SHUhl6v1IA36iI0kwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTIzMDgxNDEz Mzg1NVoXDTI0MDgxNDEzMzg1NVowGjEYMBYGA1UEAwwPKi5vcHMubHVjb3JwLmNo MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs5tELX7cIYI+0NEXmkgx k6V7iywaB4Xs9H13tq9GvKlDAqR8OBakn3DGRT2gLydjiS/t2pMOpfvRoiMFYCJB IgzO7Zr/Bj5C5WkuZpLlbhCVzGYwvXoxb0XGrYWefssIstiu0MT5lE5op5feEf1Z 3GfRSADAygZfKKdaLJO+7WRefrhCWENEnraFxO/rBsAobUfMuJAN7fp1JrJNsgaj HM5KvhiWTIVwXa3ZBGvErz6CwEmQbupUvIikQXhnbbA4W1a2R+puTdDKI/JepgCs Eejnq8TNd5LkOHhZCN7USFAyEv0BfPRk6Cy0nVoBZTD7sh0MVMi9Ww/3FMVgLZbH KvCd6MKdJIRivOTXgA7UXvkQ4nB5pjsq5fV4UqgoHlfXn0qxo9+hIiQhHEZ4laVo DMEmCKl27ybXCWk/HoH4rIm/SDmcvNpD7nrFXTOeJC8Cr3a4lfIGPExLaRdSlUez EJ7XFdFXN6EmHkJY2pSTPVGdpQHG7zo4XpzII7wTMFdcZAMZDD9dJtb4Dr1RHda/ liU1/GlLTE18LBbSfXhLVF8ZlAxPO0scxzExogYgOThHrQkFFhq3uO1CQUNFUvbM wNwPTgfwx9n1or1H44WsA1P3T6GtfzXJhoBsKOC+o3i18ajo3M2N+8v99UfIkFhb 8EworRzE7YELhqsyCiUHZiUCAwEAAaOCBIcwggSDMIGyBggrBgEFBQcBAQSBpTCB ojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFiODYz Mzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZGaHR0 cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgtNDA2 OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYEAI96 AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5 LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRKMEgw RqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04NjQx LTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG AQUFBwMCMA4GA1UdDwEB/wQEAwIFoDApBgNVHREEIjAggg8qLm9wcy5sdWNvcnAu Y2iCDW9wcy5sdWNvcnAuY2gwHQYDVR0OBBYEFGGsXGsWq0987iK/JHeRNOTaaAFL MB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIICbAYKKwYBBAHWeQIE AgSCAlwEggJYAlYAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAA AYn0RWeuAAAEAwBHMEUCIQCR+Ufo4D6Dw3Cv9rgIpBTz0ZRLkTXRUHmLXsKO/p7/ DgIgVtsThtIuYETFgqFbLblnEYS+frBnhXyZxxAzddncS+4AdQDatr9rP7W2Ip+b wrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYn0RWsMAAAEAwBGMEQCIAEw/MdzS4hx +ot9rhRKcO0YWnRveoaHg0LmyUgEBqunAiAU/ZVqWesIvY0soN6CiZYEzn5Vp/N1 TrqrwZVsOflSTAB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB ifRFbCwAAAQDAEcwRQIhAM6DyArIQcXGdjUZZZT2xPifFmLx/i1TMqgrYYtUYXX5 AiAcMVOmqS0wl6NrSPm7iEOjBnjwGvn/jBiy+ozyi85pewB1AO7N0GTV2xrOxVy3 nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABifRFbwwAAAQDAEYwRAIgWk4B5SKY7kP4 NYJXJH47bQBay5T9OD0/82Ae9cZiRCsCIEL9WGQ180wW3USCoii0lH8r45iCwvS7 MziWReUbRrXqAHYAh0+1DcAp2ZMd5XPp8omejkUzs5LTiwpGJXS/D+6y/B4AAAGJ 9EVzCQAABAMARzBFAiEAwWCNTIOtkv1vz/1cP31U0FVCznF52EJkl3wmrCnczJ0C IA2i5kPKfOKYDmQTEel5XVZbjTrfXODtobVj3RkInL8sMA0GCSqGSIb3DQEBCwUA A4ICAQBACspIPQ8HvujPTwYNpKN4igt3V/rx9O9FZpJpnFpV+fSg4Chm3sZ0JCXk 5TWn3FiCMWFU/VUAQOjUz03dlBmcKv9ORUNu2TKGAMBzI2uinEzBXmWFA9Ozfles /+0tTrL6a5nOfQXiP2WbXGiiFq7X9ZlpzQA4qNaNibcVRGcJ4ZLTe6oLcRhzPFo3 cMBoU8yzKmZPAs2y5k1u9ac3iIlKh8/Ogl/pvZNb6etlSZE7cg3LHLkEW3nfYH/1 PQ9m3FIttlPcPBiBfm/xjiikuKrIS3rBHlzF6GqS8KWyk+n2Li88/Gi5J4k+39SF YyVwk/ZRn3IBjJSI0LYzScvwK3AEvutiOTYHae91wBEUsJM+jS6WC9b6mEbuoyvN imwxj5h8bLFONf2apyIVuavgJw/50QEM/U0TF3tHhjRCmrsH5UD/03tovM+Re08K wrXPU0kJN6Z1mUyw50kuQoaSnDaSjJpNYYjyw5EqoJFKGfVQFECRiOTxOdeolC5s CQAT408sfxAO02pDyiuIg7JDbSgdKRdPKIvWztklDVr42zSdnyhXnhKdTusFj6HA kJjeN8AVvPRSyURwbW8o22YRoXt/5ndDt2eHRBV8kc9dQWTEm2j9j2Nh8hISa2b3 JKTtRM6A8nIx7Nyd7g2KiDTqSKA7uVQoQnB3EZ2IoUV1k+AHhQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs5tELX7cIYI+0NEXmkgx k6V7iywaB4Xs9H13tq9GvKlDAqR8OBakn3DGRT2gLydjiS/t2pMOpfvRoiMFYCJB IgzO7Zr/Bj5C5WkuZpLlbhCVzGYwvXoxb0XGrYWefssIstiu0MT5lE5op5feEf1Z 3GfRSADAygZfKKdaLJO+7WRefrhCWENEnraFxO/rBsAobUfMuJAN7fp1JrJNsgaj HM5KvhiWTIVwXa3ZBGvErz6CwEmQbupUvIikQXhnbbA4W1a2R+puTdDKI/JepgCs Eejnq8TNd5LkOHhZCN7USFAyEv0BfPRk6Cy0nVoBZTD7sh0MVMi9Ww/3FMVgLZbH KvCd6MKdJIRivOTXgA7UXvkQ4nB5pjsq5fV4UqgoHlfXn0qxo9+hIiQhHEZ4laVo DMEmCKl27ybXCWk/HoH4rIm/SDmcvNpD7nrFXTOeJC8Cr3a4lfIGPExLaRdSlUez EJ7XFdFXN6EmHkJY2pSTPVGdpQHG7zo4XpzII7wTMFdcZAMZDD9dJtb4Dr1RHda/ liU1/GlLTE18LBbSfXhLVF8ZlAxPO0scxzExogYgOThHrQkFFhq3uO1CQUNFUvbM wNwPTgfwx9n1or1H44WsA1P3T6GtfzXJhoBsKOC+o3i18ajo3M2N+8v99UfIkFhb 8EworRzE7YELhqsyCiUHZiUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 217719759905731247560808860544512195012782596937 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 13:38:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 13:38:55 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ops.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732730629261993111570975385956422347281334781581395358548440449875615642370862805944881491612155822733719840012352305484002565524475562851168199070056338630635507225663462203777596169444139339072014752893310691164332160883055640232169601170493740825864990294238348292150411007000672139562286660007208271445574431206911065603941101079233894625929151561801651730431717290586439420041807913001495423494050557036719821864491419134289715200395505734676975077717582214273154594491544925385758951164461213722265380785501325477486619839629561108123214252733045547165823986743701622633032837893373489189692834374216446000761762721174468002239504062701588481042628454656150604015982637340790951156649265464053022240367523136686357558484119593782941339388511205586686916187470815183691248000034566143557493053180815863182440257693248540086148418087031753960841738914852277217886764651297372283349380048094431209597882789729251084481930844805155035320516448495207599433761842133668171911916738800023690444928564237682636246721349295322391900344916643154549648948942052768401411392788346567325420185606849139509077414141254899084719151630074793143685410984620279056119620747165667845141509154612971424650759046781299632318828443586109129768789541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ops.lucorp.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 61ac5c6b16ab4f7cee22bf24779134e4da68014b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER asn1: structure error: integer not minimally-encoded <nil> . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39285979253295477237726621461756499509104970126005966705188541588157390146542 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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