*.ops.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 26:22:e4:45:94:34:bb:7d:92:1d:48:65:ea:fd:48:03:7e:a2:23:49 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ops.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 26:22:e4:45:94:34:bb:7d:92:1d:48:65:ea:fd:48:03:7e:a2:23:49
Serial Number (int): 217719759905731247560808860544512195012782596937
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 61:ac:5c:6b:16:ab:4f:7c:ee:22:bf:24:77:91:34:e4:da:68:01:4b
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 1f:b2:4c:db:cd:f4:ef:59:c0:4b:f1:90:0f:5c:36:29:4c:47:a7:c8
Fingerprint (sha256): 06:3c:7f:8d:dd:85:11:cd:84:7a:e0:9a:84:49:4e:20:a9:4e:b8:af:b4:b9:6f:50:ec:0e:53:5d:99:33:9d:2d

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate *.ops.lucorp.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ops.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ops.lucorp.ch
ops.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for *.ops.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJgTCCB2mgAwIBAgIUJiLkRZQ0u32SHUhl6v1IA36iI0kwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTIzMDgxNDEz
Mzg1NVoXDTI0MDgxNDEzMzg1NVowGjEYMBYGA1UEAwwPKi5vcHMubHVjb3JwLmNo
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs5tELX7cIYI+0NEXmkgx
k6V7iywaB4Xs9H13tq9GvKlDAqR8OBakn3DGRT2gLydjiS/t2pMOpfvRoiMFYCJB
IgzO7Zr/Bj5C5WkuZpLlbhCVzGYwvXoxb0XGrYWefssIstiu0MT5lE5op5feEf1Z
3GfRSADAygZfKKdaLJO+7WRefrhCWENEnraFxO/rBsAobUfMuJAN7fp1JrJNsgaj
HM5KvhiWTIVwXa3ZBGvErz6CwEmQbupUvIikQXhnbbA4W1a2R+puTdDKI/JepgCs
Eejnq8TNd5LkOHhZCN7USFAyEv0BfPRk6Cy0nVoBZTD7sh0MVMi9Ww/3FMVgLZbH
KvCd6MKdJIRivOTXgA7UXvkQ4nB5pjsq5fV4UqgoHlfXn0qxo9+hIiQhHEZ4laVo
DMEmCKl27ybXCWk/HoH4rIm/SDmcvNpD7nrFXTOeJC8Cr3a4lfIGPExLaRdSlUez
EJ7XFdFXN6EmHkJY2pSTPVGdpQHG7zo4XpzII7wTMFdcZAMZDD9dJtb4Dr1RHda/
liU1/GlLTE18LBbSfXhLVF8ZlAxPO0scxzExogYgOThHrQkFFhq3uO1CQUNFUvbM
wNwPTgfwx9n1or1H44WsA1P3T6GtfzXJhoBsKOC+o3i18ajo3M2N+8v99UfIkFhb
8EworRzE7YELhqsyCiUHZiUCAwEAAaOCBIcwggSDMIGyBggrBgEFBQcBAQSBpTCB
ojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFiODYz
Mzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZGaHR0
cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgtNDA2
OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYEAI96
AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5
LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRKMEgw
RqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04NjQx
LTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMA4GA1UdDwEB/wQEAwIFoDApBgNVHREEIjAggg8qLm9wcy5sdWNvcnAu
Y2iCDW9wcy5sdWNvcnAuY2gwHQYDVR0OBBYEFGGsXGsWq0987iK/JHeRNOTaaAFL
MB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIICbAYKKwYBBAHWeQIE
AgSCAlwEggJYAlYAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAA
AYn0RWeuAAAEAwBHMEUCIQCR+Ufo4D6Dw3Cv9rgIpBTz0ZRLkTXRUHmLXsKO/p7/
DgIgVtsThtIuYETFgqFbLblnEYS+frBnhXyZxxAzddncS+4AdQDatr9rP7W2Ip+b
wrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYn0RWsMAAAEAwBGMEQCIAEw/MdzS4hx
+ot9rhRKcO0YWnRveoaHg0LmyUgEBqunAiAU/ZVqWesIvY0soN6CiZYEzn5Vp/N1
TrqrwZVsOflSTAB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB
ifRFbCwAAAQDAEcwRQIhAM6DyArIQcXGdjUZZZT2xPifFmLx/i1TMqgrYYtUYXX5
AiAcMVOmqS0wl6NrSPm7iEOjBnjwGvn/jBiy+ozyi85pewB1AO7N0GTV2xrOxVy3
nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABifRFbwwAAAQDAEYwRAIgWk4B5SKY7kP4
NYJXJH47bQBay5T9OD0/82Ae9cZiRCsCIEL9WGQ180wW3USCoii0lH8r45iCwvS7
MziWReUbRrXqAHYAh0+1DcAp2ZMd5XPp8omejkUzs5LTiwpGJXS/D+6y/B4AAAGJ
9EVzCQAABAMARzBFAiEAwWCNTIOtkv1vz/1cP31U0FVCznF52EJkl3wmrCnczJ0C
IA2i5kPKfOKYDmQTEel5XVZbjTrfXODtobVj3RkInL8sMA0GCSqGSIb3DQEBCwUA
A4ICAQBACspIPQ8HvujPTwYNpKN4igt3V/rx9O9FZpJpnFpV+fSg4Chm3sZ0JCXk
5TWn3FiCMWFU/VUAQOjUz03dlBmcKv9ORUNu2TKGAMBzI2uinEzBXmWFA9Ozfles
/+0tTrL6a5nOfQXiP2WbXGiiFq7X9ZlpzQA4qNaNibcVRGcJ4ZLTe6oLcRhzPFo3
cMBoU8yzKmZPAs2y5k1u9ac3iIlKh8/Ogl/pvZNb6etlSZE7cg3LHLkEW3nfYH/1
PQ9m3FIttlPcPBiBfm/xjiikuKrIS3rBHlzF6GqS8KWyk+n2Li88/Gi5J4k+39SF
YyVwk/ZRn3IBjJSI0LYzScvwK3AEvutiOTYHae91wBEUsJM+jS6WC9b6mEbuoyvN
imwxj5h8bLFONf2apyIVuavgJw/50QEM/U0TF3tHhjRCmrsH5UD/03tovM+Re08K
wrXPU0kJN6Z1mUyw50kuQoaSnDaSjJpNYYjyw5EqoJFKGfVQFECRiOTxOdeolC5s
CQAT408sfxAO02pDyiuIg7JDbSgdKRdPKIvWztklDVr42zSdnyhXnhKdTusFj6HA
kJjeN8AVvPRSyURwbW8o22YRoXt/5ndDt2eHRBV8kc9dQWTEm2j9j2Nh8hISa2b3
JKTtRM6A8nIx7Nyd7g2KiDTqSKA7uVQoQnB3EZ2IoUV1k+AHhQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 217719759905731247560808860544512195012782596937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 13:38:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 13:38:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ops.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732730629261993111570975385956422347281334781581395358548440449875615642370862805944881491612155822733719840012352305484002565524475562851168199070056338630635507225663462203777596169444139339072014752893310691164332160883055640232169601170493740825864990294238348292150411007000672139562286660007208271445574431206911065603941101079233894625929151561801651730431717290586439420041807913001495423494050557036719821864491419134289715200395505734676975077717582214273154594491544925385758951164461213722265380785501325477486619839629561108123214252733045547165823986743701622633032837893373489189692834374216446000761762721174468002239504062701588481042628454656150604015982637340790951156649265464053022240367523136686357558484119593782941339388511205586686916187470815183691248000034566143557493053180815863182440257693248540086148418087031753960841738914852277217886764651297372283349380048094431209597882789729251084481930844805155035320516448495207599433761842133668171911916738800023690444928564237682636246721349295322391900344916643154549648948942052768401411392788346567325420185606849139509077414141254899084719151630074793143685410984620279056119620747165667845141509154612971424650759046781299632318828443586109129768789541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ops.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ops.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61ac5c6b16ab4f7cee22bf24779134e4da68014b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER asn1: structure error: integer not minimally-encoded
<nil>
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 39285979253295477237726621461756499509104970126005966705188541588157390146542
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00400aca483d0f07bee8cf4f060da4a3788a0b7757faf1f4ef456692699c5a55f9f4a0e02866dec6742425e4e535a7dc5882316154fd550040e8d4cf4ddd94199c2aff4e45436ed9328600c073236ba29c4cc15e658503d3b37e57acffed2d4eb2fa6b99ce7d05e23f659b5c68a216aed7f59969cd0038a8d68d89b715446709e192d37baa0b7118733c5a3770c06853ccb32a664f02cdb2e64d6ef5a73788894a87cfce825fe9bd935be9eb6549913b720dcb1cb9045b79df607ff53d0f66dc522db653dc3c18817e6ff18e28a4b8aac84b7ac11e5cc5e86a92f0a5b293e9f62e2f3cfc68b927893edfd48563257093f6519f72018c9488d0b63349cbf02b7004beeb6239360769ef75c01114b0933e8d2e960bd6fa9846eea32bcd8a6c318f987c6cb14e35fd9aa72215b9abe0270ff9d1010cfd4d13177b478634429abb07e540ffd37b68bccf917b4f0ac2b5cf53490937a675994cb0e7492e4286929c36928c9a4d6188f2c3912aa0914a19f55014409188e4f139d7a8942e6c090013e34f2c7f100ed36a43ca2b8883b2436d281d29174f288bd6ced9250d5af8db349d9f28579e129d4eeb058fa1c09098de37c015bcf452c944706d6f28db6611a17b7fe67743b7678744157c91cf5d4164c49b68fd8f6361f212126b66f724a4ed44ce80f27231ecdc9dee0d8a8834ea48a03bb95428427077119d88a1457593e00785