int-ecm-trans.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 0f:e2:63:14:81:3d:63:73:f1:64:f4:42:de:33:81:60:16:81:6f:43 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=int-ecm-trans.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:e2:63:14:81:3d:63:73:f1:64:f4:42:de:33:81:60:16:81:6f:43
Serial Number (int): 90683461070969255085793671715657239228242292547
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 28:a9:a2:fb:bd:b8:2a:c3:89:b4:7d:92:3c:00:12:68:97:1f:9c:42
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 07:69:59:a9:aa:f3:a7:67:21:de:69:00:08:d4:c4:f0:ea:95:af:f6
Fingerprint (sha256): 07:87:cf:d7:47:de:df:0e:09:83:a2:7f:4c:4d:40:96:58:d8:02:72:c9:44:8e:09:75:ab:80:05:63:28:3b:d0

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate int-ecm-trans.lucorp.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int-ecm-trans.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int-ecm-trans.lucorp.ch
norma4040172.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for int-ecm-trans.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 90683461070969255085793671715657239228242292547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 14:34:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 14:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-ecm-trans.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852080191982676970297010793722774330667312053601273707085582176713283438028078208655167111526767930005851663863715919348446206161933801448220740449837873395395486029022366730548492566700181393869544188724133709979709492450304826895965475051558798891171511548753702122519792406489790440731864683374857333216825593783643863079307364365083117980475028620768675792746019168315825038801930617771346454701872288274391617574338388823127020113534054619070356708171200623250305190639900087851473258943180294629565178132559366683602396565505944204160519595309513885390448045038706129501705996724323686520569055068981589311723177611471763865893265483616857667503326251243309725102267098182767139657248289698361050390398093953771314834112276322959526168888212015864919565929842579431960701665763740709613602520874847329735158495022688566756100551389999041837957043579492701136452561937720315833847606157766946184176546664154049751678818838639308105544744562214586778159688340310414005044667026759551053625758577952702198111654284327365052534955385065541332621761081343211864058033554086191418292193595707245101160434290034846744030988515865094809941858544328783244771352312015216418517244360214853130087651861819753369691610858064539234011565293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-ecm-trans.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma4040172.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							28a9a2fbbdb82ac389b47d923c001268971f9c42
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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