www.lukb.ch

- Luzerner Kantonalbank AG -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 59:62:14:31:16:83:d1:41:d7:21:d0:ca:44:c5:92:29:bb:c8:f1:46 was issued on by SwissSign AG.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luzerner Kantonalbank AG

Company registration number: CHE-105.845.092
Organization: Luzerner Kantonalbank AG
Address: Pilatusstrasse 12
Postal code: 6003
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 59:62:14:31:16:83:d1:41:d7:21:d0:ca:44:c5:92:29:bb:c8:f1:46
Serial Number (int): 510287410582259784091292043594670161677959885126
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: a2:94:e9:89:55:2d:23:b0:71:ff:39:9d:c8:49:5a:92:23:0d:31:f3
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): b1:9d:7a:66:e7:74:53:9e:c5:58:86:8d:2e:41:59:46:b2:01:8f:9d
Fingerprint (sha256): 07:fd:9f:2f:e9:42:93:55:b3:8d:99:5f:a7:18:16:8a:9b:43:f3:02:21:05:5c:54:99:26:8e:22:a9:df:f3:68

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate www.lukb.ch

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lukb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boerse.lukb.ch
structuredproducts.lukb.ch
produitsstructures.lukb.ch
login.lukb.ch
maennliturm.lukb.ch
lukb.ch
noelliturm.lukb.ch
prodottistrutturati.lukb.ch
www.lukb.ch
maerkte.lukb.ch
www.funders.ch
ebanking.lukb.ch
boersenundmaerkte.lukb.ch
auth.lukb.ch
strukturierteprodukte.lukb.ch
pulverturm.lukb.ch
funders.ch
sp.lukb.ch

Other certificates including the domain name lukb.ch

(limited to 100 certificates)
report.lukb.ch
www.lukb.ch
pricetrends.io
webmail.lukb.ch
loren.propertyservicesexchange.com
www.bambiskitchen.com
www.lukb.ch
app.swipefwd.com
int-caml.lucorp.ch
variobend-dev.az2.at
metisengine.com
test-inba.lukb.ch
elixir.college
quote-push1.lukb.ch
pic-sportingindexacceptance.mentor.neccton.com
download.osmanturan.com
www.massagestudio-harmonia.ch
www.lukb.ch
staposetiti.com
www.joseantonioribeiro.com
inba.lukb.ch
www.lukb.ch
ggx01006-013.gadabout.games
nhayendathung.com
www.softcode.com
kigalirides.rw
uci-lukh-nwe-002.lukb.ch
jovanpetrov.com
login.source.topic.com.ar
www.lukb.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
www.softcode.com
call.telesastho.com
pxmystery.aureliencurti.fr
dev-ebics.lukb.ch
links.thevellaapp.com
kdvinhlong.xbot.com.vn
int-www.lukb.ch
secmail.lukb.ch
skillseastriding.co.uk
encaixat.webcoop.cat
api.freetrade.io
uci-lukt-np-001.int-ucc.lucorp.ch
www.syntacorp.com
qunying.es
staging.api.v2.tnsj.pt
dev-www.lukb.ch
www.anagramsgold.com
www.antonaparin.com
zerogermsmenus.com
listennow.usefulbots.com
auth.mqtizer.com
maximemivilledeschenes.com
na2.bqd.us
my2023.site
appl10-ocemd.lukb.ch
admin.loftyapps.com
kontakt.laburoso.ch
www.thuongthansohoc.vn
silvaconstructionandcleaning.com
stayc.re2fe.com
pruksamoney.co.th
maint-ebanking.lukb.ch
int-www.lukb.ch
todomundopurple.com.br
elektro-placzek.cz
reporting.oso-ai.com
quote-push2.lukb.ch
eas.lukb.ch
careers.lukb.ch
www.bidmytires.com
secmail.lukb.ch
sharefile.lukb.ch
uci-lukh-nwe-002.lukb.ch
secmail.lukb.ch
nlink.lukb.ch
secmail.lukb.ch
int-www.lukb.ch
vybinex.com
www.steelect.com
uci-lukh-np-001.ucc.lucorp.ch
www.dirtygoldfish.com
dev-www.lukb.ch
mo.lukb.ch
uci-lukt-nwc-001.int-ucc.lucorp.ch
mikulas.ddmpraha.app
apachi.app
mo.lukb.ch
juxco.de
appl06-ocemd.lukb.ch
int-www.lukb.ch
int-www.lukb.ch
webview.kairosgame.com
inba.lukb.ch
www.mvpsolutions.tech
uci-lukt-np-001.int-ucc.lucorp.ch
static.reality-overwritten.net
nbild.lukb.ch
eb99-www.lukb.ch

Certificate

The complete raw certificate details for www.lukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJPjCCByagAwIBAgIUWWIUMRaD0UHXIdDKRMWSKbvI8UYwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRVYgSUNBIDIwMjIgLSAxMB4XDTIzMDcwNzEx
MzQzOVoXDTI0MDcwNzExMzQzOVowgfIxEzARBgsrBgEEAYI3PAIBAxMCQ0gxEzAR
BgsrBgEEAYI3PAIBAgwCTFUxHTAbBgNVBA8MFFByaXZhdGUgT3JnYW5pemF0aW9u
MQswCQYDVQQGEwJDSDELMAkGA1UECAwCTFUxDzANBgNVBAcMBkx1emVybjENMAsG
A1UEERMENjAwMzEaMBgGA1UECQwRUGlsYXR1c3N0cmFzc2UgMTIxITAfBgNVBAoM
GEx1emVybmVyIEthbnRvbmFsYmFuayBBRzEYMBYGA1UEBRMPQ0hFLTEwNS44NDUu
MDkyMRQwEgYDVQQDEwt3d3cubHVrYi5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIP
ADCCAgoCggIBAKE4RPyCtGEfr+339yxYjwKLXwaViR58HstxgdFBTo2DSQlVWxFW
nuc7F0+JbpRjy08QE2e8EGP8nuDL4hrivkfYndCGiu7sdOppt26661hGJY1J8ZvC
GJ2cSC/Lafj6F1HIP1j24Bn/BBKksNznV1xrmnLqUNt55MkRUjLuaWvo8psZlRKH
cyoB6C0b8K/2j9GmHXREZ7KhwP5HErBjU26EqjqoyRFvXlD/5In2J5J+hv1ujhs7
taE6eZv6P5Dn9tfn+ulPCJAs+Cq7RXKLLV0Q3hpxZswUR8cNObBOfdwGNrPE2aWs
4b8EdQhimlEdVaLfJgxLwD+TFzj66U5MHf0h8POlNcI+4nglKilfOecemZ1A53Hu
CkxQmAzsQCsWH850QAbraZOmlGkN7yD8znt1k9l7fJ3MgQ2zmI8W+Kyz90Ogr5/C
Pf1NjGSga8JbPX4u6OxEpj4vt84pUlBn//klHxDWSwuiJa4cJpbu/svJnF1tWDh+
/4z3eVFG/i05oY5RqL516xk/G8K6x4PY/TBrU9/AetML1gqPJGqQRkE+AN1AmVKx
EEkRzZjI/mgwMl6xnFV7SNrwf48evYiTuLrdMADfUwDoECJZnvI3GaFGFg+NBa41
kXQzg1/i0Odx/s350GcQMCnGYojhmGwkcV6NVDwAMwwUdbi/X6yrxHZ7AgMBAAGj
ggNrMIIDZzCBsgYIKwYBBQUHAQEEgaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9h
aWEuc3dpc3NzaWduLmNoL2Fpci0yMDM1MDE1OS04MTNkLTQ1MzItYjk4OC04NTE5
ZWNhNTc2NTAwUgYIKwYBBQUHMAGGRmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9z
aWduL29jcy1hYWNjY2VkNS02NmU4LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbgYD
VR0gBGcwZTAHBgVngQwBATAIBgYEAI96AQQwUAYIYIV0AVkCAQMwRDBCBggrBgEF
BQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWdu
X0NQU19UTFMucGRmMFEGA1UdHwRKMEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3Nz
aWduLmNoL2NkcC05ZmRkOTEwZS1iOWZmLTRiMmYtYmUzOC0yZTkzNzA4YzFiMzYw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDCC
AWcGA1UdEQSCAV4wggFagg5ib2Vyc2UubHVrYi5jaIIac3RydWN0dXJlZHByb2R1
Y3RzLmx1a2IuY2iCGnByb2R1aXRzc3RydWN0dXJlcy5sdWtiLmNogg1sb2dpbi5s
dWtiLmNoghNtYWVubmxpdHVybS5sdWtiLmNoggdsdWtiLmNoghJub2VsbGl0dXJt
Lmx1a2IuY2iCG3Byb2RvdHRpc3RydXR0dXJhdGkubHVrYi5jaIILd3d3Lmx1a2Iu
Y2iCD21hZXJrdGUubHVrYi5jaIIOd3d3LmZ1bmRlcnMuY2iCEGViYW5raW5nLmx1
a2IuY2iCGWJvZXJzZW51bmRtYWVya3RlLmx1a2IuY2iCDGF1dGgubHVrYi5jaIId
c3RydWt0dXJpZXJ0ZXByb2R1a3RlLmx1a2IuY2iCEnB1bHZlcnR1cm0ubHVrYi5j
aIIKZnVuZGVycy5jaIIKc3AubHVrYi5jaDAdBgNVHQ4EFgQUopTpiVUtI7Bx/zmd
yElakiMNMfMwHwYDVR0jBBgwFoAUSVLfMIaSWV80nCVIJKvA69EG8tYwEwYKKwYB
BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAFdVol6veeF1nHv0qDav
6iXhr2D6OvEqiCtR8AlQxD+NaQ/9qyyzGspkeASL0dnj+K+WcdpIoSYXJ8MkEpZV
wvUq8Nw24FEW7E2c7SKxKCOqKNFz9srY5jEcgEvi+ZtmuIV8E0SO46E6AOX1/yqs
PbJQ/1xXJfFwTiDAHcbyH8NYUoVGIBN4HNfbW6evmyFYB1+NAqdAhKehx+bAVuOp
BwrrFe+me/mRtCoIiLhfvtw9q0G71d8lLsEBcMF8hNSjQVROwkmaQCT2yFGoXiSb
nrWwxHMN6Da5MK6c7ha0NzIdOmI1aPSvP0oGSeaySLN3XVu3XV1HeJk9is4zIU55
wf3qhWxpxDJVCUagSkl1VGfbC1GeygJCrMqnTP0axmOo0TRCQ3/oreXKeUA4ALog
WdexpAbQoxasbNbJiLRkpfcahC0kI5JSfT6HCXIo88JDXluOCELWELMx0dLiqjHW
CCYMDnHgyUI/VF7VI5dGPA3r/uB2pGoNMLjJSf0cDI0c0CETS3ar6dhJdE+fz3cb
b7n+50TBrpNIkaEcPdNTkMoESiYnHmt5yFXN+oYUJaAqlVTRrhyCZtasTPjMsvNR
EkLP78+rBLKJ9bW9DCVA7RhCOm04DnGwcCd8HlTYSj64w0XkA7eIP4UHjCKWRYkh
jPsLPc0OKOSV5p1ARv2MwjAg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 510287410582259784091292043594670161677959885126
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 11:34:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-07 11:34:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pilatusstrasse 12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzerner Kantonalbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-105.845.092'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657719411522160382782376125946160432297888787292957433494692271322856855745127785923714873714360432526472575195919608074070568432107150077239070722572006587738598016081365244611242789760539896773896254087580832464847334017010928643416577403511010685737952248569148774693475192781868489647993327613056557402969615006050534906800626247045319357336950202373258640769665725209697718025480149865214643246284878389294760276428046589778010701077670373168715494817216933209307451181047355818089984642548754083489537322763114162310619084036982425708588906617868814319730035616761358936539334982754878805489121339963300905924158263643604451207677624401546077462468592339802452084741377394934372614070520394869565861457503639803856151266195170706265817888779088264618029099914651510755432392413436502980562125102775956803696430489761370674671580098029332060358838391534089389220199359038788966389411807505413566309130595434725231624016336666939991295875956252231871301930606496347917075020015881693239572314095252783361598822485398509398861540062796165685648516152830288305620172233702440826383597537576243237799999612943115632176649972742229731157488211247994347113824219136160145414103605126093787733482678616595079627280986960750643819869819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boerse.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'structuredproducts.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produitsstructures.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maennliturm.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noelliturm.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodottistrutturati.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maerkte.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funders.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersenundmaerkte.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strukturierteprodukte.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulverturm.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funders.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.lukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a294e989552d23b071ff399dc8495a92230d31f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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