*.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 0e:9e:c1:89:63:84:a4:77:53:47:d2:88:0a:46:5f:87:4e:8e:3d:ac was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:9e:c1:89:63:84:a4:77:53:47:d2:88:0a:46:5f:87:4e:8e:3d:ac
Serial Number (int): 83466247955052980228932641161847261424614522284
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 15:9d:61:22:13:91:a0:e2:7a:2d:45:cf:3e:c0:42:86:a7:49:78:a0
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 9a:39:c4:ca:10:40:63:fc:1f:32:0c:09:01:6e:52:a3:ee:7a:51:96
Fingerprint (sha256): 0c:24:b4:15:17:12:da:8c:cf:c0:57:a9:ce:6c:eb:aa:ce:39:67:db:0e:72:59:4a:9a:bc:ba:e5:d0:b5:48:c9

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate *.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for *.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 83466247955052980228932641161847261424614522284
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 11:51:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 11:51:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696266304064393720759334905585313315026587585563087231956147334273679196910088053155379327952317102888102643609622209611909773285668818990756533081027694653582492963648042646156941153171137509877023150003657453009143744202292191432708782559003240695868918228228843062198067086345932759898480723076983009310489843340655654600445517614226905439176209552930159793977308322283582438075330729176542419075925560627537941114803010789316026203934705320904320893259120654823252631931133076288201356988985516680141270627107478288230467309496838191947591508042025200326844562885767140011935498338326684727163812852311911837035370690603188785841868944130133283823289796059468997368530157275534424002910599373104194261134002872250921976274712789716434471120599478033845462857768087522702887781019512165167999512954881618204222863209269681092236821572944026060006710492679583741010593407035803774576050737088782194471428271624417564488765797990591504940228536303214890562028337149449029947314833564899067732845576308533221554264143944224219055617831089983752980661064209852620051783926750715960894521150561379062874959230291495212151193434313344985943073596154785625684965777688803441029986852561420943330404753915243268993123719085134317560254161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							159d61221391a0e27a2d45cf3ec04286a74978a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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