norma4040044.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 4e:0e:08:81:89:bc:bc:2d:53:6d:22:40:ad:cb:24:56:7d:4e:eb:d0 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=norma4040044.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:0e:08:81:89:bc:bc:2d:53:6d:22:40:ad:cb:24:56:7d:4e:eb:d0
Serial Number (int): 445614231534835902413231694611584949645187410896
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 3e:5c:7f:b5:26:1b:f0:bb:7e:a2:b8:23:48:fe:e8:f8:5d:ff:08:e8
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): dc:5b:ea:a4:8c:6f:fc:15:7d:59:50:49:73:34:bd:22:9b:b1:fe:d0
Fingerprint (sha256): 0c:dc:84:94:7c:65:bb:f2:18:eb:a5:d9:6e:3b:24:b3:3b:d7:23:54:db:bb:30:a7:76:1b:a7:83:00:2b:f4:28

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate norma4040044.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for norma4040044.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

norma4040044.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for norma4040044.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 445614231534835902413231694611584949645187410896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 08:37:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-07 08:37:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'norma4040044.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 652522509409691324444296881238730394903844725465597472411337105088640382820588534011417307913702112817461675621026974464209134207695258797081294904961107474975782576524222761883060444691260463205861788830973251354365333172856749250741160535833655229185691020451098889192049017041243400132540524922195954072673596663742679357126646937699578768960462712116957643805849019191457400260799669686834720347020675560919350513303170079740943729189865724823815971022345867135481699430076687804184931286530928800408084848574249412511680635373385041958024707167292768790979721255759724278971714652827907872443653383176185683014348120826835692028442057299578032616794930741915433000531020620695789525532250539093416704859113239425647590184935347636163293208144132565639618651979972255629084991805952485279228860008791804565552538105022565706358670077697698626302439463445507037353391968404633241491969656505475228561158084438982154503802259776210819523218004070993400674192982625690257511007259460937405095764878970611503848597338848336526283752574131726303409328578544032701027924200352212745672645211500326346827385007039691364259970676491061125996860565483253902017835377768499357946248656960055929328563238654136625412023831177768172672219013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma4040044.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e5c7fb5261bf0bb7ea2b82348fee8f85dff08e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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