www.lukb.ch

- Luzerner Kantonalbank AG -

Issued by SwissSign RSA TLS EV ICA 2022 - 1

About this certificate

This digital certificate with serial number 5f:2d:3c:e9:3d:69:fd:0d:b6:1b:41:e2:0e:27:af:d2:b0:48:15:7f was issued on by SwissSign AG.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Luzerner Kantonalbank AG

Company registration number: CHE-105.845.092
Organization: Luzerner Kantonalbank AG
Address: Pilatusstrasse 12
Postal code: 6003
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 5f:2d:3c:e9:3d:69:fd:0d:b6:1b:41:e2:0e:27:af:d2:b0:48:15:7f
Serial Number (int): 543362962866779262485959645727932513658232903039
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: a3:2c:33:4d:9f:1c:b5:f0:4f:88:f7:05:90:1b:4a:eb:65:33:fb:f3
AuthorityKeyId: 49:52:df:30:86:92:59:5f:34:9c:25:48:24:ab:c0:eb:d1:06:f2:d6

Fingerprint (sha1): 0d:4c:bb:26:88:4c:65:10:74:01:64:36:6b:b8:c1:70:55:17:f1:09
Fingerprint (sha256): 0d:38:92:e9:67:fa:c1:67:bb:c0:12:e9:13:f6:b9:49:3a:7c:9d:5f:e0:9f:1f:97:73:c1:11:5c:89:0d:bd:e4

Issuing Certificate URL: http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36

Check the revocation status for certificate www.lukb.ch

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lukb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.lukb.ch
boerse.lukb.ch
boersenundmaerkte.lukb.ch
ebanking.lukb.ch
funders.ch
login.lukb.ch
luegislandturm.lukb.ch
lukb.ch
maennliturm.lukb.ch
maerkte.lukb.ch
noelliturm.lukb.ch
prodottistrutturati.lukb.ch
produitsstructures.lukb.ch
pulverturm.lukb.ch
sp.lukb.ch
structuredproducts.lukb.ch
strukturierteprodukte.lukb.ch
www.funders.ch
www.lukb.ch

Other certificates including the domain name lukb.ch

(limited to 100 certificates)
www.lukb.ch
pricetrends.io
webmail.lukb.ch
loren.propertyservicesexchange.com
www.bambiskitchen.com
www.lukb.ch
app.swipefwd.com
int-caml.lucorp.ch
variobend-dev.az2.at
metisengine.com
test-inba.lukb.ch
elixir.college
quote-push1.lukb.ch
pic-sportingindexacceptance.mentor.neccton.com
download.osmanturan.com
www.massagestudio-harmonia.ch
www.lukb.ch
staposetiti.com
www.joseantonioribeiro.com
inba.lukb.ch
www.lukb.ch
ggx01006-013.gadabout.games
nhayendathung.com
www.softcode.com
kigalirides.rw
uci-lukh-nwe-002.lukb.ch
jovanpetrov.com
login.source.topic.com.ar
www.lukb.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
www.softcode.com
call.telesastho.com
pxmystery.aureliencurti.fr
dev-ebics.lukb.ch
links.thevellaapp.com
kdvinhlong.xbot.com.vn
int-www.lukb.ch
secmail.lukb.ch
skillseastriding.co.uk
encaixat.webcoop.cat
api.freetrade.io
uci-lukt-np-001.int-ucc.lucorp.ch
www.syntacorp.com
qunying.es
staging.api.v2.tnsj.pt
dev-www.lukb.ch
www.anagramsgold.com
www.antonaparin.com
zerogermsmenus.com
listennow.usefulbots.com
auth.mqtizer.com
maximemivilledeschenes.com
na2.bqd.us
my2023.site
appl10-ocemd.lukb.ch
admin.loftyapps.com
kontakt.laburoso.ch
www.thuongthansohoc.vn
silvaconstructionandcleaning.com
stayc.re2fe.com
pruksamoney.co.th
maint-ebanking.lukb.ch
int-www.lukb.ch
todomundopurple.com.br
elektro-placzek.cz
reporting.oso-ai.com
quote-push2.lukb.ch
eas.lukb.ch
careers.lukb.ch
www.bidmytires.com
secmail.lukb.ch
sharefile.lukb.ch
uci-lukh-nwe-002.lukb.ch
secmail.lukb.ch
nlink.lukb.ch
secmail.lukb.ch
int-www.lukb.ch
vybinex.com
www.steelect.com
uci-lukh-np-001.ucc.lucorp.ch
www.dirtygoldfish.com
dev-www.lukb.ch
mo.lukb.ch
uci-lukt-nwc-001.int-ucc.lucorp.ch
mikulas.ddmpraha.app
apachi.app
mo.lukb.ch
juxco.de
appl06-ocemd.lukb.ch
int-www.lukb.ch
int-www.lukb.ch
webview.kairosgame.com
inba.lukb.ch
www.mvpsolutions.tech
uci-lukt-np-001.int-ucc.lucorp.ch
static.reality-overwritten.net
nbild.lukb.ch
eb99-www.lukb.ch
inba.lukb.ch

Certificate

The complete raw certificate details for www.lukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 543362962866779262485959645727932513658232903039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS EV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 06:34:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-30 06:34:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '6003'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pilatusstrasse 12'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzerner Kantonalbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-105.845.092'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 636721783882752803959544177012910014544840035004720230708237165810439404078220546271712844667481204806712006661617249706525681559232399068300520095940475143635337277593201661406717729159490849086135026797341715778437665034714688060405899500277485340564002397651051082646754949023766571217398444612485737002573348280546206691467688847461924972838462684039447177147015787176137576523488400821626139612739004126394047721085978677470004934383404631594400817130036004361929897218755609903462327857994502132210242767945515341183187995792676014776969359928823685256202675169758345160375336074404668921201452099772506229059453330422139086836126623099675339150290207527254301385658359915666375332426172344392798204227597792596285866701595889017034256227294586926595703020018332482451946673660625089712109131920516476030252812183542858395515782402283621930883145547876219009063350791047352132509841781422320978194783140696035962030349423888677938112602535766980947187672344570048564153520560333847282337192217286664985431779506768102722425089938980217941046291914016172981332140236731456097292318011940448853398432831537274024969122566051648735220904285498448183102384061314370029190211884771275416521987311074357779762943832927896188381000863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-20350159-813d-4532-b988-8519eca57650'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-9fdd910e-b9ff-4b2f-be38-2e93708c1b36'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (374 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boerse.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boersenundmaerkte.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebanking.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funders.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luegislandturm.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maennliturm.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maerkte.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noelliturm.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodottistrutturati.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produitsstructures.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pulverturm.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sp.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'structuredproducts.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strukturierteprodukte.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.funders.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a32c334d9f1cb5f04f88f705901b4aeb6533fbf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4952df308692595f349c254824abc0ebd106f2d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (607 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (603 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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