int-intra.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 53:b0:a1:82:ac:2b:71:55:49:db:b4:1f:9d:d3:1d:1e:74:6c:aa:e3 was issued on by SwissSign AG.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=int-intra.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 53:b0:a1:82:ac:2b:71:55:49:db:b4:1f:9d:d3:1d:1e:74:6c:aa:e3Serial Number (int): 477785234676915566015431150119087840121586494179
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: d0:12:78:d5:15:d1:e8:1a:6c:fc:23:de:3e:f4:c9:c0:1a:72:d9:b8
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): d7:89:ec:9a:05:9f:88:c7:46:67:0d:81:23:cd:30:09:86:a3:57:15
Fingerprint (sha256): 0e:8a:0a:96:79:4e:8d:81:a4:c1:a1:22:f6:98:4a:c8:bb:e0:c6:47:76:25:06:33:ca:f7:55:e9:64:94:b2:14
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate int-intra.lucorp.ch
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for int-intra.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
int-intra-oos.lucorp.ch
int-intra-wizdom.lucorp.ch
int-intra.lucorp.ch
int-meinintra.lucorp.ch
int-intra-wizdom.lucorp.ch
int-intra.lucorp.ch
int-meinintra.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for int-intra.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJyjCCB7KgAwIBAgIUU7ChgqwrcVVJ27QfndMdHnRsquMwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDQyNTEx MzgyNFoXDTI1MDQyNTExMzgyNFowHjEcMBoGA1UEAxMTaW50LWludHJhLmx1Y29y cC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJGwCUI3Bt3IU3Jl gAR1j9G60IhRTybHZDyfugBCiTUIqJB8wDm+7VfyHHEIiRyw7sXQPYxv/gpGo5BX NL91aI7yl3b9msZ+mVm1wLysyZjE1iVur+W8NcbMzxC4CuXXrXd46TdJzZCWlzRZ +CjuTkKkiHMA5/00fj5xG7imV5mDSwZTl0/qofsa1dqNwwdbLinV8eNfinytEbUq jcuv8Fmem7eWAwn1bT2ova1Zr+4HiXIdaJw1zoGR51ZrBxo5pU7/q7n0zLlsSno0 A2LtCKGJv2xj72nSr8zgPGRDFPlC4CwDK6Ko1cmqjWvIXv5TyzK7BO43rsHlLD6l L8YTvwArbjgsU62wKgkoaWw5/i6JtTYZuplohh501vqE7HupDMPP7dxs7JQhO88i vBi/AJOcOfvdxLEY6tcFkrKJ/rWvM/+FCRc+TVI18+rHwYrcXRwFOZ5KRvqWoj+D v/p2AVE/+Zsw+qlhWZNEDPYo85TZ1r/Nhl/6gxj3+u9xQRzpG/mijzGFq9NOpGkM NMkqHA276JZCsVi0SJKgCbB0PmL06Y1/dBZ/copmeK3HR0W/CN14r4uS3DXWXcJe Nmr3TvTyBeYoxKWmHl6Pd2OL9rFSh/RNhXdBub8hNU9a+SE1yDzUBjE9I/qQN7UY B8vuKcKS5navzFUvtiaTpztOoZPfAgMBAAGjggTMMIIEyDCBsgYIKwYBBQUHAQEE gaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fpci0x Yjg2MzM4NS1mNGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYBBQUHMAGG Rmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2VkNS02NmU4 LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwBAgEwCAYG BACPegEGMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3Np dG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBRBgNVHR8E SjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5NzIzYjIt ODY0MS00NjQyLTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwbAYDVR0RBGUwY4IXaW50LWludHJh LW9vcy5sdWNvcnAuY2iCGmludC1pbnRyYS13aXpkb20ubHVjb3JwLmNoghNpbnQt aW50cmEubHVjb3JwLmNoghdpbnQtbWVpbmludHJhLmx1Y29ycC5jaDAdBgNVHQ4E FgQU0BJ41RXR6Bps/CPePvTJwBpy2bgwHwYDVR0jBBgwFoAU671/SZOMye7sorr3 HNJn8IOx6t4wggJuBgorBgEEAdZ5AgQCBIICXgSCAloCWAB3ACjigTj9gyFF6anW qnU3bYN3qIUSs8B/ckFIIdy96YxmAAABjxUMuQkAAAQDAEgwRgIhAPlzKFqCRNtj Tc5lQtue6dFM4Ud/sG5QJKJ0rZxasbpaAiEAuNusx2MyhrDXvjZGQBdNtK9LLmI/ Gvn5/lT83s73uUkAdgDgkrP8DB3I52g2H95huZZNClJ4GYpy1nLEsE2lbW9UBAAA AY8VDLW3AAAEAwBHMEUCIGTInLSM7AurdIFTJ+i71xpTDA8IK91zQsit42iqnz1E AiEA0t9ML8bPIbj4oHuKLeD1CPHI8RqmPnD+O7eSHHnR8SEAdgDPEVbu1S58r/OH W9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAY8VDLSyAAAEAwBHMEUCIQCYxQSwuc3w dz8pp50ui189yYymqXAbKHs9+e4Xs7VEtwIgASIBR2Lfr/10WhosN2w8uPxwVYha rvIRIQik1EQzUzoAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAA AY8VDLT8AAAEAwBHMEUCIHqbUwHl2J/EdwIq4RfXDM049tfMth4/2TJ+NzmY5fq5 AiEApvV2LPKPqaEwj4YB2XvxUkuH/sECoGkF39UgqcyNv+gAdQBOdaMnXJoQwzhb bNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY8VDLTtAAAEAwBGMEQCIEOD1oQr58rr 04NI9g5XVRXvoMEGB5WTUpSl7z/nj5nfAiBT4Z7dK3twEKtC5A8aLC/LuTcPd176 GdUCWKHzH+ugODANBgkqhkiG9w0BAQsFAAOCAgEAHCzov245jhv5lGEVZFSqFBG7 ODVWPpXs8kcBwAvUTgDDxIOPGi1sZzyTRoBp2fboV0V7Gzc2n3DRgXtghs9F3OiF kEWI4hweFNLep/Y6KOassrIlqdgqtzPSKbseDBPCea/VZXb5bkqBPktZHInqaEas CfrjDznMTlNhy5XS3ZPOmiAxtfBitYO27347y/pyXJwKrGaXkXwQWTWfIYWh6pMh K9/nC6e5ddo1hFofUa4FmaGkD7BSzFzYPJj6oval7L3islotUOtLqsoBkH+PFAPu lS2yKAa+frGEaoayBvU/sldRIcxINuPlefEyYVMhomm3L6vHuKREe47uby1b5EsN 1svxL1dTBTxxI70qahLS1DYvVMddG9rbs2ZzbKWjzPINVI1X1TfKmHye32jZuKim H/ncb2wqbKuVFXHxKed5LZzjwU/kdgDc6GZsG+uLVwAgzOjVEGth5Qzt77J6enoz 5vI9SdF1I/qbJ+0FSx4/DKEREMM64a3Qy34pmPve97WkaMRaotNZ/1DWxoUPDPqK lTBbYdiFKGc7BRgnscQ0X9mh+2WKxuLBnx3vPllNr9pw9kMeWJA+j+RMXQTdOd3E x4FIpuUM3qdTDb1O/Z6T9JosxgcsECNmDoH1D5k9/dT2bdTFzJcFV/12MzYZAQxs Yvew6ST9I/IvRSxID34= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkbAJQjcG3chTcmWABHWP 0brQiFFPJsdkPJ+6AEKJNQiokHzAOb7tV/IccQiJHLDuxdA9jG/+CkajkFc0v3Vo jvKXdv2axn6ZWbXAvKzJmMTWJW6v5bw1xszPELgK5detd3jpN0nNkJaXNFn4KO5O QqSIcwDn/TR+PnEbuKZXmYNLBlOXT+qh+xrV2o3DB1suKdXx41+KfK0RtSqNy6/w WZ6bt5YDCfVtPai9rVmv7geJch1onDXOgZHnVmsHGjmlTv+rufTMuWxKejQDYu0I oYm/bGPvadKvzOA8ZEMU+ULgLAMroqjVyaqNa8he/lPLMrsE7jeuweUsPqUvxhO/ ACtuOCxTrbAqCShpbDn+Lom1Nhm6mWiGHnTW+oTse6kMw8/t3GzslCE7zyK8GL8A k5w5+93EsRjq1wWSson+ta8z/4UJFz5NUjXz6sfBitxdHAU5nkpG+paiP4O/+nYB UT/5mzD6qWFZk0QM9ijzlNnWv82GX/qDGPf673FBHOkb+aKPMYWr006kaQw0ySoc DbvolkKxWLRIkqAJsHQ+YvTpjX90Fn9yimZ4rcdHRb8I3Xivi5LcNdZdwl42avdO 9PIF5ijEpaYeXo93Y4v2sVKH9E2Fd0G5vyE1T1r5ITXIPNQGMT0j+pA3tRgHy+4p wpLmdq/MVS+2JpOnO06hk98CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 477785234676915566015431150119087840121586494179 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 11:38:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-25 11:38:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-intra.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 594353721514743462690776305433061821997364524651989655916001991712672796177974978964257643277531102304814527237146458689806819623321586856822750561832358037686508120395275367921500052919135873336547463959019470944055988627185305535585216695000186047423484229608535646912451513662209067101281239032488510820750153119875113551442491619843399855727796509673457074915928411972305692051628746760259545471646052078785952645056247565226355480743818379015230514246181791778501887757427547455940772549532332092052725314144712743960341618799847193898683393591590049478731354555082257291110343262933523610797164328790677910085911623996346607207510604512323651783699843443327668316849661931202987203180658196183190957986986693819345275204223578149715335835472316535522556213872571576070277995429434622739977259520046785566495939333517369065971620246479924382786158743739987902023785276187078023040001264968986974106689033422078781747010133222446943545108736558013335277703873417171620531034424766033856048272154326304637693410849052321118093735105014542232808151444716170133969021075921723508177641428924449746973465922150978088041126282148978941207034370749986950987416086549756007496448334429630589976630341337728846284294345712751110206362591 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-intra-oos.lucorp.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-intra-wizdom.lucorp.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-intra.lucorp.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-meinintra.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:16|false] . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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