int-intra.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 53:b0:a1:82:ac:2b:71:55:49:db:b4:1f:9d:d3:1d:1e:74:6c:aa:e3 was issued on by SwissSign AG.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=int-intra.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 53:b0:a1:82:ac:2b:71:55:49:db:b4:1f:9d:d3:1d:1e:74:6c:aa:e3
Serial Number (int): 477785234676915566015431150119087840121586494179
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d0:12:78:d5:15:d1:e8:1a:6c:fc:23:de:3e:f4:c9:c0:1a:72:d9:b8
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): d7:89:ec:9a:05:9f:88:c7:46:67:0d:81:23:cd:30:09:86:a3:57:15
Fingerprint (sha256): 0e:8a:0a:96:79:4e:8d:81:a4:c1:a1:22:f6:98:4a:c8:bb:e0:c6:47:76:25:06:33:ca:f7:55:e9:64:94:b2:14

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate int-intra.lucorp.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int-intra.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int-intra-oos.lucorp.ch
int-intra-wizdom.lucorp.ch
int-intra.lucorp.ch
int-meinintra.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for int-intra.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 477785234676915566015431150119087840121586494179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 11:38:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-25 11:38:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-intra.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 594353721514743462690776305433061821997364524651989655916001991712672796177974978964257643277531102304814527237146458689806819623321586856822750561832358037686508120395275367921500052919135873336547463959019470944055988627185305535585216695000186047423484229608535646912451513662209067101281239032488510820750153119875113551442491619843399855727796509673457074915928411972305692051628746760259545471646052078785952645056247565226355480743818379015230514246181791778501887757427547455940772549532332092052725314144712743960341618799847193898683393591590049478731354555082257291110343262933523610797164328790677910085911623996346607207510604512323651783699843443327668316849661931202987203180658196183190957986986693819345275204223578149715335835472316535522556213872571576070277995429434622739977259520046785566495939333517369065971620246479924382786158743739987902023785276187078023040001264968986974106689033422078781747010133222446943545108736558013335277703873417171620531034424766033856048272154326304637693410849052321118093735105014542232808151444716170133969021075921723508177641428924449746973465922150978088041126282148978941207034370749986950987416086549756007496448334429630589976630341337728846284294345712751110206362591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-intra-oos.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-intra-wizdom.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-intra.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-meinintra.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:3|t:16|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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