dev-zertifikate.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 08:f9:c6:f9:1a:33:71:8d:b7:a5:08:c6:8b:4e:b0:e1:ff:52:91:f8 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev-zertifikate.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 08:f9:c6:f9:1a:33:71:8d:b7:a5:08:c6:8b:4e:b0:e1:ff:52:91:f8
Serial Number (int): 51242144718775731369105465838203490012062978552
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 06:c2:2d:44:b4:79:84:ed:36:78:ec:27:39:ea:af:1a:c7:f9:55:ca
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 86:a4:fc:b1:b8:df:e6:b2:23:90:6f:03:fc:6d:4b:4f:35:4f:bb:98
Fingerprint (sha256): 0e:b9:b1:a5:0f:57:1c:58:05:ed:28:62:44:89:5c:73:83:97:a2:f6:1e:ac:d8:42:68:83:81:05:e9:32:4f:86

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate dev-zertifikate.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-zertifikate.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-zertifikate.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for dev-zertifikate.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHKzCCBROgAwIBAgIUCPnG+RozcY23pQjGi06w4f9SkfgwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEyMzA0
MjcyNVoXDTI1MDEyMzA0MjcyNVowJDEiMCAGA1UEAxMZZGV2LXplcnRpZmlrYXRl
Lmx1Y29ycC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIGoEVVA
Ei7dHIJschwt9AUU0SaNRVaA28i0WdKsX6fgmmvoJ5AV2sQpGKnGJtKhmyW/tUHU
xRDNJN29ZMtRVCW6GmB7WcY+qDneD7oFMNm98MbE8TUb9Cabf+Zb/0x/cNFJIDYe
ecLqXGWx2EdL9fiXBh+q1kdvBT/hUAUfuG7qg08HHpoyyHgeqUx9qx//8xxAjl08
MPaH093Cj7TY4yJDgVYQBqFECIss9UuF+b9A3QE20MqBVtF/GXWskrN3cHBT1TIP
WM2s3JORVz6aZJF4+xq6nQIiwe5THz/4t9HoG/LJBW3xn7EDUUOOs+cL2mS1ORj7
wn1aZ8yw4WixVY2gMU4SrvH08VBKdvQu3i4UuA/jiaCHKrqOxjNVU4cAGgWKdmWS
FGyo6y5pWZppPLomofTaVdipnJhHtv8C0wnN9RSB7LAngXI1ICpQI2h/pALZ28U4
uVocVNGvcEO+SedMfsMugDvS/rd8uH4hmlHaj27aDGpr1YfxkrJHsYjvxln0h4ga
XHdR4Ex0monQzSPvUVZyzFRjq0UWo9kygO4SHdq5Jf519RccOGCbrSvTRvWbeFht
innlTgo1BzvnTvptq+5PPsFgJSlyA8UFJdS+K4kIIe/VqlR4kmFeWldrnFtuPVrW
6p7Nly7N/o1DP1jQarFsyzUCfPn5fk627zmBAgMBAAGjggInMIICIzCBsgYIKwYB
BQUHAQEEgaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNo
L2Fpci0xYjg2MzM4NS1mNGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYB
BQUHMAGGRmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2Vk
NS02NmU4LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwB
AgEwCAYGBACPegEGMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8v
cmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBR
BgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5
NzIzYjItODY0MS00NjQyLTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwJAYDVR0RBB0wG4IZZGV2
LXplcnRpZmlrYXRlLmx1Y29ycC5jaDAdBgNVHQ4EFgQUBsItRLR5hO02eOwnOeqv
Gsf5VcowHwYDVR0jBBgwFoAU671/SZOMye7sorr3HNJn8IOx6t4wEwYKKwYBBAHW
eQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggIBAENLQLhIqQ7EF+Vy4kyC0Yqj
soyvyzjMSgh2Lnbb1urJcqZv3pAXRChvbd+tjTXBKgK1lsK5Fcmo1jrmi2mbFAM8
oEvx08j2nihRK2Ai3Rv992ah7J6ubEMLfdBBaAGrvvVoawT8/LNUKouz8PL8YjFf
AXi5ObjKBwRi/Ue9XW3jE+SUAdEMCS/JT8MrOd61IY2rp6av4pfVxIy/fAE8pNEG
MdaeJZ2QJgQFPaSaxifoZKJiLk3EwWs2Gm1EJgnxrrRZgAcSDqwxxuprQRIZhA6h
U5bTBiSXjsegXd8gOqw2KXjwKAJ1NdIxxcWnmoaCY7fDmgQQ/qy90gbYlGG2VC4/
Njmky96b3mOaBcEskDzywCM8bUcazxiBq4qXxWclZSC5gnsh/i6wIbciE6WP0rF7
fc07QuHcHMqJwpdSAVHNuP/g5eTZRj9x84uzuh+l1WuWOP4iIIFLOjpm+sq8IutE
o245Q5ddymjDqQgFAB6ZKZBfV/1JzTyux0i+QfawdUFSQx0agp6tzLSbJYafhqeB
zMklHi+XL7k1NwZaDuud4QUhPdStmzMWU3AcP8i2VFUCVNdaeJ4HpEVQvBoju6UC
ZaHtHmwzpZ0vYXp9EabLF/0BRvisVMILJTSiXPnVatYWExnArAG/EE3UfDf6ErLT
3EPXtPakwzD9xkIZoc3g
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51242144718775731369105465838203490012062978552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 04:27:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-23 04:27:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-zertifikate.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 528952430181461833370234069663847285820504243336960763573551672721673831491459066130977941794290226014236582952796613944946423633170829873526758216620648740525419412295276174089558581269322999859757009346076029769391808168405851441980698993035482284261107790761925588852270898224598767699179943444099737961604869647037733681279709463631940677953078965682873241964827241081178077084973408331808363111139211254604603919361227765472433879699582705949926056322197895778334773866700834249042729564258578241222100828996128630173285053028604386744145571481985184415820328093281779667492952818930489970591248945059102587359813800858086908386711921088533392378493871437399143883117214255201160443151700280134864326347189614061223097175630782310837374036545276393639777324394930668043098635765950116367543356951842966456574877580625764221136362667353352922052685871966762109641267620633557384654411009084374787798697168062818190776016678276636242377688983437924847686505364433720985552206565046909532758626973326072868901245328028281369476167681408581807304815466753969174508871100766056166808867327732315057715998011907464571322119959300048573185152644975636636603599362033725587566335550455773116163208750678457408451759986119460256079624577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-zertifikate.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06c22d44b47984ed3678ec2739eaaf1ac7f955ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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