test-dlp.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 10:20:c6:7f:27:8b:9d:f5:21:5e:ff:fe:54:6a:57:4a:1f:4f:2e:8c was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=test-dlp.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 10:20:c6:7f:27:8b:9d:f5:21:5e:ff:fe:54:6a:57:4a:1f:4f:2e:8cSerial Number (int): 92074767680574324674763839046959625190444576396
Serial Number lenght: 157 bits, 20 octets
SubjectKeyId: 37:e2:01:08:a0:6f:e8:34:9a:db:7e:44:6c:18:27:41:76:28:e0:5c
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 47:cd:18:20:aa:a1:b1:f6:9a:cf:63:53:f6:84:22:c1:26:12:3b:38
Fingerprint (sha256): 0f:4d:e6:a3:74:1c:fa:a6:45:3c:6d:7c:be:e1:ac:1f:7c:28:a9:06:3a:89:68:16:12:90:8a:f0:f9:db:c8:64
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate test-dlp.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test-dlp.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test-dlp.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for test-dlp.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJejCCB2KgAwIBAgIUECDGfyeLnfUhXv/+VGpXSh9PLowwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDYxMTA4 MjU0MloXDTI1MDYxMTA4MjU0MlowHTEbMBkGA1UEAxMSdGVzdC1kbHAubHVjb3Jw LmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr9RnHww8itWw6t4N /OPWcAJzBBpn5fpRGjPtd3+D4RuJ314XsdyUdMvXM566Zlte2uHPK4+ieJy8BlVt fc7bOw+pEkAQ/drGQlByaxXS2AkPQRTRPS55OQl4liAIFweplHiS9Edg7Ei9ay2D KSXbW28p8dW6VlJryd2QYXDdxoLk3dN0ppfTpoYFEYXeA1SZGIKwb2oBoDEJmq0b ifam1GRttcj06xtSqANlAPgEQYLTctHDhwv8l8VyDD1rYvFAEeNoD2fYf4E6EmBE Jze3Aa39sob2JNO4YANp8qbDIOk/NE3iTnuERJY6UcUyNYX+TUv+F4lNPqNl6vSW 2w1AmLeLOnY/OwfD03NH9phLzEJBcZU9q73i5AIBvNqBE5sND+80RJy1hfo7tJLo U5VH5+W03rNb7Q2JzkBgQ9Xv9DxgYfsCeA7o8+1xSPIR+B2hPKc7zFkp2qTTX8hJ wZXhrEetKXvKuUOmdQKr8JCgL6t66lJ0UJLbnZliWKMAaM7FnW6zZDHnNXsS7ZQ3 P/GYfbxUgda6nkEuz6fCa+2mH+uZj6vu+x53Drsyg/GOBLCn6wCXpi9xKfpFFVJW KA0o4erRFcl6SGBPYydVbip16b1KA2uaFbt80wEzxP2Pr9q4IjHlAzyLDHYNjhtD dhlXgmn84My8JpjlQrunH/326e0CAwEAAaOCBH0wggR5MIGyBggrBgEFBQcBAQSB pTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFi ODYzMzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZG aHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgt NDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYE AI96AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0 b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRK MEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04 NjQxLTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHREEFjAUghJ0ZXN0LWRscC5s dWNvcnAuY2gwHQYDVR0OBBYEFDfiAQigb+g0mtt+RGwYJ0F2KOBcMB8GA1UdIwQY MBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIICbgYKKwYBBAHWeQIEAgSCAl4EggJa AlgAdQAo4oE4/YMhRemp1qp1N22Dd6iFErPAf3JBSCHcvemMZgAAAZAGZy+wAAAE AwBGMEQCIGybB5V7s6+O8DGAVxuMGw4NEA+umiYsBWSNwH+UEJXsAiBqLsX9E2aB 7redcNCKmNr9dAiqWLofPZriDnXfMmxB9gB3AOCSs/wMHcjnaDYf3mG5lk0KUngZ inLWcsSwTaVtb1QEAAABkAZnLFIAAAQDAEgwRgIhAISucpejGgKQFghzHf80IU2D 0AVOjHLe/itJtrDoqU3cAiEA8hbqeT984LdKpN491LsSLBRk4F/2l4gEhy6eGlIM GB8AdgDPEVbu1S58r/OHW9lpLpvpGnFnSrAX7KwB0lt3zsw7CAAAAZAGZys5AAAE AwBHMEUCIGAxr3gGvMxmk7tkmkqCKAzAdDIF/2ne7Uj220iFiK/XAiEAkosApkdV rlbxP/W+QndJYKNpQTOKka5iTHnKgGzpd6cAdgDM+w9qhXEJZf6Vm1PO6bJ8IumF XA2XjbapflTA/kwNsAAAAZAGZyuYAAAEAwBHMEUCIQCEV0+XzlMgQ5WZDGcCUz61 rpYpTPTJpYPBmXsZ4e9JXgIgO1tf/62r+7qIjjkiCgQpruQ0dvjKQLA/TeH+IHDs bBgAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAZAGZyt3AAAE AwBHMEUCIHNY9DBwGxT7YXnjaFo9b/uFFMfEsLKL7UDbAaV4gXHTAiEAgiymLrV7 OgQrIb2YaNgwuauuMonlGKjnfPIjYGG+QIYwDQYJKoZIhvcNAQELBQADggIBAGuz Y51Oo6b+Lozr5Yn2zDSR0WFtSnUNafb7X7NT67UVabMpHLr1BSUjL0yekxdN8Yr7 JnxiFS3KaGMmxBcYK5DSN923CmJY/E+nhtVRcRyVAgbh3t78LR5Hf8XT4OO6T2og zxHGJXO3oj3omYdQGj19igpRSUhaN+FITqlaYiZGms07J9bHALAL7gSemv3A6uFb WiUEG4Jntlz5XO3pjemHTEQrjQdtmjTX9YBTKlR/Cs6ViufRT1eb+XhtgIMgwA4Q grV0zBb0tZirsyaFW9jNgZxwCG9vwgOD+XsxSnIc2fyVQyvZHOMMMnQjEMGSJDKz MBO6T8APZvz2tPGeVHbvwk0thdFI07qy5dZ493hLR+Pd4iB686ccCNxjG4tu0osB xIb+QcHI5F/hVBOaya64OKHB/IzeMJyHvyd7hkiwI/M3GytIzNp7M2UY1H43XTiI i4l/8zhoICp1Py767qfcfP1uZUI1nqwaoNY1EcdmDDYNsBEqa/tMETxfMBIp9siD Ql8W/Gm0OlBgnvyUfa44uLdT5QHq9W61W5o72eK1YPRLuix6F6IBna5ut/BuWRp8 Kd4HnKENw5dKElpLXO01kRxhSvLr3iQfXlXm6+i88dQXLxXN3BY9qNAk/4Kjiw5I nCVHiR34cn4T/05CsOeNuoe77v9m/eJUddAiRsFb -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr9RnHww8itWw6t4N/OPW cAJzBBpn5fpRGjPtd3+D4RuJ314XsdyUdMvXM566Zlte2uHPK4+ieJy8BlVtfc7b Ow+pEkAQ/drGQlByaxXS2AkPQRTRPS55OQl4liAIFweplHiS9Edg7Ei9ay2DKSXb W28p8dW6VlJryd2QYXDdxoLk3dN0ppfTpoYFEYXeA1SZGIKwb2oBoDEJmq0bifam 1GRttcj06xtSqANlAPgEQYLTctHDhwv8l8VyDD1rYvFAEeNoD2fYf4E6EmBEJze3 Aa39sob2JNO4YANp8qbDIOk/NE3iTnuERJY6UcUyNYX+TUv+F4lNPqNl6vSW2w1A mLeLOnY/OwfD03NH9phLzEJBcZU9q73i5AIBvNqBE5sND+80RJy1hfo7tJLoU5VH 5+W03rNb7Q2JzkBgQ9Xv9DxgYfsCeA7o8+1xSPIR+B2hPKc7zFkp2qTTX8hJwZXh rEetKXvKuUOmdQKr8JCgL6t66lJ0UJLbnZliWKMAaM7FnW6zZDHnNXsS7ZQ3P/GY fbxUgda6nkEuz6fCa+2mH+uZj6vu+x53Drsyg/GOBLCn6wCXpi9xKfpFFVJWKA0o 4erRFcl6SGBPYydVbip16b1KA2uaFbt80wEzxP2Pr9q4IjHlAzyLDHYNjhtDdhlX gmn84My8JpjlQrunH/326e0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 92074767680574324674763839046959625190444576396 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 08:25:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-11 08:25:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-dlp.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717322586491225471863542918080643723999241750257916512988788418184333408199706175341111184591276455595208692496469492048306677980284627191460635664726325275124044145532231697820959522501649634833750850682642214160019997485141009597373675893893422413422282278610650617979955604563138044848262346338658213960954019693828575466585444252083927748553580408141643703722796386580037151235091069059130969198396807787044096377867349358696825613051554999172392652278463910806635750345146362172062400913681257173470465003593569171378993896522021426868674097476632796188117427786392048084994790399627967593121068686995770768271051608614888765595331748496563460990663691327604370481934791705151157966621755085627362567269719933257571710337185424543012203811297851211495909531780659074696562225829095026412617234855334708025823813911735491573559387899773457866074595917290445917272806319370418425424938073595430337870805747148656295320424837119265257799442698592716071235248839235606863785182754000149926596423575645128258711450614272765336226260731740365987290848944710234852431514283146659781939821628680572031446522863424916061961082656321957667890434489757672604863703970491031379652199648212415861837200333725577067687858731977819007290370541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dlp.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 37e20108a06fe8349adb7e446c1827417628e05c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 006bb3639d4ea3a6fe2e8cebe589f6cc3491d1616d4a750d69f6fb5fb353ebb51569b3291cbaf50525232f4c9e93174df18afb267c62152dca686326c417182b90d237ddb70a6258fc4fa786d551711c950206e1dedefc2d1e477fc5d3e0e3ba4f6a20cf11c62573b7a23de89987501a3d7d8a0a5149485a37e1484ea95a6226469acd3b27d6c700b00bee049e9afdc0eae15b5a25041b8267b65cf95cede98de9874c442b8d076d9a34d7f580532a547f0ace958ae7d14f579bf9786d808320c00e1082b574cc16f4b598abb326855bd8cd819c70086f6fc20383f97b314a721cd9fc95432bd91ce30c32742310c1922432b33013ba4fc00f66fcf6b4f19e5476efc24d2d85d148d3bab2e5d678f7784b47e3dde2207af3a71c08dc631b8b6ed28b01c486fe41c1c8e45fe154139ac9aeb838a1c1fc8cde309c87bf277b8648b023f3371b2b48ccda7b336518d47e375d38888b897ff33868202a753f2efaeea7dc7cfd6e6542359eac1aa0d63511c7660c360db0112a6bfb4c113c5f301229f6c883425f16fc69b43a50609efc947dae38b8b753e501eaf56eb55b9a3bd9e2b560f44bba2c7a17a2019dae6eb7f06e591a7c29de079ca10dc3974a125a4b5ced35911c614af2ebde241f5e55e6ebe8bcf1d4172f15cddc163da8d024ff82a38b0e489c2547891df8727e13ff4e42b0e78dba87bbeeff66fde25475d02246c15b