test-dlp.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 10:20:c6:7f:27:8b:9d:f5:21:5e:ff:fe:54:6a:57:4a:1f:4f:2e:8c was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=test-dlp.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 10:20:c6:7f:27:8b:9d:f5:21:5e:ff:fe:54:6a:57:4a:1f:4f:2e:8c
Serial Number (int): 92074767680574324674763839046959625190444576396
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 37:e2:01:08:a0:6f:e8:34:9a:db:7e:44:6c:18:27:41:76:28:e0:5c
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 47:cd:18:20:aa:a1:b1:f6:9a:cf:63:53:f6:84:22:c1:26:12:3b:38
Fingerprint (sha256): 0f:4d:e6:a3:74:1c:fa:a6:45:3c:6d:7c:be:e1:ac:1f:7c:28:a9:06:3a:89:68:16:12:90:8a:f0:f9:db:c8:64

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate test-dlp.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-dlp.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-dlp.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for test-dlp.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 92074767680574324674763839046959625190444576396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 08:25:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-11 08:25:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-dlp.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717322586491225471863542918080643723999241750257916512988788418184333408199706175341111184591276455595208692496469492048306677980284627191460635664726325275124044145532231697820959522501649634833750850682642214160019997485141009597373675893893422413422282278610650617979955604563138044848262346338658213960954019693828575466585444252083927748553580408141643703722796386580037151235091069059130969198396807787044096377867349358696825613051554999172392652278463910806635750345146362172062400913681257173470465003593569171378993896522021426868674097476632796188117427786392048084994790399627967593121068686995770768271051608614888765595331748496563460990663691327604370481934791705151157966621755085627362567269719933257571710337185424543012203811297851211495909531780659074696562225829095026412617234855334708025823813911735491573559387899773457866074595917290445917272806319370418425424938073595430337870805747148656295320424837119265257799442698592716071235248839235606863785182754000149926596423575645128258711450614272765336226260731740365987290848944710234852431514283146659781939821628680572031446522863424916061961082656321957667890434489757672604863703970491031379652199648212415861837200333725577067687858731977819007290370541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-dlp.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37e20108a06fe8349adb7e446c1827417628e05c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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