dev-zertifikate.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 5b:47:49:3f:41:57:ba:d9:ff:73:11:a1:eb:21:38:3e:78:8b:ec:dc was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dev-zertifikate.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 5b:47:49:3f:41:57:ba:d9:ff:73:11:a1:eb:21:38:3e:78:8b:ec:dcSerial Number (int): 521107893775582544817860924403525505127841262812
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: ea:27:25:85:48:91:0c:c3:50:02:18:e6:a6:89:97:c6:8e:9b:7a:80
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 43:f6:05:e0:d2:73:bd:7a:d7:29:cc:78:81:33:59:75:76:86:f0:fd
Fingerprint (sha256): 12:ff:0a:39:6a:49:ab:cb:6b:1f:e3:0f:ba:c2:26:71:a5:c5:33:b3:77:d8:31:35:a5:20:2c:67:05:14:d7:22
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate dev-zertifikate.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev-zertifikate.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev-zertifikate.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for dev-zertifikate.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJEDCCBvigAwIBAgIUW0dJP0FXutn/cxGh6yE4PniL7NwwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEyNDA1 MzAwMFoXDTI1MDEyNDA1MzAwMFowJDEiMCAGA1UEAxMZZGV2LXplcnRpZmlrYXRl Lmx1Y29ycC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3iVym3 LIUsVxPOMpr3GU4ZeFc8w4SEOUYKdm5Cc0o777+jmWTy4L6X83cRffxzEFDWSLoP CfxrD7ZFOJXatq5B5ms8rp3mxsgdqAp8ynX8jZdCNj0Zga+fxco1PrVHs601PTO5 ilbc8Nfb0FuRYLM84JY10K3SKMJmCLOFKt7XbhlZlFixrjio9KCDZrQTgzHCw21L AxS4u1qeJx9jqcAFsK6d9pOm/JuR5vAEeHgpK+guNVaMXez7hMeNaEBWZV8mzm8g Go1/pZz1JtA0K50zrczuv2HXrYHWsdcPVxz0eNQ7NCZH4NxXYWTPa+NK5OfxoJ1L fvOn98eaTvhZ63EpSKzOFBagkpH07Q9J4AFKsVzPJpMCyoVXhe785VgSYb3tTjn5 UIRVtX2kLNbb55+yJJG5dgV1bL6MzLNZvbgcmY7oANVHpb4zJ5NHbs5eDTBidHVe 2UaXZH41LnzHW3SGcwZTpy7YSmHknnj5Y7Ka4TQ+KPtY+mHCwD7HScoJj5WkDc0/ OXB/iQG4355QhLtNT8uSTibJRRaCQKu41DdxpbHHSgd2nZR+cOINfvYBfSd4gj4E k75G2ZgDS3A0ILffteRMWzNqTA4cyVvNeTYKkQGD+CrulNVouXQhKMPOS/UTlbZE HrBk7umPDgAmmEBC1V4Li9DbzcxqHz4zsXoVAgMBAAGjggQMMIIECDCBsgYIKwYB BQUHAQEEgaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNo L2Fpci0xYjg2MzM4NS1mNGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYB BQUHMAGGRmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2Vk NS02NmU4LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwB AgEwCAYGBACPegEGMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8v cmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBR BgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5 NzIzYjItODY0MS00NjQyLTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwJAYDVR0RBB0wG4IZZGV2 LXplcnRpZmlrYXRlLmx1Y29ycC5jaDAdBgNVHQ4EFgQU6iclhUiRDMNQAhjmpomX xo6beoAwHwYDVR0jBBgwFoAU671/SZOMye7sorr3HNJn8IOx6t4wggH2BgorBgEE AdZ5AgQCBIIB5gSCAeIB4AB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0H E9MMAAABjTnyXCoAAAQDAEcwRQIhAOWGxCnWYvCTpp49KvpFWSOG9Wb8A1XuGW/1 2W7KkRWEAiA+TfRnxVetbOqH3qXbdbh2vN5cz66wEkKrxZldlmCNBAB2AM8RVu7V Lnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjTnyXeEAAAQDAEcwRQIhAPog Dw55lvBTT811cZweijxkUcE0x/wVPD7u16YjUMdQAiAgA05ycJ22/8PATDWjeu6t dkTA9rgRqpqy7FS6ZxyMswB3AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+VMD+ TA2wAAABjTnyYKsAAAQDAEgwRgIhAN7b3uU8FoKRqhfiR11cwlmYbIe6DSC/2Xiu LoIXqzE7AiEA/4kYtJC1ZDzJrCrbotncKDt8ckTrAGk0kxdojyXV3GUAdQBOdaMn XJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY058mG5AAAEAwBGMEQCIHHs Rg/8umnI6KEoLV2s7SHdSxAF721lLocp3Da5bzgmAiBxaj1reTzhZ96tx2xFIHm0 sEMFkeaYBxdUMpIKTftnbjANBgkqhkiG9w0BAQsFAAOCAgEAlco9OzSx99G/x9RK +SWI3XxkMOnbVTFK2kXDMN3hbxbM4JBtxIMfnW9/8o3UooRbuHwIxUaJeMx52S4K HszcsFCC3kezQfhvErsy2UJH4nGKqdvJ3Z7na1hDDGgGD08DhjIII6l1qrGuKS+Q VU9BAkSQBqniaLXWCWEYCuhE8oI4n937CyWxcm7npBUhpO7Hs+lX3dH5Wq1cf2K/ KYAhLA5MjHcIdG1tA2b8C/A5REt7R1nfRMhftDEWHjK5t2yXYrNmhwW32n56UiAk mvQZk9mcaKied+rb8avR5RHqg0iVTAaoH7/zybX6f8PwU3jsxhuGBZP0qAorvU7J 5M66VrRM4WrxqfkTL4EpzwLU+oEMRrCaE2MnQ6V9nz9gQkz/ijs54EmhiYx5ic1r sdN8EtkKr4VFMQaU8G5eM78yG5SzsjHEkOllL3oDTiG+5VrnG4f/AUnkJFdVsJE0 tsHdUanuDXQVRy9ux4fagwGXOTKyE2BRXdgpf8IHROpXfjvXzomw8oAemBm6H8Jp 0rfIq51RIFEfQd57JKb2hK0ib6nEM49bfh4JWrank6H9raP6LvSfAu5ElVtKKpbl FRGoAVaocV97cY4fIP0xN0SQ4ZmQW8fLWpwGzvZKEp74QIJn3ZVNMxitpNsr1lID GdYQIr+Qbd+u8+Oq52ZnAsJvpkM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAreJXKbcshSxXE84ymvcZ Thl4VzzDhIQ5Rgp2bkJzSjvvv6OZZPLgvpfzdxF9/HMQUNZIug8J/GsPtkU4ldq2 rkHmazyunebGyB2oCnzKdfyNl0I2PRmBr5/FyjU+tUezrTU9M7mKVtzw19vQW5Fg szzgljXQrdIowmYIs4Uq3tduGVmUWLGuOKj0oINmtBODMcLDbUsDFLi7Wp4nH2Op wAWwrp32k6b8m5Hm8AR4eCkr6C41Voxd7PuEx41oQFZlXybObyAajX+lnPUm0DQr nTOtzO6/Ydetgdax1w9XHPR41Ds0Jkfg3FdhZM9r40rk5/GgnUt+86f3x5pO+Fnr cSlIrM4UFqCSkfTtD0ngAUqxXM8mkwLKhVeF7vzlWBJhve1OOflQhFW1faQs1tvn n7Ikkbl2BXVsvozMs1m9uByZjugA1UelvjMnk0duzl4NMGJ0dV7ZRpdkfjUufMdb dIZzBlOnLthKYeSeePljsprhND4o+1j6YcLAPsdJygmPlaQNzT85cH+JAbjfnlCE u01Py5JOJslFFoJAq7jUN3GlscdKB3adlH5w4g1+9gF9J3iCPgSTvkbZmANLcDQg t9+15ExbM2pMDhzJW815NgqRAYP4Ku6U1Wi5dCEow85L9ROVtkQesGTu6Y8OACaY QELVXguL0NvNzGofPjOxehUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 521107893775582544817860924403525505127841262812 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 05:30:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 05:30:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-zertifikate.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709385410477327543149173282061951494357311411145584765150692302866509100872041327693470733075583288737420767752795625368297088745986701274231905909080210542161158368909760364237729670286979536395414328381925665148484480351015261042258520133973750848445090956994332981135804941668708673607107880499407434580023323282567200987833209431704767983637736206731475463651883690502266299092649094705558551844372826565802008392902034463229922418915809318039630952075373534213882225212493132122727550472201950469600666210011221424664979783382206789561484213033609809719560281012000964968842709208438183747175674732116729224771376995116416443097058625933364816754678234810748586745780996981583148679395449065586636782481246776438455173743540088911128358658301288398222507194424750711020125608596089058495143583573239124384660921215913688773345502329559929696716142916398900246842370934879212331882573995233332522860948348509289558699973307565228013447003687474420333353507597377435844751264235973486237427968276559795174869568817122056772475188392639166827136800552941902098328534755640663604930879216147319063642759831478589078604642427466352749415166967491864268613995769740365381288931997330429661782432611505441003385521026800959882687248917 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-zertifikate.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ea27258548910cc3500218e6a68997c68e9b7a80 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 01e00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018d39f25c2a0000040300473045022100e586c429d662f093a69e3d2afa45592386f566fc0355ee196ff5d96eca91158402203e4df467c557ad6cea87dea5db75b876bcde5ccfaeb01242abc5995d96608d04007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d39f25de10000040300473045022100fa200f0e7996f0534fcd75719c1e8a3c6451c134c7fc153c3eeed7a62350c750022020034e72709db6ffc3c04c35a37aeead7644c0f6b811aa9ab2ec54ba671c8cb3007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018d39f260ab0000040300483046022100dedbdee53c168291aa17e2475d5cc259986c87ba0d20bfd978ae2e8217ab313b022100ff8918b490b5643cc9ac2adba2d9dc283b7c7244eb0069349317688f25d5dc650075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d39f261b90000040300463044022071ec460ffcba69c8e8a1282d5daced21dd4b1005ef6d652e8729dc36b96f38260220716a3d6b793ce167deadc76c452079b4b0430591e69807175432920a4dfb676e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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