dev-zertifikate.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 5b:47:49:3f:41:57:ba:d9:ff:73:11:a1:eb:21:38:3e:78:8b:ec:dc was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev-zertifikate.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 5b:47:49:3f:41:57:ba:d9:ff:73:11:a1:eb:21:38:3e:78:8b:ec:dc
Serial Number (int): 521107893775582544817860924403525505127841262812
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: ea:27:25:85:48:91:0c:c3:50:02:18:e6:a6:89:97:c6:8e:9b:7a:80
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 43:f6:05:e0:d2:73:bd:7a:d7:29:cc:78:81:33:59:75:76:86:f0:fd
Fingerprint (sha256): 12:ff:0a:39:6a:49:ab:cb:6b:1f:e3:0f:ba:c2:26:71:a5:c5:33:b3:77:d8:31:35:a5:20:2c:67:05:14:d7:22

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate dev-zertifikate.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-zertifikate.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-zertifikate.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for dev-zertifikate.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 521107893775582544817860924403525505127841262812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 05:30:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-24 05:30:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-zertifikate.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709385410477327543149173282061951494357311411145584765150692302866509100872041327693470733075583288737420767752795625368297088745986701274231905909080210542161158368909760364237729670286979536395414328381925665148484480351015261042258520133973750848445090956994332981135804941668708673607107880499407434580023323282567200987833209431704767983637736206731475463651883690502266299092649094705558551844372826565802008392902034463229922418915809318039630952075373534213882225212493132122727550472201950469600666210011221424664979783382206789561484213033609809719560281012000964968842709208438183747175674732116729224771376995116416443097058625933364816754678234810748586745780996981583148679395449065586636782481246776438455173743540088911128358658301288398222507194424750711020125608596089058495143583573239124384660921215913688773345502329559929696716142916398900246842370934879212331882573995233332522860948348509289558699973307565228013447003687474420333353507597377435844751264235973486237427968276559795174869568817122056772475188392639166827136800552941902098328534755640663604930879216147319063642759831478589078604642427466352749415166967491864268613995769740365381288931997330429661782432611505441003385521026800959882687248917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-zertifikate.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea27258548910cc3500218e6a68997c68e9b7a80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018d39f25c2a0000040300473045022100e586c429d662f093a69e3d2afa45592386f566fc0355ee196ff5d96eca91158402203e4df467c557ad6cea87dea5db75b876bcde5ccfaeb01242abc5995d96608d04007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d39f25de10000040300473045022100fa200f0e7996f0534fcd75719c1e8a3c6451c134c7fc153c3eeed7a62350c750022020034e72709db6ffc3c04c35a37aeead7644c0f6b811aa9ab2ec54ba671c8cb3007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018d39f260ab0000040300483046022100dedbdee53c168291aa17e2475d5cc259986c87ba0d20bfd978ae2e8217ab313b022100ff8918b490b5643cc9ac2adba2d9dc283b7c7244eb0069349317688f25d5dc650075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d39f261b90000040300463044022071ec460ffcba69c8e8a1282d5daced21dd4b1005ef6d652e8729dc36b96f38260220716a3d6b793ce167deadc76c452079b4b0430591e69807175432920a4dfb676e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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