int-opus.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 4e:6b:5c:47:2e:dd:1c:38:7a:f8:c4:77:bf:11:f2:ae:2d:d7:a5:ec was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=int-opus.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:6b:5c:47:2e:dd:1c:38:7a:f8:c4:77:bf:11:f2:ae:2d:d7:a5:ec
Serial Number (int): 447695498413148590689798182321052124123571398124
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: bd:0a:6d:3b:4b:2f:2b:83:61:a0:4d:dd:6b:be:4a:e1:d8:fa:7d:38
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): f5:fc:03:a8:b4:87:e4:58:8f:72:91:f5:f8:99:8d:b8:a9:89:1c:a2
Fingerprint (sha256): 13:48:97:13:55:ae:d8:65:67:2c:53:be:1b:a8:26:6d:f0:ba:29:b8:b7:1e:85:cd:ec:a2:5b:48:cc:eb:7e:82

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate int-opus.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int-opus.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int-opus.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for int-opus.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 447695498413148590689798182321052124123571398124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 05:33:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-23 05:33:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-opus.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643049060899713468334018641606378265156046895491712261688592659075633276979409322489854383654384935363213030224583684549591537084272911612479559084312759196633199325895362307226073481314995994799477618677695191433341400364213261571424253133103250650481136611177411584509678941079828450580899622390575394201832292186219660730190555731776492103085218175701313294044264351989188441844626999851400567587132003825330625543960333008052796983507780185646466109276108204314618804066913296374144078993515930938632924121387703918979164844680351363535423731765631588337390433697829397250363417550910172908702001003462746322056159549147438596508334339763655060908762722596562021498085389556694459837796908278582192136365792329718480524837438537100210834473134101497558486727042805550211501745184418968344122432166051667554420925461508082652616857148126197188150475970099042788856568786691604158756424362430681113479977799760951890796622685094834526825131841759598187765646178419745567178071513122874309091597240077811014843145626670657507328779888856059431255030764429142994897491697557425146070400511723905905408444971391430650796018296977204254618310099499880980111113116395598115962645788314658262605370612105400339361414854296674231623534081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-opus.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd0a6d3b4b2f2b8361a04ddd6bbe4ae1d8fa7d38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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