int-opus.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 4e:6b:5c:47:2e:dd:1c:38:7a:f8:c4:77:bf:11:f2:ae:2d:d7:a5:ec was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=int-opus.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 4e:6b:5c:47:2e:dd:1c:38:7a:f8:c4:77:bf:11:f2:ae:2d:d7:a5:ecSerial Number (int): 447695498413148590689798182321052124123571398124
Serial Number lenght: 159 bits, 20 octets
SubjectKeyId: bd:0a:6d:3b:4b:2f:2b:83:61:a0:4d:dd:6b:be:4a:e1:d8:fa:7d:38
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): f5:fc:03:a8:b4:87:e4:58:8f:72:91:f5:f8:99:8d:b8:a9:89:1c:a2
Fingerprint (sha256): 13:48:97:13:55:ae:d8:65:67:2c:53:be:1b:a8:26:6d:f0:ba:29:b8:b7:1e:85:cd:ec:a2:5b:48:cc:eb:7e:82
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate int-opus.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for int-opus.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
int-opus.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for int-opus.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJfDCCB2SgAwIBAgIUTmtcRy7dHDh6+MR3vxHyri3XpewwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDIyMzA1 MzMyM1oXDTI1MDIyMzA1MzMyM1owHTEbMBkGA1UEAxMSaW50LW9wdXMubHVjb3Jw LmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnZ+yUx40kzdItfl5 c3uOkYfqt+mOpEzVX8BanCD1AFdWLpWBSbdKCCgNPN63QTZXbuj3VIIUL4ugkOpd jal0WGdgvFvMes4ne1FGF1aOS4B3XEzecFajgFZR35el2Bvvj6NG0WFUnZjftOSB zycabF9mz+RqWPBMM+5/VyVvQZNJD/VIcGhntw8/JqfDd7vmtgtJ2OCKUX/eygRY z3qlJGx8pBRq+T9LTmbZwUTUynUcnyGHa0hyFbiL/Gok+rqcaIA1Knkz5235JcYH WUk6EGVwO+K5Hr7y0uM2ru5Glzg4KFlVlEv2Wbl6PaR9n8VdQkNDljkNF3KVy8QI 9ncWqK32W9WQVMk8jggwnglLHE1kHwxTUtSX8qWlNxVyclDa2LP/yOUDdF3YTHT/ OKYGqx6qd1rjrOn2CPMWbPGDK2QMu6+GWlYSo6TBidnbXh2tkcbUVARPLoP9YJTJ tM65zWoQbb+sJZBZwaL2EvytjjtJ3wBhFf1ckEZ13tf03HBOLzVLPj6/CHWjAH7J /HsyMmj4RKqt3WDaKXZKMbwPJ2DKrpCPrMG4GloJodfj5lE3W+GASVjmSF/liSH1 qNtiH5LhHp7ow4lmjvbxolAdtrdOFLIDMEVBSOKSnMx0QMa6D16j3GsBkBEDRh8e uUPawix6tcOJasyi1OI9D/1GxgECAwEAAaOCBH8wggR7MIGyBggrBgEFBQcBAQSB pTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFi ODYzMzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZG aHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgt NDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYE AI96AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0 b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRK MEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04 NjQxLTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHREEFjAUghJpbnQtb3B1cy5s dWNvcnAuY2gwHQYDVR0OBBYEFL0KbTtLLyuDYaBN3Wu+SuHY+n04MB8GA1UdIwQY MBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIICcAYKKwYBBAHWeQIEAgSCAmAEggJc AloAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAY3UdD7TAAAE AwBGMEQCID3VQ9yg2N99GgqOtRjCESxcWaeca3V0SVY3HBdtH692AiB3NlYUbaA8 4wUNVis98IhLzAa5/kGSxfVrVb5kVI1AEgB2ACjigTj9gyFF6anWqnU3bYN3qIUS s8B/ckFIIdy96YxmAAABjdR0QAAAAAQDAEcwRQIhAKl6MiShyy2mIuphji5PgQlr 56vl3wwNRVQEjz2BSpiQAiAatgCWrpyswi5cMb2qyUKEbW/PZCToYY3T4NFd75ux mQB3AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjdR0PQUAAAQD AEgwRgIhAK8HfXhBkBV/cw0vE13m0O0byoBqmFfvZ93bCblWCSLFAiEAq8/8LDto 5VL+cHCO5xSDHJ/cbTEwd3NUdUoi9P8+A8MAdwDM+w9qhXEJZf6Vm1PO6bJ8IumF XA2XjbapflTA/kwNsAAAAY3UdD0GAAAEAwBIMEYCIQDZvJchuAuV/PXHAKsb3POY JuID5QI6ikFGal/WW3IhQgIhAJDiMsYSk+wPo4sGtLd1HCewfqsyEIlG3I6mLiUw I3HHAHcATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGN1HQ/hwAA BAMASDBGAiEA5pKFsjETDoLF31RCdVUa3rXjl31tc+XlsZzVfvzA1TgCIQDzc2/W 0ZvYecCFvZpuHlNGc/UHKzcxP9zX7/JTWYT7ejANBgkqhkiG9w0BAQsFAAOCAgEA Okbv8dgrw52vV7/xR6dGQH/j42mrV6MgzmBkRfCZg28m8NZxdva7zin3ierhONnk gspB+Dvsw7GeOkApKVfjK/xslB/jnJi9KipReHeQ71MHk0HCsbIwK0mwFwRGh2My uygZ7UCoX93KJzl678tNynb2X+tlb8YhZYBO5hPL+pAkzr/C4/0F8gXurwU5bD53 237uVJR3hJdNPrpez7ErkWbz3CvGGDeD8cmZyA2Vgwuegn43UgbZp8rrhsQ1t617 w+3u4cjuN4Cdq13Q2Pi4zqAqIANgt24uxPir9a1Df8J6wvd+3f+2LqMLx29XVSrR RTIWva+RR1+sJfdBI9i6zQqZpZAKZR4iciHMN9fLgBuLfuCKwzJhba2VedK66e7h NiMNv+9wQinLigOjK1V5IHVU794e9gZBTxkMO/YMerSN2JDrarh5CAbnurLD4J1a aIkgO3+gpZ0J0lMnSURM6sfdt3M7AmM8RB5UonPWcPWQ+IkKI9eOv0OKnINsCQVM w1whtgxGflLA3pKTU+V9BC1dgbDEWQsSHQUN9utj2mkaZWSzTXNyhykNniQ/UsJ7 3q4RHzj2h5mnAmDiQjBsyZOrJCWzQ+Yw7OJ/2FgQB1fTvOHpxi2D1Efwlag+0/9S zXGuC5PEqpIVdkR8EEoQr6NpZRzglLr+PnvxM5+SX6Q= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnZ+yUx40kzdItfl5c3uO kYfqt+mOpEzVX8BanCD1AFdWLpWBSbdKCCgNPN63QTZXbuj3VIIUL4ugkOpdjal0 WGdgvFvMes4ne1FGF1aOS4B3XEzecFajgFZR35el2Bvvj6NG0WFUnZjftOSBzyca bF9mz+RqWPBMM+5/VyVvQZNJD/VIcGhntw8/JqfDd7vmtgtJ2OCKUX/eygRYz3ql JGx8pBRq+T9LTmbZwUTUynUcnyGHa0hyFbiL/Gok+rqcaIA1Knkz5235JcYHWUk6 EGVwO+K5Hr7y0uM2ru5Glzg4KFlVlEv2Wbl6PaR9n8VdQkNDljkNF3KVy8QI9ncW qK32W9WQVMk8jggwnglLHE1kHwxTUtSX8qWlNxVyclDa2LP/yOUDdF3YTHT/OKYG qx6qd1rjrOn2CPMWbPGDK2QMu6+GWlYSo6TBidnbXh2tkcbUVARPLoP9YJTJtM65 zWoQbb+sJZBZwaL2EvytjjtJ3wBhFf1ckEZ13tf03HBOLzVLPj6/CHWjAH7J/Hsy Mmj4RKqt3WDaKXZKMbwPJ2DKrpCPrMG4GloJodfj5lE3W+GASVjmSF/liSH1qNti H5LhHp7ow4lmjvbxolAdtrdOFLIDMEVBSOKSnMx0QMa6D16j3GsBkBEDRh8euUPa wix6tcOJasyi1OI9D/1GxgECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 447695498413148590689798182321052124123571398124 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-23 05:33:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-23 05:33:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-opus.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643049060899713468334018641606378265156046895491712261688592659075633276979409322489854383654384935363213030224583684549591537084272911612479559084312759196633199325895362307226073481314995994799477618677695191433341400364213261571424253133103250650481136611177411584509678941079828450580899622390575394201832292186219660730190555731776492103085218175701313294044264351989188441844626999851400567587132003825330625543960333008052796983507780185646466109276108204314618804066913296374144078993515930938632924121387703918979164844680351363535423731765631588337390433697829397250363417550910172908702001003462746322056159549147438596508334339763655060908762722596562021498085389556694459837796908278582192136365792329718480524837438537100210834473134101497558486727042805550211501745184418968344122432166051667554420925461508082652616857148126197188150475970099042788856568786691604158756424362430681113479977799760951890796622685094834526825131841759598187765646178419745567178071513122874309091597240077811014843145626670657507328779888856059431255030764429142994897491697557425146070400511723905905408444971391430650796018296977204254618310099499880980111113116395598115962645788314658262605370612105400339361414854296674231623534081 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-opus.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) bd0a6d3b4b2f2b8361a04ddd6bbe4ae1d8fa7d38 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (608 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes) 025a0075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018dd4743ed3000004030046304402203dd543dca0d8df7d1a0a8eb518c2112c5c59a79c6b75744956371c176d1faf760220773656146da03ce3050d562b3df0884bcc06b9fe4192c5f56b55be64548d401200760028e28138fd832145e9a9d6aa75376d8377a88512b3c07f72414821dcbde98c660000018dd47440000000040300473045022100a97a3224a1cb2da622ea618e2e4f81096be7abe5df0c0d4554048f3d814a989002201ab60096ae9cacc22e5c31bdaac942846d6fcf6424e8618dd3e0d15def9bb199007700cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018dd4743d050000040300483046022100af077d784190157f730d2f135de6d0ed1bca806a9857ef67dddb09b9560922c5022100abcffc2c3b68e552fe70708ee714831c9fdc6d3130777354754a22f4ff3e03c3007700ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018dd4743d060000040300483046022100d9bc9721b80b95fcf5c700ab1bdcf39826e203e5023a8a41466a5fd65b72214202210090e232c61293ec0fa38b06b4b7751c27b07eab32108946dc8ea62e25302371c70077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018dd4743f870000040300483046022100e69285b231130e82c5df544275551adeb5e3977d6d73e5e5b19cd57efcc0d538022100f3736fd6d19bd879c085bd9a6e1e534673f5072b37313fdcd7eff2535984fb7a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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