dev-zertifikate.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 09:ce:65:b3:df:bf:00:ac:c6:1b:4a:b4:3b:e7:cf:c1:9a:cf:6d:99 was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dev-zertifikate.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 09:ce:65:b3:df:bf:00:ac:c6:1b:4a:b4:3b:e7:cf:c1:9a:cf:6d:99Serial Number (int): 55983729997144236166722291731922470211333090713
Serial Number lenght: 156 bits, 20 octets
SubjectKeyId: 15:7e:99:db:e3:42:67:48:22:c5:50:d6:2c:8b:98:9c:bc:7f:df:b0
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 96:1d:7a:27:a6:74:3a:ba:fc:ac:7c:5f:87:74:3b:11:c7:e0:a7:27
Fingerprint (sha256): 14:42:b3:35:0e:37:c9:98:9f:28:89:fc:1a:36:df:79:a9:b8:e0:4b:96:72:82:0f:44:3d:ca:65:56:af:68:e7
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate dev-zertifikate.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev-zertifikate.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev-zertifikate.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for dev-zertifikate.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJEDCCBvigAwIBAgIUCc5ls9+/AKzGG0q0O+fPwZrPbZkwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEwMzEz Mzg1MloXDTI1MDEwMzEzMzg1MlowJDEiMCAGA1UEAxMZZGV2LXplcnRpZmlrYXRl Lmx1Y29ycC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAIIUz1sB RQsUVi9Hte10ktwEOe5u2twBrGLFdMnYUKQ/6ydPfyyO+LK3v1T8xEXmyyzoAEeU KLh/90KN8/Ksjfih4fbzvrM1jRUXMltpQ6tzq324oNCFsGcXYyzfkpQ/TkzTGqdW LCRJB/4iktGFLPl/iDCG2MEns/E1hJRkrUDk1QBZoJ7ZK1qNxXEHHLe7PPaF7VOs l6mbuxBmM4VFqpmYtMCmxGNOhYnsGRgbYFkLCjbEaTMOO4SAHpqIvBFWxzgqmvWK YP0v+WbeNy+UVm4sV5QNRXE6kf4lEVnXR/b2uegvLCMeOmhowoyIAU2b1vH617nx VZnTdjnUESEggT/dWe20VqiCF55ge7ZvNEIlH0divnurZntxuQm96AEonizbOvBP nRcL5k1rZykGFeE524cWBvcTcw/dQzQfTDIgLtVkOoSk+sqDmjQpjKTNi53O6AJ1 /D9HnxyQYfx/VT8Y6ESvzlCMUDK5p42gBxtz/BziHuEd4Pyp0ibZnmXrdQzW5SmI g+GTIvABwKLEgG8pxl+dMYDjjiWFGhmadpGaYLVUyGosqiKo7tzfRAVW4km3M9l4 qgV5eSVX1pxizHBILuG+Z8hy295tx1rClVyalLQf0a9f8bg3J2D7nIlYURvDgfSW fOOSmz9k0C8uP62wP3BvmUnzO43bmjTgDaSTAgMBAAGjggQMMIIECDCBsgYIKwYB BQUHAQEEgaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNo L2Fpci0xYjg2MzM4NS1mNGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYB BQUHMAGGRmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2Vk NS02NmU4LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwB AgEwCAYGBACPegEGMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8v cmVwb3NpdG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBR BgNVHR8ESjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5 NzIzYjItODY0MS00NjQyLTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwJAYDVR0RBB0wG4IZZGV2 LXplcnRpZmlrYXRlLmx1Y29ycC5jaDAdBgNVHQ4EFgQUFX6Z2+NCZ0gixVDWLIuY nLx/37AwHwYDVR0jBBgwFoAU671/SZOMye7sorr3HNJn8IOx6t4wggH2BgorBgEE AdZ5AgQCBIIB5gSCAeIB4AB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0H E9MMAAABjM+MYOsAAAQDAEcwRQIhAO7m1ezO6XDmm4Y44yvwfucJJCohWa/puXjS Z/sZPCGLAiBwxdNzBsqClYgerpotK6dBofD88O6schGCLazXH9P0tgB2AM8RVu7V Lnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjM+MYfAAAAQDAEcwRQIgKzFj 40iqtzWMyRojqKZ517kkvFawQJFTh9hIa8NTK7wCIQDjTo/RMl3hu50SVAnoKepK W4J+ymUmduykLFrDIu/FWAB2AMz7D2qFcQll/pWbU87psnwi6YVcDZeNtql+VMD+ TA2wAAABjM+MYu0AAAQDAEcwRQIhANP1cTemtsqDCNRV9AAUWrFCpIAJ/K5epCow bPZA5e7qAiAM1o/VgivI62h+T4zx4up5FT7M+dGsydDpM08VeM7vUAB2AE51oydc mhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjM+MZfsAAAQDAEcwRQIhAKiy P1O0z/hLLWg26E+Grf4vlglycoVtVUKVGMSqTw68AiBo9otNZ7vf3qDYPY229td+ n4h3tP+f56JnuQPiZ7QcBzANBgkqhkiG9w0BAQsFAAOCAgEANd/aTgvBGLkj8X1u uDh5uw6G0dseEhK+b6T5FTHyeVql+MwYFGA7sE7ZYEehDTP29W66Dxqvvg9ZeV84 bH2UEnaLX7ZURl0/3qFQpiL6FfbvxCiVSdwzya0l+HJ5AZjpSqHy0jtob5poEQf0 vza0qtr1DMSkuyTDZHybEsygs7BnaYTJLsIkp1+z3wF16o1mU2aKbkII6q4dxpqC JGTlISCsHERJYoxfDkDSWX1VnCxm+Xam/Z6ucb7hsISEoeIJpgdDFeX7Ft4LAY0J SvuWqoU20foRb0Wp2YI8M3/tVHPkstpjDXkNQuVmtxT3XDxgPU0marK15pCNS3nX QO0sJDLEXMew2oj7WfdaAkFOVfME9rZeLnphMJGuToxl0Pk2aO1mvY8Py0JZICFb R2izdOoI8B9lHw/dwUcYd/iNdQuoe1F/7KGOHEIUW8Z7FD8vghSvuNA/+x0EX7Ir X7uEMIyNBDHSMjyF7YdPOlztRVoPzCSEFDSRNAYjw1YEArWjiucHN1VAsZ1ylhJN h8hWZp5WaB1UaiutKqUwNyABF8DXackcjWmJ7IRd2vP6xZOBhiD8lpqzWWmEdE3m jpUpEHH05eD+B9pbPGETFYv2wH+zl4Rt55wzHoScCfo7MwpZCw3orh0E49AUW+RE TV8WZy+LYskpyFEzXgInH2t7uz4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAghTPWwFFCxRWL0e17XSS 3AQ57m7a3AGsYsV0ydhQpD/rJ09/LI74sre/VPzERebLLOgAR5QouH/3Qo3z8qyN +KHh9vO+szWNFRcyW2lDq3Orfbig0IWwZxdjLN+SlD9OTNMap1YsJEkH/iKS0YUs +X+IMIbYwSez8TWElGStQOTVAFmgntkrWo3FcQcct7s89oXtU6yXqZu7EGYzhUWq mZi0wKbEY06FiewZGBtgWQsKNsRpMw47hIAemoi8EVbHOCqa9Ypg/S/5Zt43L5RW bixXlA1FcTqR/iURWddH9va56C8sIx46aGjCjIgBTZvW8frXufFVmdN2OdQRISCB P91Z7bRWqIIXnmB7tm80QiUfR2K+e6tme3G5Cb3oASieLNs68E+dFwvmTWtnKQYV 4TnbhxYG9xNzD91DNB9MMiAu1WQ6hKT6yoOaNCmMpM2Lnc7oAnX8P0efHJBh/H9V PxjoRK/OUIxQMrmnjaAHG3P8HOIe4R3g/KnSJtmeZet1DNblKYiD4ZMi8AHAosSA bynGX50xgOOOJYUaGZp2kZpgtVTIaiyqIqju3N9EBVbiSbcz2XiqBXl5JVfWnGLM cEgu4b5nyHLb3m3HWsKVXJqUtB/Rr1/xuDcnYPuciVhRG8OB9JZ845KbP2TQLy4/ rbA/cG+ZSfM7jduaNOANpJMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 55983729997144236166722291731922470211333090713 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-03 13:38:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-03 13:38:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-zertifikate.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 530685359003373341845201711415429886806124869635516224482485519538803705869099725042039760846367288762052504296397194851627769042105702716367697794904088689169458441532199628603583283627521328953014628333437486693441957982941670313578783048021712243767521340922281656763178672942132224852431876073846393271744991569426645898808355866436184610507499495465581827234376524549290445634510950491573124217327493627102998142000583370844052662757996510500587953584134997876651961210611845887763047457738129442220577303213736475169612778837390712772978970322566107256404249882842961711918631953639439753761053315253699571692095164811159504006013557303345728044027892276367918270897088041322894206323186735930045587164731575775413202806951010938978960486926344957832889686767940020550379504087781037779190877619957252941806527352467327423991510721744114440332671661704007286314321979441925189870713525548940016234222827534518377355305857240621174413247176052526763958647973303406633294311339374649792075687012595911070265099882921903086787898743165885094554404891052312258907644736791598155372153754866610352365176713810841537517607013410133380083931738461087666583635974158281501794602143265265644273105142016051591001045311700258032435700883 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-zertifikate.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 157e99dbe342674822c550d62c8b989cbc7fdfb0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes) 01e00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018ccf8c60eb0000040300473045022100eee6d5eccee970e69b8638e32bf07ee709242a2159afe9b978d267fb193c218b022070c5d37306ca8295881eae9a2d2ba741a1f0fcf0eeac7211822dacd71fd3f4b6007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018ccf8c61f0000004030047304502202b3163e348aab7358cc91a23a8a679d7b924bc56b040915387d8486bc3532bbc022100e34e8fd1325de1bb9d125409e829ea4a5b827eca652676eca42c5ac322efc558007600ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db00000018ccf8c62ed0000040300473045022100d3f57137a6b6ca8308d455f400145ab142a48009fcae5ea42a306cf640e5eeea02200cd68fd5822bc8eb687e4f8cf1e2ea79153eccf9d1acc9d0e9334f1578ceef500076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018ccf8c65fb0000040300473045022100a8b23f53b4cff84b2d6836e84f86adfe2f96097272856d55429518c4aa4f0ebc022068f68b4d67bbdfdea0d83d8db6f6d77e9f8877b4ff9fe7a267b903e267b41c07 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 0035dfda4e0bc118b923f17d6eb83879bb0e86d1db1e1212be6fa4f91531f2795aa5f8cc1814603bb04ed96047a10d33f6f56eba0f1aafbe0f59795f386c7d9412768b5fb654465d3fdea150a622fa15f6efc4289549dc33c9ad25f872790198e94aa1f2d23b686f9a681107f4bf36b4aadaf50cc4a4bb24c3647c9b12cca0b3b0676984c92ec224a75fb3df0175ea8d6653668a6e4208eaae1dc69a822464e52120ac1c4449628c5f0e40d2597d559c2c66f976a6fd9eae71bee1b08484a1e209a6074315e5fb16de0b018d094afb96aa8536d1fa116f45a9d9823c337fed5473e4b2da630d790d42e566b714f75c3c603d4d266ab2b5e6908d4b79d740ed2c2432c45cc7b0da88fb59f75a02414e55f304f6b65e2e7a613091ae4e8c65d0f93668ed66bd8f0fcb425920215b4768b374ea08f01f651f0fddc1471877f88d750ba87b517feca18e1c42145bc67b143f2f8214afb8d03ffb1d045fb22b5fbb84308c8d0431d2323c85ed874f3a5ced455a0fcc2484143491340623c3560402b5a38ae707375540b19d7296124d87c856669e56681d546a2bad2aa53037200117c0d769c91c8d6989ec845ddaf3fac593818620fc969ab3596984744de68e95291071f4e5e0fe07da5b3c6113158bf6c07fb397846de79c331e849c09fa3b330a590b0de8ae1d04e3d0145be4444d5f16672f8b62c929c851335e02271f6b7bbb3e