keycloak.test-dlp.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 75:95:32:8b:a7:7e:a0:28:a7:25:cd:cf:45:2f:52:0a:86:e4:d3:11 was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=keycloak.test-dlp.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 75:95:32:8b:a7:7e:a0:28:a7:25:cd:cf:45:2f:52:0a:86:e4:d3:11
Serial Number (int): 671279134357154430312794531027086519056004862737
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 29:bd:7b:93:54:ff:db:17:ee:b4:8c:c1:d4:25:40:19:12:28:f5:c6
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 9e:75:3d:85:9d:b4:79:72:b2:b9:a2:a2:a3:08:90:f1:63:e6:be:6c
Fingerprint (sha256): 16:6c:38:c8:61:71:1d:21:d0:c8:18:9f:ad:d7:61:ac:dc:d6:d1:ad:65:e3:5c:a8:b4:80:6b:79:b2:fc:d9:c4

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate keycloak.test-dlp.lucorp.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keycloak.test-dlp.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keycloak.test-dlp.lucorp.ch
www.keycloak.test-dlp.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for keycloak.test-dlp.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 671279134357154430312794531027086519056004862737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-15 12:59:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-15 12:59:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keycloak.test-dlp.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812176276868490029810514686082342063033280096846327716679891384074481133897767287702189047810864766756210813867365036416188067219814154483241098584571652217272349519470361748479944066571046907153352509479397688390927778927275555248456635821714553839537481232276142024401989685792097557316721092571438799982881029064802411637547889839476157889028155977508591498078385939346032239178866933616116755022871862502780270352833024906549674674193544598177841275485635052398692417562790105464314152737284855972566081276819079232808369926152366676461548184597117580861623116215678466023961812213211126010949669057748761185027705541339919236885050510726076743334498427249464046841707499181253116311099638302379303993092287708823556315795764655735955503182095289360140041185227751756183023028582803011022087387734616840233886232427868375328408330236192755120331023396382580739832325140650444334549416720584829198563767634759043985649649183393350672675933597974540526060609417454170804435909737133273655381734426868498913890268501215720318023291089482689092307049577739060315335298598066144879144906871633244466589480244907501941175902522082377295860617152930173767637434202696980371073433673580997942193580880239973443075922980459828023533359761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keycloak.test-dlp.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keycloak.test-dlp.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29bd7b9354ffdb17eeb48cc1d42540191228f5c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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