int-datrading.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 63:c0:af:71:2d:b2:8b:22:29:b2:31:dc:8c:35:23:75:65:d6:55:1c was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=int-datrading.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 63:c0:af:71:2d:b2:8b:22:29:b2:31:dc:8c:35:23:75:65:d6:55:1c
Serial Number (int): 569487112552365823264202788682729224295769593116
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: d4:1c:5f:dd:76:76:de:b5:8d:cc:5f:0e:d6:73:2e:e1:8c:3d:d8:83
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): d3:b1:c5:2e:86:f0:9b:4b:43:ac:6c:7c:44:f1:86:c3:b9:27:94:a5
Fingerprint (sha256): 17:21:7a:23:a1:d4:b5:97:cc:45:bd:15:9d:bf:e6:d0:f7:0a:c3:83:a3:a6:f5:5e:5d:a3:d8:99:4d:2b:7d:d3

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate int-datrading.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for int-datrading.lucorp.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

int-datrading.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for int-datrading.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIhzCCBm+gAwIBAgIUY8CvcS2yiyIpsjHcjDUjdWXWVRwwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDUwNzEy
MTQ0NloXDTI1MDUwNzEyMTQ0NlowIjEgMB4GA1UEAxMXaW50LWRhdHJhZGluZy5s
dWNvcnAuY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKpLh4NwRc
Nxv2T6OlSKGDIFNmaGDMXtfeqmKhgXxCERoq5Q1lVko/J2cDs9YHkK083OqoFkmk
c1GdHxUHXMzPXgNsz1ykuV2aOFULId3/A9I/qnLWFEFX9q7omFgf2+EJjMVysWn0
0GWyKdNyL9AjJM9NED5Ed4uLywRW8ssugipgBNBMhM/E7MZgs2FNT9RoyO9Tia3g
veM4hVjFUWWlnD3RtGZhgTJnxYYgclyiVTGEyba7QJYgFKBgkB7LdtJKaq0tNbXk
4OUUufKNknfw3qdRa04SemPqAzpBApCIRSUUc1GWy5RvMwsfzeBPYKAETTDa2csO
nKWGQUWN2hR7AgMBAAGjggSFMIIEgTCBsgYIKwYBBQUHAQEEgaUwgaIwTAYIKwYB
BQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fpci0xYjg2MzM4NS1mNGE5
LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYBBQUHMAGGRmh0dHA6Ly9vY3Nw
LnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2VkNS02NmU4LTQwNjktOWIxYi1m
ZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwBAgEwCAYGBACPegEGMFAGCGCF
dAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3NpdG9yeS5zd2lzc3Np
Z24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBRBgNVHR8ESjBIMEagRKBChkBo
dHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5NzIzYjItODY0MS00NjQyLTg1
MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAO
BgNVHQ8BAf8EBAMCBaAwIgYDVR0RBBswGYIXaW50LWRhdHJhZGluZy5sdWNvcnAu
Y2gwHQYDVR0OBBYEFNQcX912dt61jcxfDtZzLuGMPdiDMB8GA1UdIwQYMBaAFOu9
f0mTjMnu7KK69xzSZ/CDsereMIICcQYKKwYBBAHWeQIEAgSCAmEEggJdAlsAdwAo
4oE4/YMhRemp1qp1N22Dd6iFErPAf3JBSCHcvemMZgAAAY9S+l4YAAAEAwBIMEYC
IQCvDvSSgd8OLJtk9vslkXCZBDbY2tRv3FlYggmkIt/6UgIhAMayh4bk8vE3jVUc
ytde21kmaazSdk0VA0FC0ggY0IfbAHcA4JKz/AwdyOdoNh/eYbmWTQpSeBmKctZy
xLBNpW1vVAQAAAGPUvpbmQAABAMASDBGAiEAmSmA+/3SAzLWMNrJ82zFkhz7yab1
PlvhS/F9uuPurXYCIQC5vAq01xTw6I0C8Jqj76/J+F1UIU0qlgfUcJOGSdmQcgB3
AM8RVu7VLnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABj1L6WqgAAAQDAEgw
RgIhAKtBnu6hMfLYgniH6rSvizZ6vet7B/q2O3mldeBujXLtAiEApkg9rP+37L/E
0y/Xvdu7JD6Sh6FeI6v+UmT+Qh4thPYAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2X
jbapflTA/kwNsAAAAY9S+lsKAAAEAwBHMEUCIFw6lD7WbzUmA2CNoYE5mIR/5+Ax
eiLGp0HBOebB79fiAiEAl9PqYwPK5OljlnPu0ie1HMDvoOMnyQnlpXTsSpgO8igA
dgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY9S+ly9AAAEAwBH
MEUCIQDyFZHMmREWzXt5wP+IAUAD3nym6bGszueGETHVHFdqigIgLfUFamek48EL
TqaW83FBrxCr6OpRns3r/xkVE4OlLJQwDQYJKoZIhvcNAQELBQADggIBAHRrH5V6
WmYbUDpUKu8q2vk2J/l/4NrUQz6NaOw2LZ2kVTpXcaQmjpoE41npVx+ELFPxtFLj
xW3wnZg4T6FT3y6Jw0OshoeC6vLeLSXsr30xXkoa0UrIdsgGj+h2yDhCdhJk4Ur8
N2ccPvMAWwO4suO+JNb0pNrCO7m1HLPcG0C59eqI7ODq57qjI2WOlL3leW6R/pgu
taqUR89a0dWn/7IIwXj79XG2FsZKLDp79u5EEw8gmaPCsrn1V4TaeImX8YAJ2fy2
TzWGZKZLDBIBnh15iR6HB6tfJm9FKdziqS7HAcFMVlXZFfKe1KcRVt4sGf7GWyvp
vV2s1ujsB7CuxLtEASGWh97044lAAid3EGgEChHtyKJoOLKUqQSkNlSNFe0yvckb
LKW1f0E+PhQ05Y8RZ2qh6Su7D/F1h2kriUDknV7/fu0KiuR5Q8oYlX9JdJDdIbXV
JgxuVGRTV/3M6fmlWMht4sP7O9q1DDHBA4Sx6cn37EYWZYmxWVicHojTFeyaedRK
T9LNp2dY70Qzzf8wTV77IaACpuI9Ak41TlA1jM9yeYkp5YIBoBcFao3eD4bDt6wo
2W21umWoCH3Q/cQhrHXe+cA3iGv3fq8xN7TtkPHPvMAeWCSlHEVTP2s5qAd6SZaa
JL7hsMqQSbrCZGtLR5uXPQDUcwMOx8Nus/1u
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqS4eDcEXDcb9k+jpUih
gyBTZmhgzF7X3qpioYF8QhEaKuUNZVZKPydnA7PWB5CtPNzqqBZJpHNRnR8VB1zM
z14DbM9cpLldmjhVCyHd/wPSP6py1hRBV/au6JhYH9vhCYzFcrFp9NBlsinTci/Q
IyTPTRA+RHeLi8sEVvLLLoIqYATQTITPxOzGYLNhTU/UaMjvU4mt4L3jOIVYxVFl
pZw90bRmYYEyZ8WGIHJcolUxhMm2u0CWIBSgYJAey3bSSmqtLTW15ODlFLnyjZJ3
8N6nUWtOEnpj6gM6QQKQiEUlFHNRlsuUbzMLH83gT2CgBE0w2tnLDpylhkFFjdoU
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 569487112552365823264202788682729224295769593116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 12:14:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-07 12:14:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'int-datrading.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25581364350641254150543024713812498810060573733584453401965966710103282461528399150466603734318798563168605329641713426771906901201620234270975554988469761085852676043540778795016639601780329804296229387917200165799670049183779908376093636865585485021350111022138046152009779571689712617869921740148549868898674969381575610771375938127125857092308490992452227989369572995732033814549369313376600450498551504734072575491176568132869256013856229234260425951803264584398218518578160099418564504455122076608254301595342615653255112146323639907348327495104192389295752973238529669650295847519423027383235488677057139446907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-datrading.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d41c5fdd7676deb58dcc5f0ed6732ee18c3dd883
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (609 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (605 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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