dacs.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 03:cc:70:fb:4d:4a:7b:06:ce:52:62:95:89:6e:84:47:88:75:f8:09 was issued on by SwissSign AG.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dacs.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 03:cc:70:fb:4d:4a:7b:06:ce:52:62:95:89:6e:84:47:88:75:f8:09
Serial Number (int): 21686166422607500915325302534726197889899821065
Serial Number lenght: 154 bits, 20 octets

SubjectKeyId: b6:3d:f3:40:09:f7:14:d4:2b:b1:84:f4:8e:1a:62:a1:78:47:72:05
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 20:ee:67:b5:aa:dd:eb:58:b8:9e:54:ad:10:8f:fc:db:17:da:00:6d
Fingerprint (sha256): 17:3b:d0:17:6c:ed:fb:e4:d5:39:16:25:37:e9:79:05:b6:b4:b2:bc:08:5e:00:8a:7a:c9:6c:38:43:5c:d4:59

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate dacs.lucorp.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dacs.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dacs.lucorp.ch
www.dacs.lucorp.ch
www.norma4040119.lucorp.ch
norma4040119.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for dacs.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21686166422607500915325302534726197889899821065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 06:01:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-25 06:01:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dacs.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713805560748570518062792331540137467405514150227507297816625963705175329756867744375839393183611710189435237625648808440525477308914577005739620589301898842871693798123205664415144080432982808417943425896603889407025225383476190792248250553616395309259264400847367874688205862767633089530546238372472608606985614375725978806730237816053426744784345542435255549995494880891507884573122499208194991753595745886787362238791089056886390122867916026363981123649061922408927216555675010873597090429318617038705685674991786059409181296092137340054975394658594366034943018108053608383114560793529046177451770306322231923507873846632111945098066042363719602913935479918935162789256554093424945261367880882308716373515415029265290744515610885367271037820021057416894318896924090312826655720899250101900804601915853711438372968753738908248024109032232792127905053720637728665559135042312652999009512420571373417925459448647759004138150868096859261663033278334899672005255068837901176467434406222114624973610408913460389881428661146554620001091196416291855478915589880254703624164897312314430875167410526755496341471131698698285865984757851646974056069840974429984717501054926636272121499119035131280161781728859030960006990043829160403949757527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dacs.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dacs.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norma4040119.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norma4040119.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b63df34009f714d42bb184f48e1a62a178477205
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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