dev-opus.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 09:6e:d8:4e:0a:a9:b4:fc:58:ad:d7:50:af:4d:8b:5d:1e:be:25:6f was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=dev-opus.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 09:6e:d8:4e:0a:a9:b4:fc:58:ad:d7:50:af:4d:8b:5d:1e:be:25:6fSerial Number (int): 53852841719212253263755042137471125496524580207
Serial Number lenght: 156 bits, 20 octets
SubjectKeyId: 93:48:4f:c3:6d:fc:f5:c7:88:b9:15:69:c4:d2:d5:f9:14:b1:18:37
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 2a:66:a7:84:ba:f9:cb:bb:8c:52:25:83:a2:91:a6:21:c0:15:9c:f8
Fingerprint (sha256): 1a:35:cf:ff:a2:6f:de:29:46:45:75:ef:a6:9a:8c:a5:03:a0:2e:16:71:74:de:27:cb:9f:a7:3e:b6:96:d3:16
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate dev-opus.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dev-opus.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dev-opus.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for dev-opus.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJADCCBuigAwIBAgIUCW7YTgqptPxYrddQr02LXR6+JW8wDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEyNjA1 NTgyNloXDTI1MDEyNjA1NTgyNlowHTEbMBkGA1UEAxMSZGV2LW9wdXMubHVjb3Jw LmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwB/T7wmO4NWICpau fETCbXZoPhGEWcX4XmtFadP7j20Imjw/4FzReTx+PdLr+RPj4JrytTSHDqS+TsKX Rv8cA0pnJSTDzFQhOZ4+WXS3RJC9xitiwKNOW9NSP0QI8x5w1nKb3LIF3RCBY010 WY/xfOK57c/cNvCgWuR56uP7wwU4UUSuiUsrLb18ou4RIxSnKAFkaPySVZ+AylPV S0WxH8o/bBCvejyD6Da4UwFECGZdJaJhstgcTr95vGe6F2/SC0wmNvleQ3GC+pYU KK/d8g3Ht+OI3fWXmD0fFtcdmQJOyDwpIV9KziByklfhAoGOPb1sLl1Y5+P9LWn1 z/GNtt8tDlYxdLLuyvU4e8p8RDrQtXhBBhQxkCJ9yOCZ5RrRFGaCzDt3Gy+hLlsJ 5oa4cbDwaR5MZ8ypm0jm3+RoqNXYYWJxtsk7BGwJ0Gj/J4NoTqEC5p3B9xX3RkgU ZeaCei32YL9h2EZx+FDlN+CNIBP1w/fqznldI/0XrZCtvmnn3uCzEYRa7KjpX+XT Zt0vV0GY/9mDie3ZERs9+RJr03Y31NDpfKvRVQ5+mZvrZZetoQ6/Wihts4y+PHup C6Gw8SF8uMYrXJneYjWOWMKtt+4L5QpcaCHFRIYWY82A0WED5ThhrfrQy33VoYSv me7A5JFpV4KS2LAEMI1sAZTKy3sCAwEAAaOCBAMwggP/MIGyBggrBgEFBQcBAQSB pTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFi ODYzMzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZG aHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgt NDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYE AI96AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0 b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRK MEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04 NjQxLTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHREEFjAUghJkZXYtb3B1cy5s dWNvcnAuY2gwHQYDVR0OBBYEFJNIT8Nt/PXHiLkVacTS1fkUsRg3MB8GA1UdIwQY MBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIIB9AYKKwYBBAHWeQIEAgSCAeQEggHg Ad4AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAY1EWR2NAAAE AwBGMEQCIGRko4hVswSb7r3Xky66OABPmkKCmQSs7pbpUnA907ZzAiAB93lXqGim CC5VT3KdAZl4NAns4O4hloYH1ucnkh2DiwB0AM8RVu7VLnyv84db2Wkum+kacWdK sBfsrAHSW3fOzDsIAAABjURZHlsAAAQDAEUwQwIfHtMyKGarQn6UrDlChhk1FMnQ YVPww09Plhmbp/eshQIgC+cEwCBZbd1ZyHSXuQoZA1SUReXVpfu/wp0Qfd4P6jcA dwDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAY1EWR+AAAAEAwBI MEYCIQCld8t5RopNCGb6EumuCt+U534aLofaIYvALhMlMOLLVAIhALvHSmpLweNG y7UMk4Y54xZMk6H3ErGIU3geU122DJ9OAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4b jWnAsfpksWKaOd8AAAGNRFkgfgAABAMARzBFAiBZ8bt3EA8Livdwr4SFyRwSe/7W 57VarSyzqMg4hZ5aYwIhAPR78KeOfUP4TGHjZ51KEtMYZgu1u6lDWgOG7fzL9DMv MA0GCSqGSIb3DQEBCwUAA4ICAQADEwx5PVqsSmf7U6Gnj4GHtbSkktF77jFLLccW 1rEt/NWrgHOM3YW6ctDS6UwcSiClS5OoXb81X1Gtm9x5W6LMVlaDWU0DNow+LPos DsDN6+UTHo0aT9GinXN8jYbYd4IqJNRxYB38WKeIkMnNLNYbSO56SI6iEMXpvx9R IqyQcToZ8UfALW3E3vXoBdQlAD2BlQiHB9rHNBWCzyomS6vw4PscN8qsFFWV68yO ZpizmKmZrcCNQPy850mMTzZ0VrquwjeKqjNEk4lNXvsclfkoQliEB/q+syKpTt6O miGKH7eV6L/IThkd6d64c74XBuN7uOYaWcTTHwqqW5f+HDh2rgYt1ySR22CXFI6C /dZEndzwFULNop+Zzq3XPL/57iHZu7LeKBu2mL7OS8pyaCV4H+h+1XgwLOROFHk2 Ux7B4P5yV1dOO3bjr5FhWSDQtldc6dcyFalw6z1jDthUmE+mxCm1IIUMdQ7iuANE E4kCed64PZlSLn0UmQS59Cu5k8HludGW4EkNrhyVfGjUJ+NdhWTgpwuV6Y7Iwcy1 vncCXmpzzJTCtu6+oArxCEN6Vm7Tt+Sja17/ktxOxEz9Jpa8+rfsY9AsFGKbsa61 Q62Bkfd+9Sjgt2K7kgd0n7wBvN80rJEjeq7foUA5Y8be1Z3DGyR/IKXkFWtfSZf6 IVqsRQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwB/T7wmO4NWICpaufETC bXZoPhGEWcX4XmtFadP7j20Imjw/4FzReTx+PdLr+RPj4JrytTSHDqS+TsKXRv8c A0pnJSTDzFQhOZ4+WXS3RJC9xitiwKNOW9NSP0QI8x5w1nKb3LIF3RCBY010WY/x fOK57c/cNvCgWuR56uP7wwU4UUSuiUsrLb18ou4RIxSnKAFkaPySVZ+AylPVS0Wx H8o/bBCvejyD6Da4UwFECGZdJaJhstgcTr95vGe6F2/SC0wmNvleQ3GC+pYUKK/d 8g3Ht+OI3fWXmD0fFtcdmQJOyDwpIV9KziByklfhAoGOPb1sLl1Y5+P9LWn1z/GN tt8tDlYxdLLuyvU4e8p8RDrQtXhBBhQxkCJ9yOCZ5RrRFGaCzDt3Gy+hLlsJ5oa4 cbDwaR5MZ8ypm0jm3+RoqNXYYWJxtsk7BGwJ0Gj/J4NoTqEC5p3B9xX3RkgUZeaC ei32YL9h2EZx+FDlN+CNIBP1w/fqznldI/0XrZCtvmnn3uCzEYRa7KjpX+XTZt0v V0GY/9mDie3ZERs9+RJr03Y31NDpfKvRVQ5+mZvrZZetoQ6/Wihts4y+PHupC6Gw 8SF8uMYrXJneYjWOWMKtt+4L5QpcaCHFRIYWY82A0WED5ThhrfrQy33VoYSvme7A 5JFpV4KS2LAEMI1sAZTKy3sCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 53852841719212253263755042137471125496524580207 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 05:58:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-26 05:58:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-opus.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783798873424783829694853474598534313129696795374666718649728724436163227697333913285573456592590480479755106498145479866782062246355475706108871352497541349000966881177758179781480928741852706566509303377795497744157833585774760074435234083426812905040025077545982602029607966624768136801477894681199362930826566886234603250589808501705169368386269149773615953075469795320283533790423256549677052653911550762734731782256148464771228853791486921704762807258249538206056822341152974936123564296249964003242400292534223131504199828114181134483445970777353140457503787157710508769973691457454004154126350978463000576274423339509488620589153615016246933557832402342679649444829554247984801582527942968921923674424360271846104265644538559208245796479044234195483676256906097078175587295519092620682049201907218346435010137036549152251984721067803565462932404666738702661319648466217174444372225423796612235830616464655000773467267781947519672743791901012152397219422488158046867737518380362795063205339269780815421703931245535801871835619367518607477409570314946339921012623837103398768367383000797113573837592169854912794228422797165719546346603284846283000197831893257790785246103268155226393317838789341291169054211730230323917229837179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-opus.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 93484fc36dfcf5c788b91569c4d2d5f914b11837 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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