dev-opus.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 09:6e:d8:4e:0a:a9:b4:fc:58:ad:d7:50:af:4d:8b:5d:1e:be:25:6f was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev-opus.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 09:6e:d8:4e:0a:a9:b4:fc:58:ad:d7:50:af:4d:8b:5d:1e:be:25:6f
Serial Number (int): 53852841719212253263755042137471125496524580207
Serial Number lenght: 156 bits, 20 octets

SubjectKeyId: 93:48:4f:c3:6d:fc:f5:c7:88:b9:15:69:c4:d2:d5:f9:14:b1:18:37
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 2a:66:a7:84:ba:f9:cb:bb:8c:52:25:83:a2:91:a6:21:c0:15:9c:f8
Fingerprint (sha256): 1a:35:cf:ff:a2:6f:de:29:46:45:75:ef:a6:9a:8c:a5:03:a0:2e:16:71:74:de:27:cb:9f:a7:3e:b6:96:d3:16

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate dev-opus.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev-opus.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev-opus.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for dev-opus.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJADCCBuigAwIBAgIUCW7YTgqptPxYrddQr02LXR6+JW8wDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDEyNjA1
NTgyNloXDTI1MDEyNjA1NTgyNlowHTEbMBkGA1UEAxMSZGV2LW9wdXMubHVjb3Jw
LmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwB/T7wmO4NWICpau
fETCbXZoPhGEWcX4XmtFadP7j20Imjw/4FzReTx+PdLr+RPj4JrytTSHDqS+TsKX
Rv8cA0pnJSTDzFQhOZ4+WXS3RJC9xitiwKNOW9NSP0QI8x5w1nKb3LIF3RCBY010
WY/xfOK57c/cNvCgWuR56uP7wwU4UUSuiUsrLb18ou4RIxSnKAFkaPySVZ+AylPV
S0WxH8o/bBCvejyD6Da4UwFECGZdJaJhstgcTr95vGe6F2/SC0wmNvleQ3GC+pYU
KK/d8g3Ht+OI3fWXmD0fFtcdmQJOyDwpIV9KziByklfhAoGOPb1sLl1Y5+P9LWn1
z/GNtt8tDlYxdLLuyvU4e8p8RDrQtXhBBhQxkCJ9yOCZ5RrRFGaCzDt3Gy+hLlsJ
5oa4cbDwaR5MZ8ypm0jm3+RoqNXYYWJxtsk7BGwJ0Gj/J4NoTqEC5p3B9xX3RkgU
ZeaCei32YL9h2EZx+FDlN+CNIBP1w/fqznldI/0XrZCtvmnn3uCzEYRa7KjpX+XT
Zt0vV0GY/9mDie3ZERs9+RJr03Y31NDpfKvRVQ5+mZvrZZetoQ6/Wihts4y+PHup
C6Gw8SF8uMYrXJneYjWOWMKtt+4L5QpcaCHFRIYWY82A0WED5ThhrfrQy33VoYSv
me7A5JFpV4KS2LAEMI1sAZTKy3sCAwEAAaOCBAMwggP/MIGyBggrBgEFBQcBAQSB
pTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFi
ODYzMzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZG
aHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgt
NDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYE
AI96AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0
b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRK
MEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04
NjQxLTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHREEFjAUghJkZXYtb3B1cy5s
dWNvcnAuY2gwHQYDVR0OBBYEFJNIT8Nt/PXHiLkVacTS1fkUsRg3MB8GA1UdIwQY
MBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIIB9AYKKwYBBAHWeQIEAgSCAeQEggHg
Ad4AdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAY1EWR2NAAAE
AwBGMEQCIGRko4hVswSb7r3Xky66OABPmkKCmQSs7pbpUnA907ZzAiAB93lXqGim
CC5VT3KdAZl4NAns4O4hloYH1ucnkh2DiwB0AM8RVu7VLnyv84db2Wkum+kacWdK
sBfsrAHSW3fOzDsIAAABjURZHlsAAAQDAEUwQwIfHtMyKGarQn6UrDlChhk1FMnQ
YVPww09Plhmbp/eshQIgC+cEwCBZbd1ZyHSXuQoZA1SUReXVpfu/wp0Qfd4P6jcA
dwDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAY1EWR+AAAAEAwBI
MEYCIQCld8t5RopNCGb6EumuCt+U534aLofaIYvALhMlMOLLVAIhALvHSmpLweNG
y7UMk4Y54xZMk6H3ErGIU3geU122DJ9OAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4b
jWnAsfpksWKaOd8AAAGNRFkgfgAABAMARzBFAiBZ8bt3EA8Livdwr4SFyRwSe/7W
57VarSyzqMg4hZ5aYwIhAPR78KeOfUP4TGHjZ51KEtMYZgu1u6lDWgOG7fzL9DMv
MA0GCSqGSIb3DQEBCwUAA4ICAQADEwx5PVqsSmf7U6Gnj4GHtbSkktF77jFLLccW
1rEt/NWrgHOM3YW6ctDS6UwcSiClS5OoXb81X1Gtm9x5W6LMVlaDWU0DNow+LPos
DsDN6+UTHo0aT9GinXN8jYbYd4IqJNRxYB38WKeIkMnNLNYbSO56SI6iEMXpvx9R
IqyQcToZ8UfALW3E3vXoBdQlAD2BlQiHB9rHNBWCzyomS6vw4PscN8qsFFWV68yO
ZpizmKmZrcCNQPy850mMTzZ0VrquwjeKqjNEk4lNXvsclfkoQliEB/q+syKpTt6O
miGKH7eV6L/IThkd6d64c74XBuN7uOYaWcTTHwqqW5f+HDh2rgYt1ySR22CXFI6C
/dZEndzwFULNop+Zzq3XPL/57iHZu7LeKBu2mL7OS8pyaCV4H+h+1XgwLOROFHk2
Ux7B4P5yV1dOO3bjr5FhWSDQtldc6dcyFalw6z1jDthUmE+mxCm1IIUMdQ7iuANE
E4kCed64PZlSLn0UmQS59Cu5k8HludGW4EkNrhyVfGjUJ+NdhWTgpwuV6Y7Iwcy1
vncCXmpzzJTCtu6+oArxCEN6Vm7Tt+Sja17/ktxOxEz9Jpa8+rfsY9AsFGKbsa61
Q62Bkfd+9Sjgt2K7kgd0n7wBvN80rJEjeq7foUA5Y8be1Z3DGyR/IKXkFWtfSZf6
IVqsRQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwB/T7wmO4NWICpaufETC
bXZoPhGEWcX4XmtFadP7j20Imjw/4FzReTx+PdLr+RPj4JrytTSHDqS+TsKXRv8c
A0pnJSTDzFQhOZ4+WXS3RJC9xitiwKNOW9NSP0QI8x5w1nKb3LIF3RCBY010WY/x
fOK57c/cNvCgWuR56uP7wwU4UUSuiUsrLb18ou4RIxSnKAFkaPySVZ+AylPVS0Wx
H8o/bBCvejyD6Da4UwFECGZdJaJhstgcTr95vGe6F2/SC0wmNvleQ3GC+pYUKK/d
8g3Ht+OI3fWXmD0fFtcdmQJOyDwpIV9KziByklfhAoGOPb1sLl1Y5+P9LWn1z/GN
tt8tDlYxdLLuyvU4e8p8RDrQtXhBBhQxkCJ9yOCZ5RrRFGaCzDt3Gy+hLlsJ5oa4
cbDwaR5MZ8ypm0jm3+RoqNXYYWJxtsk7BGwJ0Gj/J4NoTqEC5p3B9xX3RkgUZeaC
ei32YL9h2EZx+FDlN+CNIBP1w/fqznldI/0XrZCtvmnn3uCzEYRa7KjpX+XTZt0v
V0GY/9mDie3ZERs9+RJr03Y31NDpfKvRVQ5+mZvrZZetoQ6/Wihts4y+PHupC6Gw
8SF8uMYrXJneYjWOWMKtt+4L5QpcaCHFRIYWY82A0WED5ThhrfrQy33VoYSvme7A
5JFpV4KS2LAEMI1sAZTKy3sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53852841719212253263755042137471125496524580207
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-26 05:58:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-26 05:58:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev-opus.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783798873424783829694853474598534313129696795374666718649728724436163227697333913285573456592590480479755106498145479866782062246355475706108871352497541349000966881177758179781480928741852706566509303377795497744157833585774760074435234083426812905040025077545982602029607966624768136801477894681199362930826566886234603250589808501705169368386269149773615953075469795320283533790423256549677052653911550762734731782256148464771228853791486921704762807258249538206056822341152974936123564296249964003242400292534223131504199828114181134483445970777353140457503787157710508769973691457454004154126350978463000576274423339509488620589153615016246933557832402342679649444829554247984801582527942968921923674424360271846104265644538559208245796479044234195483676256906097078175587295519092620682049201907218346435010137036549152251984721067803565462932404666738702661319648466217174444372225423796612235830616464655000773467267781947519672743791901012152397219422488158046867737518380362795063205339269780815421703931245535801871835619367518607477409570314946339921012623837103398768367383000797113573837592169854912794228422797165719546346603284846283000197831893257790785246103268155226393317838789341291169054211730230323917229837179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-opus.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93484fc36dfcf5c788b91569c4d2d5f914b11837
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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