datrading.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 04:28:b2:d0:3a:62:d1:02:21:e9:ad:11:90:50:fd:17:a1:59:6e:7c was issued on by SwissSign AG.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=datrading.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 04:28:b2:d0:3a:62:d1:02:21:e9:ad:11:90:50:fd:17:a1:59:6e:7cSerial Number (int): 23743569734473063941918027975261602947981209212
Serial Number lenght: 155 bits, 20 octets
SubjectKeyId: f4:56:4c:ac:7f:53:82:6a:c2:99:32:6f:a0:c2:ed:53:e0:ca:38:f2
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): 70:ce:9f:e8:ae:75:22:c5:89:47:91:4d:ed:28:4a:32:c3:64:d0:65
Fingerprint (sha256): 1c:44:f2:03:ce:e5:cc:9e:18:bb:c8:c2:2f:ff:60:85:99:76:2a:8c:ca:bd:87:05:05:40:45:d9:d9:b7:7a:82
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate datrading.lucorp.ch
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for datrading.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
datrading.lucorp.ch
www.datrading.lucorp.ch
www.datrading.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for datrading.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJHjCCBwagAwIBAgIUBCiy0Dpi0QIh6a0RkFD9F6FZbnwwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTIzMDUyNTE0 NTgxOFoXDTI0MDUyNTE0NTgxOFowHjEcMBoGA1UEAxMTZGF0cmFkaW5nLmx1Y29y cC5jaDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMg4bv3a/5wck14L 8U9sHB+RiAa+8CyVhMVezR4PAr9VBB5FaAC454+vaEYcMr7mb8pPQqYnmWhWFewd NiUlHB8EunHn8i9CnjVF8mB6lhZmLPkfTpLkoWvmodxMmzr9pSuYIxQrKI6DAa7a aeFXQ1th44GdxPv/znE87jYPIsylQIx2gxA7Wy3kjPsYR9vxY3UOsDZasCWHI/59 81oM+WQaTwPLI8TDsV5sUKcHrIi18ONxouWhOAkwzHuw+TxO3+Ezr904m+D9UTwl F0yLxjnVYP0PfuVZQNXQN+4jTJVTRZJQJ97Fq2hTOD257XYjPwmlSikO0O2LFWE+ 9pMik9QVrVED2f/rFdrhlzyyaK5HLFw3oSV0TtvebdQlI1qzEUvq0eqyw7vufqVg icj/CMA2LIkzoQG/krO6s1E+D9TDvijVLlUACXas1RDjzlHeokpD6HBk4pZEMscB 4j9wwcr0l/wtbeM1EVrcBknmxwX05yTOCWjHZS/Lc+SyMtrtLziZ2o/upykJGHfP oulQ15G5pR6/bzxJvBx7Pm7kCXvFBsAy7YBzRueoaEEZxRzkcp4Klio9xaXmz1jQ YnCYYt9hFGkgLWXQO0dEOYIxZXjULZme0E7aFdX7tg6cUckS82LcDQX6U/ujK/s1 WVAnxm8aFIzoSwhMzMuKmmTEdw9lAgMBAAGjggQgMIIEHDCBsgYIKwYBBQUHAQEE gaUwgaIwTAYIKwYBBQUHMAKGQGh0dHA6Ly9haWEuc3dpc3NzaWduLmNoL2Fpci0x Yjg2MzM4NS1mNGE5LTQ3ZmEtODhhNS0yYTVhYmZkNGExNjcwUgYIKwYBBQUHMAGG Rmh0dHA6Ly9vY3NwLnN3aXNzc2lnbi5jaC9zaWduL29jcy1hYWNjY2VkNS02NmU4 LTQwNjktOWIxYi1mZDI5YWI3M2VmZWMwbwYDVR0gBGgwZjAIBgZngQwBAgEwCAYG BACPegEGMFAGCGCFdAFZAgEBMEQwQgYIKwYBBQUHAgEWNmh0dHBzOi8vcmVwb3Np dG9yeS5zd2lzc3NpZ24uY29tL1N3aXNzU2lnbl9DUFNfVExTLnBkZjBRBgNVHR8E SjBIMEagRKBChkBodHRwOi8vY3JsLnN3aXNzc2lnbi5jaC9jZHAtNjc5NzIzYjIt ODY0MS00NjQyLTg1MDAtZjZkMmZmMzdlNmJhMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAOBgNVHQ8BAf8EBAMCBaAwNwYDVR0RBDAwLoITZGF0cmFkaW5n Lmx1Y29ycC5jaIIXd3d3LmRhdHJhZGluZy5sdWNvcnAuY2gwHQYDVR0OBBYEFPRW TKx/U4Jqwpkyb6DC7VPgyjjyMB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzSZ/CD sereMIIB9wYKKwYBBAHWeQIEAgSCAecEggHjAeEAdgBVgdTCFpA2AUrqC5tXPFPw wOQ4eHAlCBcvo6odBxPTDAAAAYhTav7wAAAEAwBHMEUCIGI9rpeYzl5ofADqV75E NoiY/1FCBfH249CNxd8W/aCTAiEAvumUSZPh2t2xuJRQSKyPreDC9Pa5QIgTCfyn 426BFXMAdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYhTawGH AAAEAwBHMEUCIQCEt7B/SgF7gRpTG05FdU/ztaYaUPah0h3NxsogkaWH7QIgHTQ5 rTqmQlzu7PANe/ZE2RrgAR+bSKP6tt/r94hesOgAdwDuzdBk1dsazsVct520zROi ModGfLzs3sNRSFlGcR+1mwAAAYhTawSPAAAEAwBIMEYCIQCF2fEdndLnD9TdDu87 jcVCuR3Y8TNK40iA//0DgXPprAIhALhC6fo/nMl2wtYQ80bGn9MBP2JYN6vN00+9 py9SOXCtAHYAh0+1DcAp2ZMd5XPp8omejkUzs5LTiwpGJXS/D+6y/B4AAAGIU2sI UwAABAMARzBFAiEA2lNV/wTM5NBA08Axg+8gpxu7z4YTZeiKmPmzTLaw334CICin 8nZG40eNH2c1GPgqR7tADO4RXlSMToYA9t6r1XmmMA0GCSqGSIb3DQEBCwUAA4IC AQB6Hv5jMA3p1+3rUt6SKU+8/TTvVEbQCc1z5GtGKsCRUnKCO8/jowRvcX72oOx1 SM3NiW0kllfUURQ1iHvVv0tBg3XHFTf32G9723qMjPtsBu6TViN3JfRZmWzP0pHz YmQcAqkMseqClU32tne8e2YFiN0nbXtXZJbl3E9tYfigE0iFKKSmx2j3JfzIelRC Nu71Dm8GVAVTPDdKOwIRDfQvTpvOM87orS94jPbWAkJNBu48SBEhioir3hJDmMUM 14MvjD9bYchc1m1B5e8qNlXvIuPmWlYQRT+RFoFvDVhbqY69JAQklb3CSUsEkRir lrg5ajI/qHkOh8wgvZk3k+MzpjZt8AZHozYKWkLoyQImUnWG1nzceRv4TisoVcqg +ohhM3I3oCiqfJ0ULTRxvdoiku1XoobxpSH0JR45zx7GxRscvucueyNHAs4bMh8k UX2wZfNZmJO3MU1Bylrup+Vzy/ZMYaN5b9oHIbRAwWqpVvtzePxxrCIMIwuRkqsJ 9AG4Xc0PbTrx2XmzMoo4K+RTYxxSuvtr507Rn5y4+iGRA+IJXos/ZXJ+KVlbLCDw uQS6n1J3jh/ATsuF2Tv+hUsL9/Zi6gFc8SuSiQNz6rN224AHuZwv6q4VJACdjvFA vM0Kxu/tuKxKX3eMcbrNAoCxVWFXFCxDyWZ95EtaFJXzdQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyDhu/dr/nByTXgvxT2wc H5GIBr7wLJWExV7NHg8Cv1UEHkVoALjnj69oRhwyvuZvyk9CpieZaFYV7B02JSUc HwS6cefyL0KeNUXyYHqWFmYs+R9OkuSha+ah3EybOv2lK5gjFCsojoMBrtpp4VdD W2HjgZ3E+//OcTzuNg8izKVAjHaDEDtbLeSM+xhH2/FjdQ6wNlqwJYcj/n3zWgz5 ZBpPA8sjxMOxXmxQpwesiLXw43Gi5aE4CTDMe7D5PE7f4TOv3Tib4P1RPCUXTIvG OdVg/Q9+5VlA1dA37iNMlVNFklAn3sWraFM4PbntdiM/CaVKKQ7Q7YsVYT72kyKT 1BWtUQPZ/+sV2uGXPLJorkcsXDehJXRO295t1CUjWrMRS+rR6rLDu+5+pWCJyP8I wDYsiTOhAb+Ss7qzUT4P1MO+KNUuVQAJdqzVEOPOUd6iSkPocGTilkQyxwHiP3DB yvSX/C1t4zURWtwGSebHBfTnJM4JaMdlL8tz5LIy2u0vOJnaj+6nKQkYd8+i6VDX kbmlHr9vPEm8HHs+buQJe8UGwDLtgHNG56hoQRnFHORyngqWKj3FpebPWNBicJhi 32EUaSAtZdA7R0Q5gjFleNQtmZ7QTtoV1fu2DpxRyRLzYtwNBfpT+6Mr+zVZUCfG bxoUjOhLCEzMy4qaZMR3D2UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 23743569734473063941918027975261602947981209212 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 14:58:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 14:58:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datrading.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816828145019966356026978902624996160198775046915371816908155072324383546068128410156088237854492438800598287851968107714605586799389735170013378419264057411595772180440336141051235654015695550514911645477546200195048961718945054375618109034310301496022936963401275117904552486719885858567455510844515577552081884622569222985332959851818875825550966893200674047331959688180699073631100456323782077209383586976204057667482941446453350806987713825459837459294470422368732541424691214272960810552822204754969491999576966023640339836629934269784297873293392206531340832579278022063986740133676524927856903721827409263920786431628811437707133450382256085823366116510669026946138121948268898215634736568446836944125721086767620364636717697808801976301941709068314967812622954117638328747414350507819389726656905629536849074083544083722993968356683714599473686642053843868660651260896955884566965807345977944953997949331808990583011755880061052447603855508951729464292044664119456842694194617868749685480853038609029348937006212486415928223114039103334540369347814092679768942845453771828345037257748876217413373632752389134647558298921542306898807474646788317248198264402952936520618198466789112265493019335049281770063846821863821875285861 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datrading.lucorp.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datrading.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f4564cac7f53826ac299326fa0c2ed53e0ca38f2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 01e10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000188536afef000000403004730450220623dae9798ce5e687c00ea57be44368898ff514205f1f6e3d08dc5df16fda093022100bee9944993e1daddb1b8945048ac8fade0c2f4f6b940881309fca7e36e811573007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188536b0187000004030047304502210084b7b07f4a017b811a531b4e45754ff3b5a61a50f6a1d21dcdc6ca2091a587ed02201d3439ad3aa6425ceeecf00d7bf644d91ae0011f9b48a3fab6dfebf7885eb0e8007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188536b048f000004030048304602210085d9f11d9dd2e70fd4dd0eef3b8dc542b91dd8f1334ae34880fffd038173e9ac022100b842e9fa3f9cc976c2d610f346c69fd3013f625837abcdd34fbda72f523970ad007600874fb50dc029d9931de573e9f2899e8e4533b392d38b0a462574bf0feeb2fc1e00000188536b08530000040300473045022100da5355ff04cce4d040d3c03183ef20a71bbbcf861365e88a98f9b34cb6b0df7e022028a7f27646e3478d1f673518f82a47bb400cee115e548c4e8600f6deabd579a6 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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