datrading.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 04:28:b2:d0:3a:62:d1:02:21:e9:ad:11:90:50:fd:17:a1:59:6e:7c was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=datrading.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 04:28:b2:d0:3a:62:d1:02:21:e9:ad:11:90:50:fd:17:a1:59:6e:7c
Serial Number (int): 23743569734473063941918027975261602947981209212
Serial Number lenght: 155 bits, 20 octets

SubjectKeyId: f4:56:4c:ac:7f:53:82:6a:c2:99:32:6f:a0:c2:ed:53:e0:ca:38:f2
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 70:ce:9f:e8:ae:75:22:c5:89:47:91:4d:ed:28:4a:32:c3:64:d0:65
Fingerprint (sha256): 1c:44:f2:03:ce:e5:cc:9e:18:bb:c8:c2:2f:ff:60:85:99:76:2a:8c:ca:bd:87:05:05:40:45:d9:d9:b7:7a:82

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate datrading.lucorp.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for datrading.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

datrading.lucorp.ch
www.datrading.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for datrading.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23743569734473063941918027975261602947981209212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 14:58:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-25 14:58:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'datrading.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 816828145019966356026978902624996160198775046915371816908155072324383546068128410156088237854492438800598287851968107714605586799389735170013378419264057411595772180440336141051235654015695550514911645477546200195048961718945054375618109034310301496022936963401275117904552486719885858567455510844515577552081884622569222985332959851818875825550966893200674047331959688180699073631100456323782077209383586976204057667482941446453350806987713825459837459294470422368732541424691214272960810552822204754969491999576966023640339836629934269784297873293392206531340832579278022063986740133676524927856903721827409263920786431628811437707133450382256085823366116510669026946138121948268898215634736568446836944125721086767620364636717697808801976301941709068314967812622954117638328747414350507819389726656905629536849074083544083722993968356683714599473686642053843868660651260896955884566965807345977944953997949331808990583011755880061052447603855508951729464292044664119456842694194617868749685480853038609029348937006212486415928223114039103334540369347814092679768942845453771828345037257748876217413373632752389134647558298921542306898807474646788317248198264402952936520618198466789112265493019335049281770063846821863821875285861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datrading.lucorp.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.datrading.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f4564cac7f53826ac299326fa0c2ed53e0ca38f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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