lu312004.lucorp.ch
Issued by SwissSign RSA TLS DV ICA 2022 - 1
About this certificate
This digital certificate with serial number 38:e3:92:bd:ef:1f:d0:06:4a:12:e2:fd:d7:ba:21:79:9f:22:d4:d7 was issued on by SwissSign AG.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=lu312004.lucorp.ch
SwissSign AG
Organization:
SwissSign AG
Country:
CH
This certificate will expire on
Certificate Details
Serial Number (hex): 38:e3:92:bd:ef:1f:d0:06:4a:12:e2:fd:d7:ba:21:79:9f:22:d4:d7Serial Number (int): 324778535351165521298265398114163553836376184023
Serial Number lenght: 158 bits, 20 octets
SubjectKeyId: d5:e6:9b:a3:e7:9c:f6:e9:f4:0d:75:f7:96:84:8f:db:7e:fb:bb:17
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de
Fingerprint (sha1): b3:c1:fb:be:a9:4e:b6:78:25:ec:bd:ab:8c:89:68:32:5e:5c:54:ec
Fingerprint (sha256): 1e:76:30:ce:0a:80:d0:e4:75:74:35:5c:85:85:3c:47:26:9f:5c:3f:ee:ca:e3:4c:cd:1f:bb:51:1f:bb:c3:58
Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167
Revocation information
OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efecCRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba
Check the revocation status for certificate lu312004.lucorp.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lu312004.lucorp.ch
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lu312004.lucorp.ch
Other certificates including the domain name lucorp.ch
(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch
Certificate
The complete raw certificate details for lu312004.lucorp.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIJAzCCBuugAwIBAgIUOOOSve8f0AZKEuL917oheZ8i1NcwDQYJKoZIhvcNAQEL BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDMyNzE2 MDMwNFoXDTI1MDMyNzE2MDMwNFowHTEbMBkGA1UEAxMSbHUzMTIwMDQubHVjb3Jw LmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx6gMQ68qv5bUOp2E gP8tWIK790dhqLpv+TxWXCU4kLYUY2PRJ8QHZYQx5dh+i1dWr4w/zMs5kyxjhNMK TFLdDPV+oM2ZaiF9ueyfZX2dHBBiVGI1qiXFmRBIP3eA+LqzTCyBYiksEk5DnUG4 tUghn9ladz45LhkMFH9C+fkswlQdaT3fkP6ZKEOdTORFIUmlevhjT/7wOvtuk0sN WUiaJ2GWnQyszHHypA8cjmHmINqJBGJd3mAY1PeIt/FXawrIJCyOaTiNIjxfM8Pm x4Bez9J803BBnPR3x57WQV7zm+LMr5qbRR7xc/OoInhDwzdRG36kuMfvIapImpYJ thSpi8BPYGEPejh2wLvBzI811rv1T4+mRaWxo010wkesERtvNxobQLgpKDDtWH6E yyoWefPOMbSpHEzk9PZ63L+we///TbvM84bOAyPhS/zXKNwGII9FiswkyW8+3lMa sNMp/K1KW4qtFhFGUvfIvgn1nOsrHq1vs2DVOeZ2YFyr6kOSqArhRGncFKc7flDV lqAI81cu9EmYJ7niiBlm52KuHysgEkh0D+pNYCrTRvQ9emkgB+ITiu436C5ZrBEJ W/EAS/69R8hyyVVNw98gzU3X/hjrwY+HMREJQ4hlrLtvACZlNB6flbYDnZs84SjJ utCU8xcuQhw6HZfVvmSs6/H/SrsCAwEAAaOCBAYwggQCMIGyBggrBgEFBQcBAQSB pTCBojBMBggrBgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFi ODYzMzg1LWY0YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZG aHR0cDovL29jc3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgt NDA2OS05YjFiLWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYE AI96AQYwUAYIYIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0 b3J5LnN3aXNzc2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRK MEgwRqBEoEKGQGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04 NjQxLTQ2NDItODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDAdBgNVHREEFjAUghJsdTMxMjAwNC5s dWNvcnAuY2gwHQYDVR0OBBYEFNXmm6PnnPbp9A1195aEj9t++7sXMB8GA1UdIwQY MBaAFOu9f0mTjMnu7KK69xzSZ/CDsereMIIB9wYKKwYBBAHWeQIEAgSCAecEggHj AeEAdgAo4oE4/YMhRemp1qp1N22Dd6iFErPAf3JBSCHcvemMZgAAAY6App2LAAAE AwBHMEUCIQCDd6k+yw9TeL7PYHUHYpQ22BFxkY9tsA1uwJc7TFztngIgdhN1wygR OKTs4lS6vsm9S7fxJYn/PwiN/S0qozSYjv8AdgDPEVbu1S58r/OHW9lpLpvpGnFn SrAX7KwB0lt3zsw7CAAAAY6AppgLAAAEAwBHMEUCIQDt0Xb97Hpz/3PYsSK7TzII 92yKkrXVLSTOV38SfakG8wIgHiMkb7eVL7tf+SaBs07fFPUof+bZifogy1KS8Uqz BsQAdgDM+w9qhXEJZf6Vm1PO6bJ8IumFXA2XjbapflTA/kwNsAAAAY6AppgwAAAE AwBHMEUCIB6MvhegrYn6LE9Ucf2+K1YXVZ/9w3+yqCLv8F2QJeH8AiEA5yn9K61/ Cl4VFqTFLHTJavCR51ojLYt3P/Nxcj4CbLEAdwBOdaMnXJoQwzhbbNTfP1LrHfDg jhuNacCx+mSxYpo53wAAAY6AppgZAAAEAwBIMEYCIQDVRrimE62h0R0t2aBs71PF AUabQB+IeeSyakWWmc/IzgIhAK1Rz7iNbpn8kUysaOOhAS16/9KMKOgwGOb94Fsk ipGqMA0GCSqGSIb3DQEBCwUAA4ICAQBIl1MbXt9I9hlxzm4HUgqhPpqNAquZL1YX Pton+8RRIHt4fcF/lLf9gvoNeT+Om7utaywQpqyyp/t1Z2AaofJxQAovVC73ifgA ViPZdudW776b1Mg3AltmFmusu4x53ffm3Rv/FjpEAGG0mtPpGoAoIVGxVi9k6QUr 880Yh+erEBEFV3wJawzuIL/GUdiygh1aNtTyeZLoWbz5i46ZqLllSxip9Atl0bD/ 9DHNVFgwCXVu4i0lFYtDEgaCgNI0Qyd7hjXkilay08yVe4wSwupWLbxuVimF4xgg +kXdYNSS61dS61bDl1U2uSE1IrlD+K3REIuIYq45Vwh49TnOaSz7kJF3YfjHKn1o yHmLWFUMjwN76+FRPPM17PE0uMTgTrBDJBXBh9T3cp6YPJtMkmvoyJSGILIq0Kfu PuHnYcOSGc6KvK3DrojCvD4gTT9ncEtord2pQrxO17IdstBbFlnhTiqGrQguS+ZK aWDIL2XSlXigMKwQRriPagGY7T5D9iZ45srtYbYwoaRKUaNft0/krFLp/wBbMoO2 xTE9k71eTOl30c0PTm+lMFX0xw75CVT0yE4yiidi9dJtrGyOQuyyhjnU66pog69J l12IO8OJ1C9OFE6QYfSCCm7A7aG2v4igiLx/I54gQSU32Y41yh085MCJ5a+s8EjG SHlVcVl36A== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAx6gMQ68qv5bUOp2EgP8t WIK790dhqLpv+TxWXCU4kLYUY2PRJ8QHZYQx5dh+i1dWr4w/zMs5kyxjhNMKTFLd DPV+oM2ZaiF9ueyfZX2dHBBiVGI1qiXFmRBIP3eA+LqzTCyBYiksEk5DnUG4tUgh n9ladz45LhkMFH9C+fkswlQdaT3fkP6ZKEOdTORFIUmlevhjT/7wOvtuk0sNWUia J2GWnQyszHHypA8cjmHmINqJBGJd3mAY1PeIt/FXawrIJCyOaTiNIjxfM8Pmx4Be z9J803BBnPR3x57WQV7zm+LMr5qbRR7xc/OoInhDwzdRG36kuMfvIapImpYJthSp i8BPYGEPejh2wLvBzI811rv1T4+mRaWxo010wkesERtvNxobQLgpKDDtWH6EyyoW efPOMbSpHEzk9PZ63L+we///TbvM84bOAyPhS/zXKNwGII9FiswkyW8+3lMasNMp /K1KW4qtFhFGUvfIvgn1nOsrHq1vs2DVOeZ2YFyr6kOSqArhRGncFKc7flDVlqAI 81cu9EmYJ7niiBlm52KuHysgEkh0D+pNYCrTRvQ9emkgB+ITiu436C5ZrBEJW/EA S/69R8hyyVVNw98gzU3X/hjrwY+HMREJQ4hlrLtvACZlNB6flbYDnZs84SjJutCU 8xcuQhw6HZfVvmSs6/H/SrsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324778535351165521298265398114163553836376184023 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 16:03:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-27 16:03:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lu312004.lucorp.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814527199419272353902572212781510963442468240850155026144365642435073222264890751279367164144988931007177962149616492284351378987061268636153751210000686933080026662723128400944100234424490054418963719889335809256690062425292879518880435111073161501045435360687803428592390346239517740150930016738177350689828612022391379383149942768092081948773612495570093889630527970596005011433836136426101567891219229364974744800257135558314468383745041671277462625480188776056573822225887213547711978433279001218911302276132005718154901181711072039239782090153794827704485450432191989222792869564529517535723136068178165430155823036005450074386903808175744384918719731986339003251108463086697864273519175617101931710123789836654623286333160876792132294108468319818797853820926817914597283113180799832063722859026688701512178346273554829204727611652294704786585874422452081610536650432052854687442568867607658115785405961384567257525844776571684652928401114703673002890994515478314982365491364388319108174209246684347614616652735606961069356177843310258171379999650726527248382505446841822169496037600855640080203435980006532976512914929323058939946191791275403427690809015430329553915893865912821031413522998096529211554015968577032923861961403 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lu312004.lucorp.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d5e69ba3e79cf6e9f40d75f796848fdb7efbbb17 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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