vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch

Issued by SwissSign RSA TLS DV ICA 2022 - 1

About this certificate

This digital certificate with serial number 32:a1:cf:f8:f2:bb:0c:2e:d9:d6:f1:47:e6:07:91:de:9a:bf:30:d1 was issued on by SwissSign AG.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 32:a1:cf:f8:f2:bb:0c:2e:d9:d6:f1:47:e6:07:91:de:9a:bf:30:d1
Serial Number (int): 289058075474014658894563704754602197603399446737
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 5c:9e:b5:33:50:69:be:7f:00:6f:76:d4:51:09:06:78:2e:96:77:13
AuthorityKeyId: eb:bd:7f:49:93:8c:c9:ee:ec:a2:ba:f7:1c:d2:67:f0:83:b1:ea:de

Fingerprint (sha1): 6a:ae:20:25:25:64:35:c4:3e:09:de:d1:0f:4e:93:a9:1b:4a:c6:5e
Fingerprint (sha256): 22:99:43:4b:f0:0e:3e:fd:10:d9:65:b0:cd:ac:06:d9:da:47:c2:15:83:3f:cc:6c:c4:a9:91:2f:14:7a:43:e6

Issuing Certificate URL: http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba

Check the revocation status for certificate vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch

Other certificates including the domain name lucorp.ch

(limited to 100 certificates)
int-opus.lucorp.ch
dev-zertifikate.lucorp.ch
sb009425.lucorp.ch
lu311003.lucorp.ch
contractx.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
michel.lucorp.ch
caml.lucorp.ch
zertifikate.lucorp.ch
dlp-admin.lucorp.ch
norma4040046.lucorp.ch
int-caml.lucorp.ch
dev-zertifikate.lucorp.ch
uci-lukh-nc-002.ucc.lucorp.ch
lu326003.lucorp.ch
int-ecm-trans.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
*.ops.lucorp.ch
tst-opus.lucorp.ch
vm-prd-iacmvp-gitlabserver-chn-001.gitlab.azure.lucorp.ch
int-ecm-trans.lucorp.ch
lu317003.lucorp.ch
amx1.lucorp.ch
paedi.lucorp.ch
tst-opus.lucorp.ch
dev-admin-anlegen.lucorp.ch
old-opus.lucorp.ch
zertifikate.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
rechner.lucorp.ch
norma4040315.lucorp.ch
uci-lukh-nc-003.ucc.lucorp.ch
uci-lukh-nwe-002.lukb.ch
*.lucorp.ch
norma4040044.lucorp.ch
old-opus.lucorp.ch
lu380003.lucorp.ch
tst-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
ecm-act1.lucorp.ch
old-opus.lucorp.ch
int-intra.lucorp.ch
dev-zertifikate.lucorp.ch
int-admin.lucorp.ch
dev-opus.lucorp.ch
test-dlp.lucorp.ch
int-opus.lucorp.ch
zertifikate.lucorp.ch
quote-push1.lucorp.ch
norma4040045.lucorp.ch
tst-opus.lucorp.ch
lu326001.lucorp.ch
old-opus.lucorp.ch
dev-zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
int-opus.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
zertifikate.lucorp.ch
dev-zertifikate.lucorp.ch
tst-opus.lucorp.ch
int-opus.lucorp.ch
old-opus.lucorp.ch
tst-opus.lucorp.ch
ecm-act4.lucorp.ch
norma4040045.lucorp.ch
keycloak.test-dlp.lucorp.ch
int-datrading.lucorp.ch
dacs.lucorp.ch
int-datrading.lucorp.ch
dev-opus.lucorp.ch
int-opus.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
uci-lukh-nc-001.ucc.lucorp.ch
dev-opus.lucorp.ch
uci-lukt-nc-001.int-ucc.lucorp.ch
lu311003.lucorp.ch
opus.lucorp.ch
zertifikate.lucorp.ch
datrading.lucorp.ch
old-opus.lucorp.ch
lu312004.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
sb001904.lucorp.ch
dev-opus.lucorp.ch
norma4040250.lucorp.ch
dev-opus.lucorp.ch
opus.lucorp.ch
old-opus.lucorp.ch
test-dlp.lucorp.ch
sursee-safepro.lucorp.ch
uci-lukt-nr-001.int-ucc.lucorp.ch
lu15388.lucorp.ch
vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch
michel1.lucorp.ch
dev-zertifikate.lucorp.ch
arbeitszeugnis.lucorp.ch
old-opus.lucorp.ch
lu305003.lucorp.ch

Certificate

The complete raw certificate details for vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHazCCBVOgAwIBAgIUMqHP+PK7DC7Z1vFH5geR3pq/MNEwDQYJKoZIhvcNAQEL
BQAwUDELMAkGA1UEBhMCQ0gxFTATBgNVBAoTDFN3aXNzU2lnbiBBRzEqMCgGA1UE
AxMhU3dpc3NTaWduIFJTQSBUTFMgRFYgSUNBIDIwMjIgLSAxMB4XDTI0MDExMDA2
MTMwNVoXDTI1MDExMDA2MTMwNVowRDFCMEAGA1UEAxM5dm0tcHJkLWlhY212cC1n
aXRsYWJydW5uZXItY2huLTAwMS5naXRsYWIuYXp1cmUubHVjb3JwLmNoMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzzhj/Flr9eP8422amwxwx8QWWmZ9
RwmOmMHHbR42qAHYgbJcCSrIlZ0xU1yr2Y4HS8qPlzdpufRO4BMZB6Vh9Nx6kx2l
2IuN+1WJfYa8Rk0OK5z/IpNSJWi8wph9jYAe3TxJuEd16MKyRv78Tu+tKINuV51Q
tKBEkD9W5P4iE6i3bCdRmz0AQqrupugGJtVm3TfdlBODfA+Q9fMj/XHf6BEmLp0B
T9FD5UxJ9LFWTVL0O72IytBgWwXnuyGLXaUhHeuG978kXG5NuUpGV2EQowDBUZlo
axwoawIsIcklKdc/xOeK4GI7wwhRoyq2XUWHGhITukQ0B4bSMi6D0V2rVhwszLlW
DF2/EOTstDkXNIqVOfx+/lUo7UNXokXuXdtVl+vRU7lwxijxDndfX1bv7hl/Zpxs
Lt3JtFA1TzMzfKSE/r/q/05QWwAytNdUMhV26vOHF2g7p39lWDgPTftXPjn0Otw+
rEGxccAMmPfylYf/RfF0emC/6xhQ2hLy4CgCpLPpW9Ht0tANCdU04EwEESu3YCE7
sLclgOeRRVp8HQ+k6W/t0zmAINcWUSdyN21kyUhWDUtLauA1Ew3MFzZLVUPVK1aY
/6dOcRCXedo3X3tXTDhHsyJinjqHlyTcN6/jy8icj/YhruHvCXqWFj7GGbN0N1tF
dNSpyKoOW7+0y3sCAwEAAaOCAkcwggJDMIGyBggrBgEFBQcBAQSBpTCBojBMBggr
BgEFBQcwAoZAaHR0cDovL2FpYS5zd2lzc3NpZ24uY2gvYWlyLTFiODYzMzg1LWY0
YTktNDdmYS04OGE1LTJhNWFiZmQ0YTE2NzBSBggrBgEFBQcwAYZGaHR0cDovL29j
c3Auc3dpc3NzaWduLmNoL3NpZ24vb2NzLWFhY2NjZWQ1LTY2ZTgtNDA2OS05YjFi
LWZkMjlhYjczZWZlYzBvBgNVHSAEaDBmMAgGBmeBDAECATAIBgYEAI96AQYwUAYI
YIV0AVkCAQEwRDBCBggrBgEFBQcCARY2aHR0cHM6Ly9yZXBvc2l0b3J5LnN3aXNz
c2lnbi5jb20vU3dpc3NTaWduX0NQU19UTFMucGRmMFEGA1UdHwRKMEgwRqBEoEKG
QGh0dHA6Ly9jcmwuc3dpc3NzaWduLmNoL2NkcC02Nzk3MjNiMi04NjQxLTQ2NDIt
ODUwMC1mNmQyZmYzN2U2YmEwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MA4GA1UdDwEB/wQEAwIFoDBEBgNVHREEPTA7gjl2bS1wcmQtaWFjbXZwLWdpdGxh
YnJ1bm5lci1jaG4tMDAxLmdpdGxhYi5henVyZS5sdWNvcnAuY2gwHQYDVR0OBBYE
FFyetTNQab5/AG921FEJBngulncTMB8GA1UdIwQYMBaAFOu9f0mTjMnu7KK69xzS
Z/CDsereMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQAX
LgpS0z/rsEl3g53GRvgoHCae9bE3h1kTYNmD41GrBaQrpkne5pbQ4vzfpGK8O35I
xD5RmJxu/LCMJanalBdc3hTOLv2p0no8X4wnrBd0guuHgjsetFEHrpUZXSbFzKqa
gpmyhQURqwqgvD0zCXW21uez3aiI2NQ/fRsTbc2TXGHowXC+kEQpcRGA/UQc/YNE
Kq8rcyPVYQ1BvAsrRz42p+uPgOM6WNcWRELtxnlKsyXjiJruZPDJ3kEMb3tP+2mO
RjVb6vBmsi+kQ2EiArAqL4nYBOI5hUTLlJy9wbQ/CzbDDpbmy/xXAtDV2xSPkIK5
FMAIDBgNyh9y9M+DMVw7b58Urq897H3IA+6imgm2wD71w9lJGj2BR7nY7po8wjck
jSSs000y5orES9oI+zmcw6zLtpNw5m2a5aQ05MVidyRGhxz8y8GQuR3Br3QYKbAO
tYmbA0UO1sz8HlfxYUPceCLyDPi72u2lnE+1VOX96Zj3MhcjBYXj2fFZqAfzFl1i
lxt3D1bKreA8xY4yIT26rTX/axZ2yX4o4J5DHm2IF0HAznDFyKxQBM3lPnKBnN4Q
+gm3UlxIBsd9rjx1wgULFvm39dcDBKjkxxNSz0HQUkDeAXRd773ityJp6rlBE3xG
3n2Yx8Wb88Emxg6IGk+kT38CKxFVyoBNh+uJbzYf1Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289058075474014658894563704754602197603399446737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS DV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 06:13:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 06:13:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845384968375149811385764591899931166433496465231416089302029070527845343807927496633521306128245621507748615762009949753706768883498902067546165685322613575177633234281837947708680856443818038883386381679016233063386137502356190635232741576104498580433882594307144395206876966761357033657680687673683671817681358993045055335206119510845066301055511888734216020038623398690157904679502743060500720549604870586054356604965836275168108746314113284015114942506944025018601051166052095445878048382148136360584397713729938851249940387511135829028920726582983300399800142103473998847970759733133785712998923594235534454298482168119995052380164130168248432983630725800878605976368240795698612688260325359637332967655709654041114360785077219299064108428571993816960637539432962326292680719940458788953030434550654950418252980126393607325692080241226512342843061144962699423697526786040791587011063426955833402862880722441691656898808706892590210479423417546977253070532812984069908481842864494035323547319921223307199206866917987652364012504552439644908654369615480847850170375269913124457911278053831348650954767965192153701383194223368384544108430283223940501278898521461673137061707161478931331802347059897589232184870525959791521272482683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-1b863385-f4a9-47fa-88a5-2a5abfd4a167'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-679723b2-8641-4642-8500-f6d2ff37e6ba'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vm-prd-iacmvp-gitlabrunner-chn-001.gitlab.azure.lucorp.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c9eb5335069be7f006f76d4510906782e967713
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ebbd7f49938cc9eeeca2baf71cd267f083b1eade
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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