sharefile.lukb.ch

- Luzerner Kantonalbank AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 33:53:d2:05:ea:bc:22:7e:d7:41:aa:b9:2b:7e:cf:16:51:ac:a2:44 was issued on by SwissSign AG.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Luzerner Kantonalbank AG

Organization: Luzerner Kantonalbank AG
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 33:53:d2:05:ea:bc:22:7e:d7:41:aa:b9:2b:7e:cf:16:51:ac:a2:44
Serial Number (int): 293027786756967564187494437035798979487141241412
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 66:b9:0a:66:c3:d3:e3:78:b4:a7:2b:c2:74:d8:72:ad:9d:b8:c2:ae
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): f2:46:df:84:b5:7a:02:5a:68:39:88:f5:f6:1c:01:3e:8d:83:1f:f2
Fingerprint (sha256): 2d:13:10:02:67:4f:1f:b0:7b:5c:70:21:c2:d1:39:07:d8:3a:b9:47:6f:b5:3a:ba:e3:b6:b9:95:a6:1b:d8:7c

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate sharefile.lukb.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sharefile.lukb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oos-vap.lukb.ch
oos.lukb.ch
sf-vap.lukb.ch
sharefile.lukb.ch

Other certificates including the domain name lukb.ch

(limited to 100 certificates)
report.lukb.ch
www.lukb.ch
pricetrends.io
webmail.lukb.ch
loren.propertyservicesexchange.com
www.bambiskitchen.com
www.lukb.ch
app.swipefwd.com
int-caml.lucorp.ch
variobend-dev.az2.at
metisengine.com
test-inba.lukb.ch
elixir.college
quote-push1.lukb.ch
pic-sportingindexacceptance.mentor.neccton.com
download.osmanturan.com
www.massagestudio-harmonia.ch
www.lukb.ch
staposetiti.com
www.joseantonioribeiro.com
inba.lukb.ch
www.lukb.ch
ggx01006-013.gadabout.games
nhayendathung.com
www.softcode.com
kigalirides.rw
uci-lukh-nwe-002.lukb.ch
jovanpetrov.com
login.source.topic.com.ar
www.lukb.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
www.softcode.com
call.telesastho.com
pxmystery.aureliencurti.fr
dev-ebics.lukb.ch
links.thevellaapp.com
kdvinhlong.xbot.com.vn
int-www.lukb.ch
secmail.lukb.ch
skillseastriding.co.uk
encaixat.webcoop.cat
api.freetrade.io
uci-lukt-np-001.int-ucc.lucorp.ch
www.syntacorp.com
qunying.es
staging.api.v2.tnsj.pt
dev-www.lukb.ch
www.anagramsgold.com
www.antonaparin.com
zerogermsmenus.com
listennow.usefulbots.com
auth.mqtizer.com
maximemivilledeschenes.com
na2.bqd.us
my2023.site
appl10-ocemd.lukb.ch
admin.loftyapps.com
kontakt.laburoso.ch
www.thuongthansohoc.vn
silvaconstructionandcleaning.com
stayc.re2fe.com
pruksamoney.co.th
maint-ebanking.lukb.ch
int-www.lukb.ch
todomundopurple.com.br
elektro-placzek.cz
reporting.oso-ai.com
quote-push2.lukb.ch
eas.lukb.ch
careers.lukb.ch
www.bidmytires.com
secmail.lukb.ch
sharefile.lukb.ch
uci-lukh-nwe-002.lukb.ch
secmail.lukb.ch
nlink.lukb.ch
secmail.lukb.ch
int-www.lukb.ch
vybinex.com
www.steelect.com
uci-lukh-np-001.ucc.lucorp.ch
www.dirtygoldfish.com
dev-www.lukb.ch
mo.lukb.ch
uci-lukt-nwc-001.int-ucc.lucorp.ch
mikulas.ddmpraha.app
apachi.app
mo.lukb.ch
juxco.de
appl06-ocemd.lukb.ch
int-www.lukb.ch
int-www.lukb.ch
webview.kairosgame.com
inba.lukb.ch
www.mvpsolutions.tech
uci-lukt-np-001.int-ucc.lucorp.ch
static.reality-overwritten.net
nbild.lukb.ch
eb99-www.lukb.ch

Certificate

The complete raw certificate details for sharefile.lukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293027786756967564187494437035798979487141241412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 11:58:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-22 11:58:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzerner Kantonalbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sharefile.lukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807444021908447039852842332779234683475698873067022506291340661750843234855993472720106172478831015598094185435389633768661043175404837337026317939134094461992864466623515155437050102002897964551048971736816396665467460667165447351449591364773234947042617707421716673566123794758103948371776011356106830625591403879609997564450693862335986125112029915529151128023673177984360829703776565746621050783794903381230987256417486027357272344871276146837354966248658818764396978160484252043230539377395183839332928471072663785033249203141737626950091882893629409017810237673841780179020364968576223569773941000243629011918617741564264411131170482234680563492850076665636318126524172253200263592770268571163226614043946403542948802900282034313945625974494787846923219970274487493839684767264124760607337850612471133913450778861467370664712607133782246434680325426569359762147968727160354342338521675316551378454512468313292870450659326667738022175266772063854092365593221425180459683651897026078584977366300151730767741705978990950386493635410279239214956185247002684793471643826238533918495692611907969273865274435355421748051287438430138999860528630073115414106175293070136775517508050162404976229658867893544422259862672382002787710829031
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos-vap.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oos.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sf-vap.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharefile.lukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66b90a66c3d3e378b4a72bc274d872ad9db8c2ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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