nbild.lukb.ch

- Luzerner Kantonalbank AG -

Issued by SwissSign RSA TLS OV ICA 2022 - 1

About this certificate

This digital certificate with serial number 3d:32:d7:44:20:51:87:db:ca:95:9d:9e:b2:f9:62:f2:f2:be:34:4f was issued on by SwissSign AG.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luzerner Kantonalbank AG

Organization: Luzerner Kantonalbank AG
State / Province: LU
Locality: Luzern
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate will expire on

Certificate Details

Serial Number (hex): 3d:32:d7:44:20:51:87:db:ca:95:9d:9e:b2:f9:62:f2:f2:be:34:4f
Serial Number (int): 349382226603815648661762660947459648845363688527
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 4b:0d:ed:71:ef:37:df:be:ce:c6:ac:88:35:fc:e3:ba:01:d9:66:dc
AuthorityKeyId: 7c:6f:0a:6f:13:0f:d9:8c:24:6f:26:34:f3:5c:6b:43:6d:b7:23:b6

Fingerprint (sha1): 98:99:d2:f7:0a:7c:65:c4:f6:4d:86:84:a6:6e:36:3d:cc:dd:c8:6a
Fingerprint (sha256): 3e:a4:9b:ed:52:b2:01:17:c0:f7:e9:cb:ff:90:95:e8:18:08:42:38:06:bb:67:2a:6f:35:69:28:1d:ae:9d:03

Issuing Certificate URL: http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45

Revocation information

OCSP Server: http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec
CRL Distribution Point: http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34

Check the revocation status for certificate nbild.lukb.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nbild.lukb.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nbild.lukb.ch
www.nbild.lukb.ch

Other certificates including the domain name lukb.ch

(limited to 100 certificates)
report.lukb.ch
www.lukb.ch
pricetrends.io
webmail.lukb.ch
loren.propertyservicesexchange.com
www.bambiskitchen.com
www.lukb.ch
app.swipefwd.com
int-caml.lucorp.ch
variobend-dev.az2.at
metisengine.com
test-inba.lukb.ch
elixir.college
quote-push1.lukb.ch
pic-sportingindexacceptance.mentor.neccton.com
download.osmanturan.com
www.massagestudio-harmonia.ch
www.lukb.ch
staposetiti.com
www.joseantonioribeiro.com
inba.lukb.ch
www.lukb.ch
ggx01006-013.gadabout.games
nhayendathung.com
www.softcode.com
kigalirides.rw
uci-lukh-nwe-002.lukb.ch
jovanpetrov.com
login.source.topic.com.ar
www.lukb.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
www.softcode.com
call.telesastho.com
pxmystery.aureliencurti.fr
dev-ebics.lukb.ch
links.thevellaapp.com
kdvinhlong.xbot.com.vn
int-www.lukb.ch
secmail.lukb.ch
skillseastriding.co.uk
encaixat.webcoop.cat
api.freetrade.io
uci-lukt-np-001.int-ucc.lucorp.ch
www.syntacorp.com
qunying.es
staging.api.v2.tnsj.pt
dev-www.lukb.ch
www.anagramsgold.com
www.antonaparin.com
zerogermsmenus.com
listennow.usefulbots.com
auth.mqtizer.com
maximemivilledeschenes.com
na2.bqd.us
my2023.site
appl10-ocemd.lukb.ch
admin.loftyapps.com
kontakt.laburoso.ch
www.thuongthansohoc.vn
silvaconstructionandcleaning.com
stayc.re2fe.com
pruksamoney.co.th
maint-ebanking.lukb.ch
int-www.lukb.ch
todomundopurple.com.br
elektro-placzek.cz
reporting.oso-ai.com
quote-push2.lukb.ch
eas.lukb.ch
careers.lukb.ch
www.bidmytires.com
secmail.lukb.ch
sharefile.lukb.ch
uci-lukh-nwe-002.lukb.ch
secmail.lukb.ch
nlink.lukb.ch
secmail.lukb.ch
int-www.lukb.ch
vybinex.com
www.steelect.com
uci-lukh-np-001.ucc.lucorp.ch
www.dirtygoldfish.com
dev-www.lukb.ch
mo.lukb.ch
uci-lukt-nwc-001.int-ucc.lucorp.ch
mikulas.ddmpraha.app
apachi.app
mo.lukb.ch
juxco.de
appl06-ocemd.lukb.ch
int-www.lukb.ch
int-www.lukb.ch
webview.kairosgame.com
inba.lukb.ch
www.mvpsolutions.tech
uci-lukt-np-001.int-ucc.lucorp.ch
static.reality-overwritten.net
nbild.lukb.ch
eb99-www.lukb.ch

Certificate

The complete raw certificate details for nbild.lukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 349382226603815648661762660947459648845363688527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign RSA TLS OV ICA 2022 - 1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 14:14:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-31 14:14:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Luzerner Kantonalbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nbild.lukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 663711226801270919493645098093129150984627993988549316052859466985205296418900943457881313023303650281429795358703605671293548399739460503035378630821434429536776697144612493944385506034542524677554449011621089625110461359389594104692656294097502827479400498655759433135230621236039965517658615183246974099848198035591118716200593675870915690765507494309547395963226917529168050989078483201655974353938667785676391186877519146816383146398267580341829564965940486691764643117151861430261894397588922166628481977564139882515773759439138609654276575187574529826077410523868938085203842255028693829671741094653039329358580721514325227178253823941299307009147979549655444528518712010412370264432979094740120289476879989220059939281320236075615692697366956003483598155475840745339867295831060907922692832308927997444778071957406344400253531218305494011327952230654909096107492371610036884242474251233544381504305567325888802917919543754376000915017967862359480316597347259043771291342570268456232497843582610557651815601979645970664359569383024285009075070941616728970703921790925354999184973374230458768507586178353540732436342024276283494429667379973415102183446677484217896858806859136574115927303720531980748013525597030717029678922693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.swisssign.ch/air-0f2bf9a5-dd37-48c9-a85b-12acdcb8be45'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.swisssign.ch/sign/ocs-aaccced5-66e8-4069-9b1b-fd29ab73efec'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.2.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://repository.swisssign.com/SwissSign_CPS_TLS.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.ch/cdp-96b62f5a-6b73-4da4-87f7-ce4002c1cd34'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbild.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbild.lukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b0ded71ef37dfbecec6ac8835fce3ba01d966dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 7c6f0a6f130fd98c246f2634f35c6b436db723b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (606 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (602 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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