www.agcom.uni-bremen.de

- Universität Bremen -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a6:71:c0:9f:da:30:05:39:c1:db:e8:3e:fb:1a:2e:b1 was issued on by GEANT Vereniging.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universität Bremen

Organization: Universität Bremen
State / Province: Bremen
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): a6:71:c0:9f:da:30:05:39:c1:db:e8:3e:fb:1a:2e:b1
Serial Number (int): 221242483732757996570467561095950905009
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 09:fe:6c:86:d0:4e:73:6f:26:3f:1f:e3:66:d7:e4:5e:cd:3b:7e:1a
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): e6:e0:1f:ba:75:bd:12:0e:6d:d3:0b:bd:9d:d5:a1:b1:ef:df:bf:2d
Fingerprint (sha256): 00:a5:70:40:fe:e2:cf:3e:67:f5:11:5a:9d:f8:d1:f9:c2:85:15:b8:13:8b:35:cf:c9:48:a1:b6:b2:b9:d2:47

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www.agcom.uni-bremen.de

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.agcom.uni-bremen.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.agcom.uni-bremen.de
agcom.uni-bremen.de
www.ag7com.uni-bremen.de

Other certificates including the domain name uni-bremen.de

(limited to 100 certificates)
cama.uni-bremen.de
www.zrf.uni-bremen.de
www.zkpr.uni-bremen.de
psychstat.uni-bremen.de
elearning.uni-bremen.de
www.igmr.uni-bremen.de
www.tdv.uni-bremen.de
www.agcom.uni-bremen.de
www.iaas.uni-bremen.de
www.rackstation.ant.uni-bremen.de
nagios.ref54.uni-bremen.de
jitsi.vm.uni-bremen.de
www2.iniis-neu.uni-bremen.de
agim.uni-bremen.de
www.mm2014.uni-bremen.de
mail.biba.uni-bremen.de
www.sfb597b1.uni-bremen.de
www.psychologie.uni-bremen.de
www.biba.uni-bremen.de
www.informatik.uni-bremen.de
claudialubert.de
chisame.informatik.uni-bremen.de
www.isdmm15.uni-bremen.de
www.fb8.arcgisserver.uni-bremen.de
www.vfwf.uni-bremen.de
www.soziologie.uni-bremen.de
ai-comm.informatik.uni-bremen.de
www.iuv.uni-bremen.de
ctf.onoc.eu
tc-http3.testcenter.zmml.uni-bremen.de
toychest.ai.uni-bremen.de
nagios.informatik.uni-bremen.de
va-web.zmml.uni-bremen.de
ident.uni-bremen.de
www.am-course.uni-bremen.de
www.bccms.uni-bremen.de
www.wl.uni-bremen.de
soft.zfn.uni-bremen.de
crm.akademie.uni-bremen.de
www.zait.uni-bremen.de
www.infotag.uni-bremen.de
ease.informatik.uni-bremen.de
www.pflegechancen.uni-bremen.de
jupyter.zmml.uni-bremen.de
obrezkov.informatik.uni-bremen.de
www2.ew-lehramt.uni-bremen.de
gitlab.suub.uni-bremen.de
www.lpka.uni-bremen.de
litmus.informatik.uni-bremen.de
www.regionalentwicklung.uni-bremen.de
www.politikdidaktik.uni-bremen.de
www.celina.uni-bremen.de
bscw.ips.biba.uni-bremen.de
www.ingenieurinnen-sommeruni.uni-bremen.de
www.verdi.uni-bremen.de
www.deutschlandstudien.uni-bremen.de
www.wiwiselbsttest.uni-bremen.de
klima.uni-bremen.de
kipos.informatik.uni-bremen.de
scheinwerfer.uni-bremen.de
cast.zmml.uni-bremen.de
egroupware.zarm.uni-bremen.de
guest.wlan.uni-bremen.de
scheinwerfer.uni-bremen.de
mailman.zarm.uni-bremen.de
www.vivatop.de
www.ecophysiology.uni-bremen.de
gitlab.zarm.uni-bremen.de
tc-ueb2.testcenter.zmml.uni-bremen.de
oae.zmml.uni-bremen.de
umfrage.ips.biba.uni-bremen.de
www.soziologie.uni-bremen.de
www.spruehkompaktieren.uni-bremen.de
ikap-web.biba.uni-bremen.de
moin-test.uni-bremen.de
www.erasmus-initiative.uni-bremen.de
contradictionstudies.uni-bremen.de
www.soziologieselbsttest.uni-bremen.de
ines.zfn.uni-bremen.de
www.nwt18.uni-bremen.de
www.wikifg22.uni-bremen.de
rocketchat.zarm.uni-bremen.de
www.fpb.uni-bremen.de
www2.fb6.uni-bremen.de
srv-jr-www.vw.uni-bremen.de
www.europeanstudies.uni-bremen.de
transair.informatik.uni-bremen.de
www.hospo.uni-bremen.de
gerhard.meyer.uni-bremen.de
bbb-1.elearning.uni-bremen.de
ldap-cart.informatik.uni-bremen.de
www.crie-umfrage.uni-bremen.de
www.kinder-uni.uni-bremen.de
www2.fb8.uni-bremen.de
gitlab.csl.uni-bremen.de
dmis.math.uni-bremen.de
toychest.ai.uni-bremen.de
cslog-nas01.informatik.uni-bremen.de
mailman.zfn.uni-bremen.de
www.diagnostik.uni-bremen.de

Certificate

The complete raw certificate details for www.agcom.uni-bremen.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApefNMS4XIpFn36hHOoNp
DtLddgiqNXrpfY4su2RZo9YHf9UF+ijT4vif+anBkc6FTK9ZiePmRNoCIGMc6d2i
6Y8YhPk9R1wffKfoNaatZGtOfXgUugRF6J0VRENH42Mwx5fQXJtiF+k9e1aNjPSO
Y9LOxMsdx8D5+Vr3hU9pfCNdjosP/GQllYTJunW2peoZIJsOSsK6BCxxVGSsO4wa
4Tf3k57/Dmku4LwfXLCAHxz9AcNMxpGTmFrSVd5Ol+4LrF0OZLOUzYXfirsOGCUJ
dFdfcZVi0IFg3YNkZT4NT7l9ztyP6O5yPcCouCNaZT5uqvwQHA5JgKv8bCzZI3Hy
zX/u0u5IYD13HbknBZbiFACk17lKJO0rA3uX9arbjOsVit6qgZUTxiTbQaBvDqi5
t9pqUsdWV5JmJuYoY7XvqwVoa/mEeHUndZE6cNjURXI4UhBT4gPwt420X/HUUMnN
kDFLGhMcbpZpW1RUNRPKlVg+x4bMH5ZoUWmww9nUTf6Rpjuhrw4Vrpj8t6y7yLqC
jMPOhOK5IyPZrf15cj1QJ3Chi5JNTgGJF4du7vm6v/dsNyhC0w+VlIR3y96ewDGV
uT5/ZZ9WVI1GdGI3PbLfMNtASukvnUUvkAyR+K0Q3VR2j9wG3uOmeJDGqaxO90VG
rkPl0sCzJD3b5i9W4vTWFscCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 221242483732757996570467561095950905009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universität Bremen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.agcom.uni-bremen.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 676835285847022430117165770284060020781279259821093628385177539033521556963987560335382481228295167661536508805471774355061219502999585560814126141405473636007824749381049732580309304958265045395527432740472663047862147421416985649056216086533849361393861116678761319028039668939008884214118857453316013858626537908250722219321895623155811686649013267532234041210179068081696234012761083157272681038859252898399769533881266346451261767611557216302967081421814927258307747876331440252044786010516692317188639333916694281187904306619169102471401373983255968848501522791734657161571753149299508639316754573325791681860291458109382297414846558504373611111982385739714851605308873748826666155884371153325879738348741490557831386504745787591637410545766212216274951903619194461263117541046705464723600090064335256148139365985816565705899988660072992638888085161445626150399795066434649898579630323951837485971015150216786613503900333651971590963431867903188767628906167778712106336417105570720987362032113886350192839039651856516686435927782213379683243549303538739675816533371441660041917277368301898185777114546142815206388514478134974773969511241203307210871911645981330795482783571773634958694034557108483147306491567219859954888742599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09fe6c86d04e736f263f1fe366d7e45ecd3b7e1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000189a0052c0f0000040300463044022051197505712d6a0680ba3ae6da7e9b1611d2a9099fbfbf2b22ab7c24b60da221022065228ab7b645e75b3ecaabddc8bf8816f50a874eb3fefacf1542502163286206007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189a0052c6800000403004730450221009077766fc9ad1cca74d8f4853f705e8d2a1c5aecd94400e303c85dc49fc28c30022027ee600fe21b8f92d8bcd07bcd2c22af8d07e3dc1028e52686680de0e663fb9d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189a0052c3d00000403004730450220396de05a010c9f4b21ebd95d59ffdf850cb14f264c8bc80719c58a995a1b6fd3022100a49d2f5933db7077aeb831817c8a7ae5fb2324e211fc8aec84453c196c5eda6c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agcom.uni-bremen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcom.uni-bremen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ag7com.uni-bremen.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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