vmesparza11.in.tum.de

- Technische Universität München -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number 61:dd:ad:8a:e8:8b:a2:fa:8e:e1:61:b9:d7:a7:9d:82 was issued on by GEANT Vereniging.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Technische Universität München

Organization: Technische Universität München
State / Province: Bayern
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): 61:dd:ad:8a:e8:8b:a2:fa:8e:e1:61:b9:d7:a7:9d:82
Serial Number (int): 130086133059190227897866805702795173250
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cf:3b:cd:fb:08:df:bf:7c:1c:18:de:91:f0:13:2a:77:74:89:c7:b2
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 27:24:f9:7f:d9:14:59:68:27:33:99:9a:28:42:3c:49:33:87:e6:da
Fingerprint (sha256): 02:5b:4b:d9:a2:e0:69:4f:75:a0:ff:c6:47:2a:2c:85:dc:50:bf:2a:ba:f2:4c:70:ac:ed:d5:90:e6:13:89:f2

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate vmesparza11.in.tum.de

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vmesparza11.in.tum.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vmesparza11.in.tum.de
archive.model.cs.tum.edu
archive.model.in.tum.de
dtcontrol.model.cs.tum.edu
dtcontrol.model.in.tum.de
events.model.cs.tum.edu
events.model.in.tum.de
heron.model.cs.tum.edu
heron.model.in.tum.de
mod23.model.cs.tum.edu
mod23.model.in.tum.de
ostrich.model.cs.tum.edu
ostrich.model.in.tum.de
owl.model.cs.tum.edu
owl.model.in.tum.de
paves.model.cs.tum.edu
paves.model.in.tum.de
people.model.cs.tum.edu
people.model.in.tum.de
peregrine.model.cs.tum.edu
peregrine.model.in.tum.de
prism.model.cs.tum.edu
prism.model.in.tum.de
prsolver.cs.tum.edu
prsolver.in.tum.de
rabinizer.cs.tum.edu
rabinizer.in.tum.de
rabinizer.model.cs.tum.edu
rabinizer.model.in.tum.de
sequaia.model.cs.tum.edu
sequaia.model.in.tum.de
strix.model.cs.tum.edu
strix.model.in.tum.de
tacas10.cs.tum.edu
tacas10.in.tum.de
teaching.model.cs.tum.edu
teaching.model.in.tum.de
trinity.model.cs.tum.edu
trinity.model.in.tum.de
vmesparza11.cs.tum.edu
wind.cs.tum.edu
wind.in.tum.de
www.model.cs.tum.edu
www.model.in.tum.de
www7.cs.tum.edu
www7.in.tum.de
wwwbrauer.cs.tum.edu
wwwbrauer.in.tum.de

Other certificates including the domain name tum.de

(limited to 100 certificates)
vmhub2.in.tum.de
u1804.model.in.tum.de
sfb1321.med.tum.de
s2o.net.in.tum.de
datasci.health.in.tum.de
www.biosystemchemie.ch.tum.de
www.iapg.bgu.tum.de
www.researcher.international.tum.de
www.alpewas.bgu.tum.de
www.gzw.wzw.tum.de
www.spomekom.sg.tum.de
awx.orgasoft.frm2.tum.de
hwpwiki.in.tum.de
vc-uba0333.frm2.tum.de
wwwv1.mwn.de
www.fml.mw.tum.de
www.student-makerspace.wzw.tum.de
www.genetik.wzw.tum.de
wwwv2.tum.de
wwwv4.tum.de
wwwv1.tum.de
test.web.zim.mw.tum.de
wwwv4.tum.de
www.exercisebiology.sg.tum.de
www.wind.mw.tum.de
tuwza7y-mrelay.wzw.tum.de
bpe.dev.codex.aiim.med.tum.de
i10se2.in.tum.de
wwwv2.tum.de
genderdecoder.wi.tum.de
straw.ktas.ph.tum.de
mediatum.ub.tum.de
wwwv1.mwn.de
websec.sec.in.tum.de
www6.in.tum.de
wwwv12.tum.de
identity.mri.tum.de
www.czo.wzw.tum.de
commonroad.in.tum.de
umfrage.ais.mw.tum.de
rt46.in.tum.de
vmbode19.in.tum.de
vmnavab33.in.tum.de
wwwv4.tum.de
www.hk.ar.tum.de
www.cosmic-particles.ph.tum.de
toolbox-edx.edu.tum.de
www.gth.geo.tum.de
www.umwelt.bgu.tum.de
isabelle.in.tum.de
wate.ftm.mw.tum.de
vmrbg29.in.tum.de
strix.model.in.tum.de
dataimport.dev.difuture.imedis.med.tum.de
wwwv2.tum.de
fsmpi.de
cvpr.in.tum.de
go.mytum.de
www.vf.ar.tum.de
wwwv2.tum.de
svnge.in.tum.de
wwwv4.tum.de
asta-umweltreferat.fs.tum.de
camplinux.in.tum.de
mobile.vmi.ei.tum.de
wwwv1.mwn.de
mattermost.db.in.tum.de
vmbichler58.in.tum.de
swz.in.tum.de
www.lmf.bgu.tum.de
vmcarle7.net.in.tum.de
tumeps0-zks.srv.mwn.de
www.sv.bgu.tum.de
mendeleybruegge.in.tum.de
wwwv4.tum.de
wwwv2.tum.de
www.sportpsychologie.sg.tum.de
www.alphaz.bgu.tum.de
confluencebruegge.in.tum.de
vmbhatotia56.in.tum.de
www.landslides.geo.tum.de
vmrbg98.in.tum.de
wwwv4.tum.de
wwwv4.tum.de
www.land.ar.tum.de
bergen.e17.ph.tum.de
neos.ma.tum.de
node.dev.codex.aiim.med.tum.de
www.fachschaft.sg.tum.de
vmrbg220.in.tum.de
www.sport.mri.tum.de
wikimod.in.tum.de
vmesparza11.in.tum.de
swztest.in.tum.de
cepheus.wzw.tum.de
wwwv4.tum.de
impulse.mlz-garching.de
www.zks.psykl.mri.tum.de
webmail.utg.mw.tum.de
wwwv2.tum.de

Certificate

The complete raw certificate details for vmesparza11.in.tum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosrnkRP76Y+aV7GmzpDd
3Ah9dd9pwGZjte/dL0Fdf+0dDkLtoHi4P714U/e58xeGUv7ya53JLMVEsOsXdc76
TGO+z1lgwuQfwOZB8rurYefwsmfiqZqt+3UtBjCuoziUGgdSPGgT7k3R3NM63CMJ
M9a8pZ1avJIs/ZOk8rt9AhVIqsxCGSK0kly0r507xicRt2/1mz7MY3PVZjrG+j3C
4VOtuXltw7minZEHLOxRemqfZTE0gcSUgJ+51s6qBa08Y6wP8T4ud10gQ7OkocC+
1o7whYKEtPRjZNxTsLczJAahWzislROtCUihSCM4InZgD4HdigCUpGVpkdIZif9H
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 130086133059190227897866805702795173250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universität München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vmesparza11.in.tum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20550661370924699649443179718013796464168768800145683695152513119048580473518277027057809230755247695449567832526770880741787617638779413147563498300949126191368735669860645360249528881863138862106166875911670908964226792722292002579323283970196327748386373695589895125122113934446586923243163826282197476806088530931837064810196484792998673090812505393898188417774591079681258715440616996584776045979505807997654718031426804097847369291712287288805694192243364379369523610699376520789853598728113948176372650571538076704596977685628958439329127688698091467326185450570404721769849479675560646806178072726542521157421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf3bcdfb08dfbf7c1c18de91f0132a777489c7b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmesparza11.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archive.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtcontrol.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtcontrol.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heron.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heron.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mod23.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mod23.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostrich.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ostrich.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owl.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owl.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paves.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paves.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'people.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peregrine.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peregrine.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prism.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prism.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prsolver.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prsolver.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabinizer.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabinizer.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabinizer.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rabinizer.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequaia.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sequaia.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strix.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strix.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacas10.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacas10.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaching.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teaching.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinity.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trinity.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmesparza11.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wind.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wind.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.model.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.model.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www7.in.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbrauer.cs.tum.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwbrauer.in.tum.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		002ddc5c84846a4e667eacede34c121eb1760f747131f10604e3977c56162a6e3f6a1b12c7c552411b0aca14b212f4e230cb0022e6fe2a76727b67f33de285e3f15f1dcce5f6d3a685ed72074a1940954e6471b1b3edc6540990443016ba347285a072a772913059395e43d331305c9d6d3edee1d6d356d0c914ffee0b8bcf6a1644edbe2fde676b0835732e0692caae28bedce8062f8403b839526f38b7d6d0f7314279867ec587505ec484dbeefc0009ccd99310709dae55506e208505393719ddfa17d41ef2411a7aa9b95c764c413b619decda6f3269ede4f2414dd1d0bcb7e0d5c3bb6ebf859a637d38ab780de3e2d3a4788f76fe3a2b4dd6512202e053b679aa69849b371dfd9a1be52eb3068a5def7ea16093dc796c9f41539eba913a98ac9557a1fbd2ed15ed3f15cd22931125cbe0a1e478ebc30546cd79071f825fe670dfab3c56a297b69e9eb1fec28d6a3ea441705df51ccb944cc929f63c0d19cbb3a3b732094c7c90f3fba2f621c1a4a8b87bb42613a3adac2dbcd3094c91265f569252b379ff60e67665788d6c760d0bf65f6d28d3e004e129bbea29fcdc8f34c2fe9956574ab6e496115e4fdf2ee3fa3c579eab3e7278b5d79c79a1d2eedfb85dc1f546597a681e62957142664684b5558ab04f3c920804ff8a280f3f6a17fa195ad4a0ea55e13de2880d5b1800b3a094323b98ec9127566df44f5115c2d219