mlz-garching.de

- Technische Universität München -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number c3:ca:bd:78:04:35:28:ac:7b:33:3f:aa:a4:9e:66:34 was issued on by GEANT Vereniging.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Technische Universität München

Organization: Technische Universität München
State / Province: Bayern
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): c3:ca:bd:78:04:35:28:ac:7b:33:3f:aa:a4:9e:66:34
Serial Number (int): 260252146027579427458737934646562940468
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 51:e4:b5:13:35:8d:96:c0:7f:72:01:3d:16:63:2d:5f:d4:a5:d3:d5
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 16:d6:61:d3:68:d4:a8:85:a0:87:95:5e:2a:20:19:31:bf:0e:17:36
Fingerprint (sha256): 1c:ca:de:72:8e:69:cb:df:51:7c:8b:ab:3d:99:2d:df:e2:2f:4c:01:5c:65:5b:89:09:8d:6e:cd:4d:0b:5e:de

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate mlz-garching.de

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mlz-garching.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mlz-garching.de
heinzmaierleibnitzneutroncentre.de
hmlnc.de
lists.mlz-garching.de
piwik.mlz-garching.de
wiki.mlz-garching.de
www.heinzmaierleibnitzneutroncentre.de
www.hmlnc.de
www.mlz-garching.de
www01.mlz-garching.de
wwwng.mlz-garching.de

Other certificates including the domain name mlz-garching.de

(limited to 100 certificates)
impulse.mlz-garching.de
physicslab.frm2.tum.de
impulse.mlz-garching.de
indico.frm2.tum.de
groupware.frm2.tum.de
mlz-garching.de
mlz-garching.de
excas02.frm2.tum.de
mlz-garching.de
excas02.frm2.tum.de
computing.mlz-garching.de
remote.mlz-garching.de
ftp.frm2.tum.de
exmbx02.frm2.tum.de
idm.mlz-garching.de
ghost.mlz-garching.de
ghost.mlz-garching.de
nmi3.eu
ghost.mlz-garching.de
training.mlz-garching.de
indico.frm2.tum.de
excas02.frm2.tum.de
ftp.frm2.tum.de
excas02.frm2.tum.de
groupware.frm2.tum.de
groupware.frm2.tum.de
speedtest.frm2.tum.de
groupware.frm2.tum.de
exmbx03.frm2.tum.de
ghost.mlz-garching.de
statusinfo.frm2.tum.de
statusinfo.frm2.tum.de
impulse.mlz-garching.de
impulse.mlz-garching.de
ghost.mlz-garching.de
exmbx01.frm2.tum.de
nmi3.eu
ftp.frm2.tum.de
impulse.mlz-garching.de

Certificate

The complete raw certificate details for mlz-garching.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 260252146027579427458737934646562940468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universität München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mlz-garching.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 812183549259684470618178172817510548262677405778744628448045555413922408587374844327779655075877017329523807065944140877856066475000247105567486744232432111982702110147435870968753022067138332538136137539923281603001328179854784820295897979333335308535421684465188665488391501369392654693562037090168258990180923734528089379444671713229862549497099008140609971177346684398756063995972034024706982208389490236007989344171397582348885298551286923480577338026867138424227054811658379723732405095237113166463482310620517191620455838314176393603682364590609495930344953599260222487611138512728442017715746844687972846911800583039813996070087441352723979479499382472672555347238649271211558169034093467467146345920158820729263131525377712854882245891676802758005656479588009218142365619534309917995105111512560552874669069314136677511448393514352698358699524027347493755813175107523245116646625681258296246805089830218947447890508862844470470712892373747373450409882435849525310045946007495293915436594949853022707579503655226701750397748405904994884469392691908825144558597776498257648574072623319494081102595234299146930104222516941534862093357106962826612995846633601879542806908101256797036234887086073963439512207829560178570428919971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51e4b513358d96c07f72013d16632d5fd4a5d3d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mlz-garching.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heinzmaierleibnitzneutroncentre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hmlnc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.mlz-garching.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwik.mlz-garching.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.mlz-garching.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heinzmaierleibnitzneutroncentre.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hmlnc.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mlz-garching.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.mlz-garching.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwng.mlz-garching.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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