portal.mytum.de

- Technische Universitaet Muenchen -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 7e:03:76:ef:9f:9c:8f:7c:ac:c4:cf:e4:dc:e1:5f:6f was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Technische Universitaet Muenchen

Organization: Technische Universitaet Muenchen
Organization unit: WWW und Online Services
State / Province: Bayern
Locality: Muenchen
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7e:03:76:ef:9f:9c:8f:7c:ac:c4:cf:e4:dc:e1:5f:6f
Serial Number (int): 167500716668736462862758359146535411567
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 6c:3b:ec:19:bd:27:e2:ef:19:68:68:49:b8:be:05:d3:a5:fb:90:af
Fingerprint (sha256): 24:a8:1d:75:e7:b1:35:a3:24:90:76:d9:22:40:08:20:84:b1:03:c1:68:e2:32:95:92:3b:28:7c:0c:32:19:2f

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate portal.mytum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.mytum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.mytum.de

Other certificates including the domain name mytum.de

(limited to 100 certificates)
go.mytum.de
xmpp.mytum.de
go.mytum.de
portal.mytum.de
ers.mytum.de
portal.mytum.de
portal.mytum.de
jobscreen.mytum.de
portal.mytum.de
portal.mytum.de
xmpp.mytum.de
roundcube.lrz.de
BALZ00SW-CAS.ads.mwn.de
portal.mytum.de
xmpp.mytum.de
roundcube.lrz.de
portal.mytum.de
xmail.mwn.de
portal.mytum.de
testing211.mytum.de
portalmail.mytum.de
xmpp.mytum.de
rdtest101.mytum.de
portal.mytum.de
mail.mytum.de
portalmail.mytum.de
portal.mytum.de
portal.mytum.de
portal.mytum.de
ers.mytum.de
portalmail.mytum.de
sap.mytum.de

Certificate

The complete raw certificate details for portal.mytum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167500716668736462862758359146535411567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universitaet Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'WWW und Online Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'portal.mytum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946716667827527154132215902655263858887973112137887669997805800199230929075029573354930228057525608207387433428307988661002408541293743205069778899197270916606982250357054054092015263516178605738034121690448758420312713509955827249389058724372323624500822136633167167001027303872803827270689351754713000566651036469961177625966250016337723190013709238747513418525240160383877574397651956251701202969537955779461108284607519391167425496578288360727845625075652559568573818103917160245253391531939427784655232860816578635253589373508237891509108079771046955982905277225027727927989778683932913104081642027800115220911387743792726027922659630628769125840590245454517959025993170127273108946891642386602097653950441451490866260435816259403774518301481264383944019810283076368013778022180974101665717377557003504289571017692509992698137892075407754950334186070943587815807572257800009054222485090905105112008481166614625524496001423095630928797263947817724073677154965291530957112363960294158722733710942054307592577280930972666414283223734303327038628632810185750147274232334985202612497037794269754559436477016120370709668012897067853497137507715620618516053984105643071511288086196847030334889416352209591795893645607655687413367027103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.mytum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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