portal.mytum.de

- Technische Universität München -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number a0:b3:5b:df:54:70:7a:a3:78:72:e4:36:14:68:11:81 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Technische Universität München

Organization: Technische Universität München
State / Province: Bayern
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): a0:b3:5b:df:54:70:7a:a3:78:72:e4:36:14:68:11:81
Serial Number (int): 213607763856551166454071219752593265025
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ff:0f:da:74:fd:9b:dd:c0:f3:a3:7b:9c:48:10:1f:9b:21:27:2b:a2
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): e0:84:c9:31:ce:cf:64:28:c9:a0:a8:27:a8:c3:c8:8a:1d:d7:88:33
Fingerprint (sha256): 85:4e:85:bc:b7:d7:53:97:fa:f9:45:0c:31:06:be:69:9f:02:8b:7d:34:42:e1:b6:84:05:3f:98:ba:15:5c:6c

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate portal.mytum.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.mytum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.mytum.de

Other certificates including the domain name mytum.de

(limited to 100 certificates)
go.mytum.de
xmpp.mytum.de
go.mytum.de
portal.mytum.de
ers.mytum.de
portal.mytum.de
portal.mytum.de
jobscreen.mytum.de
portal.mytum.de
portal.mytum.de
xmpp.mytum.de
roundcube.lrz.de
BALZ00SW-CAS.ads.mwn.de
portal.mytum.de
xmpp.mytum.de
roundcube.lrz.de
portal.mytum.de
xmail.mwn.de
portal.mytum.de
testing211.mytum.de
portalmail.mytum.de
xmpp.mytum.de
rdtest101.mytum.de
portal.mytum.de
mail.mytum.de
portalmail.mytum.de
portal.mytum.de
portal.mytum.de
portal.mytum.de
ers.mytum.de
portalmail.mytum.de
sap.mytum.de

Certificate

The complete raw certificate details for portal.mytum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213607763856551166454071219752593265025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universität München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.mytum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 946716667827527154132215902655263858887973112137887669997805800199230929075029573354930228057525608207387433428307988661002408541293743205069778899197270916606982250357054054092015263516178605738034121690448758420312713509955827249389058724372323624500822136633167167001027303872803827270689351754713000566651036469961177625966250016337723190013709238747513418525240160383877574397651956251701202969537955779461108284607519391167425496578288360727845625075652559568573818103917160245253391531939427784655232860816578635253589373508237891509108079771046955982905277225027727927989778683932913104081642027800115220911387743792726027922659630628769125840590245454517959025993170127273108946891642386602097653950441451490866260435816259403774518301481264383944019810283076368013778022180974101665717377557003504289571017692509992698137892075407754950334186070943587815807572257800009054222485090905105112008481166614625524496001423095630928797263947817724073677154965291530957112363960294158722733710942054307592577280930972666414283223734303327038628632810185750147274232334985202612497037794269754559436477016120370709668012897067853497137507715620618516053984105643071511288086196847030334889416352209591795893645607655687413367027103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff0fda74fd9bddc0f3a37b9c48101f9b21272ba2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.mytum.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		0020f8410182c5e14590aafaa06196d569b71a0f4b83095ff3a8b04d1d2059471f1f3c70957c6f3c34b9b4ca5883ec34b9b1e4da0b5a29d01618393bc47283cad96295da44906d73717f4bcd12f859c1035fe8e3bf0c5fe6cdcc25f7e5a7e58205e37486a8d83d5d157d64e0610c6722d4f43fa7f50b5cd3b4603bb3340772b5ff885bb5cadefe23bc9c6a5fb60bef3a96ab42dcd5f3043d26a2d2e8ec76ae1baa7d68f8e7c42811fff7509b2266ebd4c9d89c382d265c1b6a47bfe74c2de525ee0019ed5dceebae36ac67bdcabccc5d85ec4fb01bf2bb4994949f480222d4ad4e4ae5e3feb78163bc2fa6b6863841e7e04480d2b9cca1a0b6eb9c44fc17aaf9fd4ddb418c5b6aaf9093a4d14953b767e4df4d6ff6cd8ffde16fd1893ebb21cbe0c381961e94d91699c973c60116210cc8b930d4a2f010fef1e0cc32c4ce8003c35a631f97b32323f06b0741ee08a3e0b169494c0b6db5006121ce3781e5fd3439262e2d28c09ef3014ec6cbdb20b81919cca4689b70379ae5d36ceb52f4882738182a533504a87091ec6440880fa979d13413ec19c46e6538b943a02630f9afb40e779c79f238976085a3f74c30702d4a4e9d686655e0200e3467b330c4c7eecfd1b87c6ec28a027e25023ae8bef3297f45b4d2609e773a13d548fa9204979472e31c9378be4e90b8c0b4fe9e60422396f976865e38f325115a31fad53a6d11cb