exchange.eur.nl

- Erasmus Universiteit Rotterdam -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 84:6a:d5:db:94:93:7c:2f:74:ae:a1:61:26:03:02:5f was issued on by TERENA.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Erasmus Universiteit Rotterdam

Organization: Erasmus Universiteit Rotterdam
Organization unit: SSC-ICT
Country: NL

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 84:6a:d5:db:94:93:7c:2f:74:ae:a1:61:26:03:02:5f
Serial Number (int): 176012816460808835379508101271825613407
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c1:e8:a2:89:c0:d9:26:4d:3c:18:e8:e6:07:a6:3b:85:70:ab:cf:73
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 3b:a0:a3:b4:63:a7:e5:2b:b8:cb:d1:32:c2:5a:7d:99:2f:fd:8b:4f
Fingerprint (sha256): d4:d6:bf:f7:b8:80:4b:6d:b4:51:1e:0e:b6:a5:94:05:a0:fe:f0:68:e5:68:da:89:2f:4b:14:b1:80:33:20:11

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate exchange.eur.nl

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange.eur.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange.eur.nl
autodiscover.abd.eur.nl
autodiscover.bmg.eur.nl
autodiscover.bv2013.eur.nl
autodiscover.campus.eur.nl
autodiscover.coa.eur.nl
autodiscover.composite.rsm.nl
autodiscover.cpc.eur.nl
autodiscover.cvb.eur.nl
autodiscover.drift.eur.nl
autodiscover.efb.eur.nl
autodiscover.em.eur.nl
autodiscover.erasmusacademie.nl
autodiscover.erim.eur.nl
autodiscover.ese.eur.nl
autodiscover.eshcc.eur.nl
autodiscover.euc.eur.nl
autodiscover.eur.nl
autodiscover.fbk.eur.nl
autodiscover.fhk.eur.nl
autodiscover.frg.eur.nl
autodiscover.fsw.eur.nl
autodiscover.fwb.eur.nl
autodiscover.holding.eur.nl
autodiscover.hope.eur.nl
autodiscover.hrf.eur.nl
autodiscover.ict.eur.nl
autodiscover.ihs.nl
autodiscover.iss.nl
autodiscover.jfr.nl
autodiscover.law.eur.nl
autodiscover.nic.eur.nl
autodiscover.oos.eur.nl
autodiscover.risbo.eur.nl
autodiscover.rsm.nl
autodiscover.sin-online.nl
autodiscover.sinonline.nl
autodiscover.smc.eur.nl
autodiscover.ssvr.nl
autodiscover.staff.eur.nl
autodiscover.ubib.eur.nl
campus.eur.nl
imap.eur.nl
imap.rsm.nl
mailhost.eur.nl
pop3.eur.nl
stff-ca01.staff.eur.nl
stff-ca02.staff.eur.nl
stff-ca03.staff.eur.nl
stff-ca04.staff.eur.nl
webmail.rsm.nl

Other certificates including the domain name eur.nl

(limited to 100 certificates)
h5p.eur.nl
dialogicplatform.com
db-bundle.sin-online.nl
www.erim.eur.nl
masterhealtheconomics.eur.nl
dialogicplatform.com
monitor.mgt.eur.nl
topdesk.eur.nl
psp.eur.nl
feb21011.ese.eur.nl
superoffice.holding.eur.nl
gallery.erim.eur.nl
login-accept.ds.eur.nl
pma.eur.nl
Bizzdesing.eur.nl
www1.eur.nl
alumni.eur.nl
sin-online-service-bundle.service.eur.nl
bko.eur.nl
asklepios.eur.nl
mybeta.eur.nl
overleg.eur.nl
people.few.eur.nl
ess.eur.nl
www.horafinita-accept.eur.nl
ess-test.eur.nl
timetables.eur.nl
thetheorymarket.eur.nl
mis-api-test.erim.eur.nl
hawk.eur.nl
rdbroker20-test.eur.nl
ns1.bvdu.eur.nl
ebs.eur.nl
resourcebooker.eur.nl
masterinternationalandeuropeanpubliclaw.eur.nl
www.webshop.eur.nl
trackeur-bundle.api.eur.nl
vrh56.eur.nl
sap-bo-test.eur.nl
sis-acc-saml.eur.nl
dialogicplatform.com
cms-intra-test.eur.nl
nagiosbe.eur.nl
sympa-test.eur.nl
dialogicplatform.com
rdbroker-test.eur.nl
timetables.eur.nl
pclab-monitor.eur.nl
tartaros3.eur.nl
issuetracker.eur.nl
eurgame.eur.nl
aux-ldap-bundle.service.eur.nl
adminer.service.eur.nl
edugateway-G2.eur.nl
expertise-search-test.rsm.nl
horafinita.eur.nl
sm.eur.nl
studielink.eur.nl
iwmc-accept.service.eur.nl
eshcc-app.eur.nl
auth4mobile.eur.nl
rstudio.erim.eur.nl
ln-fe-pool.t-staff.eur.nl
planonweb.eur.nl
overleg.dia.eur.nl
sis-saml.eur.nl
saml-cms-intra-test.eur.nl
bskweb.eur.nl
crm4p-acc.eur.nl
sis-acc.eur.nl
examsheet.eur.nl
mailing-law.eur.nl
ds.eur.nl
www1.eur.nl
DA2016.eur.nl
EMS-ACC.EUR.NL
vacancies.eur.nl
eduroam-guest.eur.nl
wiki.fbk.eur.nl
libguides.eur.nl
sisapi-accept.eur.nl
sin-app03.app.eur.nl
sustainabilityreport.eur.nl
mydesktop.eur.nl
sb-test.eur.nl
myapps.eur.nl
access.eur.nl
masterrechtsgeleerdheid.eur.nl
isis.fbk.eur.nl
personal.eur.nl
foreman-test.infra.eur.nl
esl.eur.nl
eurgame-accept.eur.nl
feb22012.ese.eur.nl
certbroker.service.eur.nl
hobbes.frg.eur.nl
foreman-test.infra.eur.nl
ecda.eur.nl
gen-web01.app.eur.nl
dashboard.eur.nl

Certificate

The complete raw certificate details for exchange.eur.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvUdoPe8Ut+MQBBPgY5/
zibySpzumTRzUXk/WWeO8CeUBz9TZmMBGCkS4tZv6uDJqJ+/qDRbQKfmCwiX7iRn
PkcZkssMcKFg+0kZdchgX35HmFizGOFYkjUvz1DxDBiiYpJ7JfzUHGvpBzLOZsuW
0FYX/bWHg8MKTTIyPMh+ACZxhEuhId0PdutsqTHUrIYlDhXxiqnAA+PR7pMMcdjr
R9uYm63pTwsfILEGZUkNRfMx/n50qD8ULwafQYVz2AM/RGx2664Xfr6fgh5r+ZXv
DN1xRi8XPdQLrKqOSnBkrpt2FdFBcbzer81GVzop/qJaaSj6/SNAEmzhEZDebKj1
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 176012816460808835379508101271825613407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erasmus Universiteit Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSC-ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchange.eur.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18551663600094226561461941413557630944436317304182581177324073097045356833989219329531644516757337344174768846514261834601481469550934138659596635910483222957037740754480474916964565753231722363052505988920142797912404671147680693091458388146369034922467387902408172723529645723930240029074413259166707295777142657963387597984086648493888295332513245516065411921146933125467081362156152880760559361637573917174062621637848014544952515918082643157831380361205274774441282282490601612311242021155602323002398189077064830926457499399397526350223587179836188022806899883654144997059379146258848680144379681770514542032153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1e8a289c0d9264d3c18e8e607a63b8570abcf73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1220 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.abd.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bmg.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bv2013.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.campus.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.coa.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.composite.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cpc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cvb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drift.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.efb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.em.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.erasmusacademie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.erim.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ese.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eshcc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.euc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fbk.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fhk.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.frg.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fsw.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fwb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.holding.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hope.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hrf.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ict.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ihs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iss.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jfr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.law.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nic.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oos.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.risbo.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sinonline.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.smc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssvr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ubib.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhost.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca01.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca02.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca03.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca04.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.rsm.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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