exchange.eur.nl

- Erasmus Universiteit Rotterdam -

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 73:6a:30:6d:ed:e2:86:f3:d7:19:ff:7a:c0:a8:c1:dd was issued on by TERENA.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Erasmus Universiteit Rotterdam

Organization: Erasmus Universiteit Rotterdam
Organization unit: SSC-ICT
Country: NL

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 73:6a:30:6d:ed:e2:86:f3:d7:19:ff:7a:c0:a8:c1:dd
Serial Number (int): 153412585247422508305614094127881306589
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c3:fc:53:67:cc:85:32:85:48:2d:1e:05:e3:02:40:7a:41:a5:7d:63
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 52:29:06:e6:26:ca:11:6e:7d:0e:e1:f6:30:21:e2:cd:da:96:a6:8e
Fingerprint (sha256): e5:49:01:ba:2e:6a:c0:08:7a:51:96:d4:dc:f3:5d:49:a1:ba:a7:63:24:89:4c:4d:8b:7d:67:ce:a0:4e:8d:d5

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate exchange.eur.nl

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange.eur.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange.eur.nl
autodiscover.abd.eur.nl
autodiscover.bmg.eur.nl
autodiscover.bv2013.eur.nl
autodiscover.campus.eur.nl
autodiscover.coa.eur.nl
autodiscover.composite.rsm.nl
autodiscover.cpc.eur.nl
autodiscover.cvb.eur.nl
autodiscover.drift.eur.nl
autodiscover.efb.eur.nl
autodiscover.em.eur.nl
autodiscover.erasmusacademie.nl
autodiscover.erim.eur.nl
autodiscover.ese.eur.nl
autodiscover.eshcc.eur.nl
autodiscover.euc.eur.nl
autodiscover.eur.nl
autodiscover.fbk.eur.nl
autodiscover.fhk.eur.nl
autodiscover.frg.eur.nl
autodiscover.fsw.eur.nl
autodiscover.fwb.eur.nl
autodiscover.holding.eur.nl
autodiscover.hope.eur.nl
autodiscover.hrf.eur.nl
autodiscover.ict.eur.nl
autodiscover.ihs.nl
autodiscover.iss.nl
autodiscover.jfr.nl
autodiscover.law.eur.nl
autodiscover.nic.eur.nl
autodiscover.oos.eur.nl
autodiscover.risbo.eur.nl
autodiscover.rsm.nl
autodiscover.seor.eur.nl
autodiscover.sin-online.nl
autodiscover.smc.eur.nl
autodiscover.ssvr.nl
autodiscover.staff.eur.nl
autodiscover.ubib.eur.nl
campus.eur.nl
imap.eur.nl
imap.rsm.nl
mailhost.eur.nl
pop3.eur.nl
stff-ca01.staff.eur.nl
stff-ca02.staff.eur.nl
stff-ca03.staff.eur.nl
stff-ca04.staff.eur.nl
webmail.rsm.nl

Other certificates including the domain name eur.nl

(limited to 100 certificates)
h5p.eur.nl
dialogicplatform.com
db-bundle.sin-online.nl
www.erim.eur.nl
masterhealtheconomics.eur.nl
dialogicplatform.com
monitor.mgt.eur.nl
topdesk.eur.nl
psp.eur.nl
feb21011.ese.eur.nl
superoffice.holding.eur.nl
gallery.erim.eur.nl
login-accept.ds.eur.nl
pma.eur.nl
Bizzdesing.eur.nl
www1.eur.nl
alumni.eur.nl
sin-online-service-bundle.service.eur.nl
bko.eur.nl
asklepios.eur.nl
mybeta.eur.nl
overleg.eur.nl
people.few.eur.nl
ess.eur.nl
www.horafinita-accept.eur.nl
ess-test.eur.nl
timetables.eur.nl
thetheorymarket.eur.nl
mis-api-test.erim.eur.nl
hawk.eur.nl
rdbroker20-test.eur.nl
ns1.bvdu.eur.nl
ebs.eur.nl
resourcebooker.eur.nl
masterinternationalandeuropeanpubliclaw.eur.nl
www.webshop.eur.nl
trackeur-bundle.api.eur.nl
vrh56.eur.nl
sap-bo-test.eur.nl
sis-acc-saml.eur.nl
dialogicplatform.com
cms-intra-test.eur.nl
nagiosbe.eur.nl
sympa-test.eur.nl
dialogicplatform.com
rdbroker-test.eur.nl
timetables.eur.nl
pclab-monitor.eur.nl
tartaros3.eur.nl
issuetracker.eur.nl
eurgame.eur.nl
aux-ldap-bundle.service.eur.nl
adminer.service.eur.nl
edugateway-G2.eur.nl
expertise-search-test.rsm.nl
horafinita.eur.nl
sm.eur.nl
studielink.eur.nl
iwmc-accept.service.eur.nl
eshcc-app.eur.nl
auth4mobile.eur.nl
rstudio.erim.eur.nl
ln-fe-pool.t-staff.eur.nl
planonweb.eur.nl
overleg.dia.eur.nl
sis-saml.eur.nl
saml-cms-intra-test.eur.nl
bskweb.eur.nl
crm4p-acc.eur.nl
sis-acc.eur.nl
examsheet.eur.nl
mailing-law.eur.nl
ds.eur.nl
www1.eur.nl
DA2016.eur.nl
EMS-ACC.EUR.NL
vacancies.eur.nl
eduroam-guest.eur.nl
wiki.fbk.eur.nl
libguides.eur.nl
sisapi-accept.eur.nl
sin-app03.app.eur.nl
sustainabilityreport.eur.nl
mydesktop.eur.nl
sb-test.eur.nl
myapps.eur.nl
access.eur.nl
masterrechtsgeleerdheid.eur.nl
isis.fbk.eur.nl
personal.eur.nl
foreman-test.infra.eur.nl
esl.eur.nl
eurgame-accept.eur.nl
feb22012.ese.eur.nl
certbroker.service.eur.nl
hobbes.frg.eur.nl
foreman-test.infra.eur.nl
ecda.eur.nl
gen-web01.app.eur.nl
dashboard.eur.nl

Certificate

The complete raw certificate details for exchange.eur.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8WThxQareWX1EjHoR1fO
mKD/QB207i8g4Xu7pUANITAYmjJM2G1bbL2b7MuOpAmX9D/XWUQp+RAfjBeh1tWO
ZX28lkCj2fVOJDxWLyPGz8qpLyk7bnfI8tO4o1a3PKzO3s7jlr3ISa6V01eMp9y7
eEchr04BC6nzAxdhaHcK4NR3H9HgeM0psVRkQ6OKF1n5oXBCIEumqLo3IL2wZumZ
vFSBmNHmx2xxk5+ohmKWj1ThU6gUq7C4HfwPQQbcd9SgFuLLwSIkMKbBZ1Ztg4hi
EyGtDAyBrLTVyDJue2vlEXG1w2ALxpf5Xu2iSw6ZC45J+5K0lxWkxvLNPTMe0XMm
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 153412585247422508305614094127881306589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Erasmus Universiteit Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSC-ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchange.eur.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30473178222023325950469438239452695274881223186910290677320398221278793259499050503591932725683599626965562095581991377144367783918906468248290547823742874896042598220391181596647646327951693969818692654946288169155462690142997515609457068957681051033931882086174187617134621099987054677864106357612701659839968452808734198375066346020499900084521486955758248588513228062340439024810198347682644799802996258561630423386289536166934613412255514156352958633380299859939949234808483901621558363714347519749426681584327284907763597354148791044412118810624275065252643355443439197039643618104872040937372529986862526441171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3fc5367cc853285482d1e05e302407a41a57d63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.abd.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bmg.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bv2013.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.campus.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.coa.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.composite.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cpc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cvb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drift.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.efb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.em.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.erasmusacademie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.erim.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ese.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eshcc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.euc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fbk.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fhk.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.frg.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fsw.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fwb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.holding.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hope.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hrf.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ict.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ihs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iss.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jfr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.law.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nic.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oos.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.risbo.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.seor.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.smc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssvr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ubib.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhost.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca01.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca02.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca03.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca04.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.rsm.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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