staticwww.frm2.tum.de

- Technische Universität München -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number d0:26:7f:10:28:50:ba:b6:99:bd:68:21:39:01:fa:18 was issued on by GEANT Vereniging.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universität München

Organization: Technische Universität München
State / Province: Bayern
Country: DE

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): d0:26:7f:10:28:50:ba:b6:99:bd:68:21:39:01:fa:18
Serial Number (int): 276679307550034085191223603598855371288
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 81:6e:34:4d:9b:7e:0c:3c:02:07:d4:22:e7:0a:0d:c5:9b:75:e9:f5
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 18:00:f8:51:6c:08:22:3e:18:03:1e:69:13:9d:28:0a:54:17:f5:c0
Fingerprint (sha256): e8:f9:7c:32:aa:fc:11:2b:f6:07:81:2b:80:96:63:a9:df:87:96:fe:cb:d7:01:8c:8f:48:8d:2f:51:3a:4a:93

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate staticwww.frm2.tum.de

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staticwww.frm2.tum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staticwww.frm2.tum.de
forum.nmi3.eu
forum.nmi3.org
nmi3.eu
nmi3.org
positronsources.org
sine2020.eu
slopos13.com
slopos13.de
www.nmi3.eu
www.nmi3.org
www.positronsources.org
www.sine2020.eu
www.slopos13.com
www.slopos13.de
www01.nmi3.eu
www01.nmi3.org
www01.sine2020.eu
wwwng.nmi3.eu
wwwng.nmi3.org
wwwng.positronsources.org
wwwng.sine2020.eu
wwwng.slopos13.com
wwwng.slopos13.de

Other certificates including the domain name tum.de

(limited to 100 certificates)
vmhub2.in.tum.de
u1804.model.in.tum.de
sfb1321.med.tum.de
s2o.net.in.tum.de
datasci.health.in.tum.de
www.biosystemchemie.ch.tum.de
www.iapg.bgu.tum.de
www.researcher.international.tum.de
www.alpewas.bgu.tum.de
www.gzw.wzw.tum.de
www.spomekom.sg.tum.de
awx.orgasoft.frm2.tum.de
hwpwiki.in.tum.de
vc-uba0333.frm2.tum.de
wwwv1.mwn.de
www.fml.mw.tum.de
www.student-makerspace.wzw.tum.de
www.genetik.wzw.tum.de
wwwv2.tum.de
wwwv4.tum.de
wwwv1.tum.de
test.web.zim.mw.tum.de
wwwv4.tum.de
www.exercisebiology.sg.tum.de
www.wind.mw.tum.de
tuwza7y-mrelay.wzw.tum.de
bpe.dev.codex.aiim.med.tum.de
i10se2.in.tum.de
wwwv2.tum.de
genderdecoder.wi.tum.de
straw.ktas.ph.tum.de
mediatum.ub.tum.de
wwwv1.mwn.de
websec.sec.in.tum.de
www6.in.tum.de
wwwv12.tum.de
identity.mri.tum.de
www.czo.wzw.tum.de
commonroad.in.tum.de
umfrage.ais.mw.tum.de
rt46.in.tum.de
vmbode19.in.tum.de
vmnavab33.in.tum.de
wwwv4.tum.de
www.hk.ar.tum.de
www.cosmic-particles.ph.tum.de
toolbox-edx.edu.tum.de
www.gth.geo.tum.de
www.umwelt.bgu.tum.de
isabelle.in.tum.de
wate.ftm.mw.tum.de
vmrbg29.in.tum.de
strix.model.in.tum.de
dataimport.dev.difuture.imedis.med.tum.de
wwwv2.tum.de
fsmpi.de
cvpr.in.tum.de
go.mytum.de
www.vf.ar.tum.de
wwwv2.tum.de
svnge.in.tum.de
wwwv4.tum.de
asta-umweltreferat.fs.tum.de
camplinux.in.tum.de
mobile.vmi.ei.tum.de
wwwv1.mwn.de
mattermost.db.in.tum.de
vmbichler58.in.tum.de
swz.in.tum.de
www.lmf.bgu.tum.de
vmcarle7.net.in.tum.de
tumeps0-zks.srv.mwn.de
www.sv.bgu.tum.de
mendeleybruegge.in.tum.de
wwwv4.tum.de
wwwv2.tum.de
www.sportpsychologie.sg.tum.de
www.alphaz.bgu.tum.de
confluencebruegge.in.tum.de
vmbhatotia56.in.tum.de
www.landslides.geo.tum.de
vmrbg98.in.tum.de
wwwv4.tum.de
wwwv4.tum.de
www.land.ar.tum.de
bergen.e17.ph.tum.de
neos.ma.tum.de
node.dev.codex.aiim.med.tum.de
www.fachschaft.sg.tum.de
vmrbg220.in.tum.de
www.sport.mri.tum.de
wikimod.in.tum.de
vmesparza11.in.tum.de
swztest.in.tum.de
cepheus.wzw.tum.de
wwwv4.tum.de
impulse.mlz-garching.de
www.zks.psykl.mri.tum.de
webmail.utg.mw.tum.de
wwwv2.tum.de

Certificate

The complete raw certificate details for staticwww.frm2.tum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276679307550034085191223603598855371288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universität München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staticwww.frm2.tum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766905835916790629727956460778391950563275772787283754338809963195881539680110513479456898782373715220049190607133463081354609166365569483246624709290510977060847451397225811451775727743105756405483584006772684051939770445823870302049140375045686470194309143646010888524749340132803009353750091719553863765329948349702730067124498400318298715242577707603031975293808243769648012581705834245786529842764238700626198378628457313253052522117519447079086877802237445326672217331736587220989860370571104434943448708936207699244662000985008000789730551156278722182544171520047399420385335663560618603653203171839377000196689197697472694377995791947572287196980202890312822532922143703283614411213288161704226425731606938719503152026634085130561707005455999550056084791932763383918641905272958644587796235173694266096863310834695429552989716335225306379297572318508407305815319368132040438731382681213163495985919125395269933662867237409607988991798652600336309877357031974861062079139051717011752827902833644613411363072267430418393171966882148115273556356390488338814083290476919459893707355456402007571851404818067425337942856118713788579410688560524975702085934174463819725688525457646004006859586877625319114641983421501338057050750891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							816e344d9b7e0c3c0207d422e70a0dc59b75e9f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a752fc2290000040300483046022100c486794e301995c1fc37d2ec8fe5ca708ade7f9ce3668b28b607b7930b18e75c022100c6156bd98427bd022d4eae899cd26eea4345059896b3f15af45db42a0d49ff35007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a752fc29200000403004730450220588c47bca24115699f3a355fc5cf16dadcdd58401f391f719c511b7ec2f52158022100efed6d869480186bf8409b1940559789007099d6b61c433bec0ba0e37e48adf7007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a752fc2a5000004030047304502210087e64d63356b8c2e279533530528297cea45ef46b00fd1086b44d1c297f13f34022060af06c6a8bd52656777970652077fdb7de7b5fdb068d2487370629bf0b0a3fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (408 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staticwww.frm2.tum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.nmi3.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forum.nmi3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmi3.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmi3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'positronsources.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sine2020.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slopos13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slopos13.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmi3.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nmi3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.positronsources.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sine2020.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slopos13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slopos13.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.nmi3.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.nmi3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www01.sine2020.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwng.nmi3.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwng.nmi3.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwng.positronsources.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwng.sine2020.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwng.slopos13.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwng.slopos13.de'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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