exchange.eur.nl

Issued by TERENA SSL CA

About this certificate

This digital certificate with serial number 26:6d:1f:ff:a3:c5:18:ee:9f:18:fe:fc:92:0b:a7:01 was issued on by TERENA.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=exchange.eur.nl,OU=Domain Control Validated

TERENA

Organization: TERENA
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 26:6d:1f:ff:a3:c5:18:ee:9f:18:fe:fc:92:0b:a7:01
Serial Number (int): 51077273205970586446971920885157177089
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b5:58:3b:e3:bd:37:3c:b1:5f:cf:b9:4b:6e:d5:fd:aa:af:86:25:d4
AuthorityKeyId: 0c:bd:93:68:0c:f3:de:ab:a3:49:6b:2b:37:57:47:ea:90:e3:b9:ed

Fingerprint (sha1): 69:f5:48:e8:66:d5:9c:70:40:c0:bc:51:10:32:53:ec:44:df:02:6d
Fingerprint (sha256): fa:fa:7b:80:fb:47:60:57:a8:3b:ac:be:2f:d4:13:1f:e0:43:07:f3:e6:3d:73:93:d6:cf:6a:97:ce:3e:a4:9e

Issuing Certificate URL: http://crt.tcs.terena.org/TERENASSLCA.crt

Revocation information

OCSP Server: http://ocsp.tcs.terena.org
CRL Distribution Point: http://crl.tcs.terena.org/TERENASSLCA.crl

Check the revocation status for certificate exchange.eur.nl

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchange.eur.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchange.eur.nl
autodiscover.abd.eur.nl
autodiscover.bmg.eur.nl
autodiscover.bv2013.eur.nl
autodiscover.campus.eur.nl
autodiscover.catering.efb.eur.nl
autodiscover.coa.eur.nl
autodiscover.composite.rsm.nl
autodiscover.cpc.eur.nl
autodiscover.cvb.eur.nl
autodiscover.drift.eur.nl
autodiscover.ece.eur.nl
autodiscover.ecv.eur.nl
autodiscover.efb.eur.nl
autodiscover.egs3h.eur.nl
autodiscover.em.eur.nl
autodiscover.erasmusacademie.nl
autodiscover.erbs.nl
autodiscover.erim.eur.nl
autodiscover.ese.eur.nl
autodiscover.eshcc.eur.nl
autodiscover.esp.eur.nl
autodiscover.euc.eur.nl
autodiscover.eur.nl
autodiscover.ext.eur.nl
autodiscover.fbk.eur.nl
autodiscover.fhk.eur.nl
autodiscover.frg.eur.nl
autodiscover.fsw.eur.nl
autodiscover.fwb.eur.nl
autodiscover.holding.eur.nl
autodiscover.hope.eur.nl
autodiscover.hrf.eur.nl
autodiscover.ict.eur.nl
autodiscover.ihs.nl
autodiscover.imta.eur.nl
autodiscover.iss.nl
autodiscover.jfr.nl
autodiscover.law.eur.nl
autodiscover.nic.eur.nl
autodiscover.oos.eur.nl
autodiscover.risbo.eur.nl
autodiscover.rotan.eur.nl
autodiscover.rsm.nl
autodiscover.seor.eur.nl
autodiscover.sin-online.nl
autodiscover.sso.eur.nl
autodiscover.staff.eur.nl
autodiscover.ubib.eur.nl
campus.eur.nl
imap.eur.nl
imap.rsm.nl
mailhost.eur.nl
outlookweb.eur.nl
owa.eur.nl
pop3.eur.nl
stff-ca00.staff.eur.nl
stff-ca01.staff.eur.nl
stff-ca02.staff.eur.nl
stff-ca03.staff.eur.nl
stff-ca04.staff.eur.nl
stff-ca05.staff.eur.nl
stff-ca06.staff.eur.nl
webmail.rsm.nl

Other certificates including the domain name eur.nl

(limited to 100 certificates)
h5p.eur.nl
dialogicplatform.com
db-bundle.sin-online.nl
www.erim.eur.nl
masterhealtheconomics.eur.nl
dialogicplatform.com
monitor.mgt.eur.nl
topdesk.eur.nl
psp.eur.nl
feb21011.ese.eur.nl
superoffice.holding.eur.nl
gallery.erim.eur.nl
login-accept.ds.eur.nl
pma.eur.nl
Bizzdesing.eur.nl
www1.eur.nl
alumni.eur.nl
sin-online-service-bundle.service.eur.nl
bko.eur.nl
asklepios.eur.nl
mybeta.eur.nl
overleg.eur.nl
people.few.eur.nl
ess.eur.nl
www.horafinita-accept.eur.nl
ess-test.eur.nl
timetables.eur.nl
thetheorymarket.eur.nl
mis-api-test.erim.eur.nl
hawk.eur.nl
rdbroker20-test.eur.nl
ns1.bvdu.eur.nl
ebs.eur.nl
resourcebooker.eur.nl
masterinternationalandeuropeanpubliclaw.eur.nl
www.webshop.eur.nl
trackeur-bundle.api.eur.nl
vrh56.eur.nl
sap-bo-test.eur.nl
sis-acc-saml.eur.nl
dialogicplatform.com
cms-intra-test.eur.nl
nagiosbe.eur.nl
sympa-test.eur.nl
dialogicplatform.com
rdbroker-test.eur.nl
timetables.eur.nl
pclab-monitor.eur.nl
tartaros3.eur.nl
issuetracker.eur.nl
eurgame.eur.nl
aux-ldap-bundle.service.eur.nl
adminer.service.eur.nl
edugateway-G2.eur.nl
expertise-search-test.rsm.nl
horafinita.eur.nl
sm.eur.nl
studielink.eur.nl
iwmc-accept.service.eur.nl
eshcc-app.eur.nl
auth4mobile.eur.nl
rstudio.erim.eur.nl
ln-fe-pool.t-staff.eur.nl
planonweb.eur.nl
overleg.dia.eur.nl
sis-saml.eur.nl
saml-cms-intra-test.eur.nl
bskweb.eur.nl
crm4p-acc.eur.nl
sis-acc.eur.nl
examsheet.eur.nl
mailing-law.eur.nl
ds.eur.nl
www1.eur.nl
DA2016.eur.nl
EMS-ACC.EUR.NL
vacancies.eur.nl
eduroam-guest.eur.nl
wiki.fbk.eur.nl
libguides.eur.nl
sisapi-accept.eur.nl
sin-app03.app.eur.nl
sustainabilityreport.eur.nl
mydesktop.eur.nl
sb-test.eur.nl
myapps.eur.nl
access.eur.nl
masterrechtsgeleerdheid.eur.nl
isis.fbk.eur.nl
personal.eur.nl
foreman-test.infra.eur.nl
esl.eur.nl
eurgame-accept.eur.nl
feb22012.ese.eur.nl
certbroker.service.eur.nl
hobbes.frg.eur.nl
foreman-test.infra.eur.nl
ecda.eur.nl
gen-web01.app.eur.nl
dashboard.eur.nl

Certificate

The complete raw certificate details for exchange.eur.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswD9EGJx7r54di7pK8jR
DWGDPk628XmI75FghNEOeOGria7MtxFoJ7XvLPxN1MF155IFh0fZpJ3mwpROJ1RT
A0GpY2v+OR8DOlq++c/wzNlQ7Jrdowmmqs9d9m4y5Wf4+MqaNV8GLYqONcdhTpod
ety4m9FxgpZQWyeU+YaPR6OQoK4v+rTq95CpEJVyoJZusy6k0bMTzcCaWjyEBLTh
+NqlkcgJId+y6GfVeCYbqlMz3qCMC19dqzH8hx+ccwyPAFDErkLCJormswyDl/Sq
WxppJUl7NjVjfOS/bJCB7Aki5VmayjcTJ2T+c48XHNdtEqOqOYq7ZNB2m2vC9Krf
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51077273205970586446971920885157177089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'exchange.eur.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22597144051856006230548609039733429309306005580866731560456114875870224105577084130167512564766206773096433958572266075430480463462761193984941595857854567080589894138083018105658046575752960302764491491378946577056761576380100208309829268435936074416668750952609675028022133383973838478994014692124738138754359080910014611386636096061054689688926163127017963053067621880283500553776328035061813932473872644704899853126913012274618417533785542361063825306762561231293244412713945121125880610256394553880489110228097072595598285117494183745955608229567152345632241627545747708009947583376229880458483401107291601821487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cbd93680cf3deaba3496b2b375747ea90e3b9ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5583be3bd373cb15fcfb94b6ed5fdaaaf8625d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.29
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.tcs.terena.org/TERENASSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.tcs.terena.org/TERENASSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.tcs.terena.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1536 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchange.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.abd.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bmg.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.bv2013.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.campus.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.catering.efb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.coa.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.composite.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cpc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.cvb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.drift.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ece.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ecv.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.efb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.egs3h.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.em.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.erasmusacademie.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.erbs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.erim.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ese.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eshcc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.esp.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.euc.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ext.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fbk.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fhk.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.frg.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fsw.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.fwb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.holding.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hope.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.hrf.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ict.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ihs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.imta.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.iss.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.jfr.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.law.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.nic.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.oos.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.risbo.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rotan.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.seor.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sin-online.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sso.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ubib.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campus.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imap.rsm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailhost.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlookweb.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop3.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca00.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca01.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca02.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca03.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca04.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca05.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stff-ca06.staff.eur.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.rsm.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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