compendium-heroicum.de

Issued by EuropeanSSL Server CA 2

About this certificate

This digital certificate with serial number 83:ba:91:7e:b9:76:44:98:31:12:6c:60:18:da:eb:95 was issued on by EUNETIC GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=compendium-heroicum.de,OU=Domain Control Validated+OU=Provided by EUNETIC GmbH+OU=EuropeanSSL Single

EUNETIC GmbH

Organization: EUNETIC GmbH
State / Province: Baden-Württemberg
Locality: Durmersheim
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 83:ba:91:7e:b9:76:44:98:31:12:6c:60:18:da:eb:95
Serial Number (int): 175097585653050167570848712465789414293
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cc:f1:ac:51:67:00:20:8b:54:3a:98:7a:84:b7:f7:97:5c:cf:cd:d7
AuthorityKeyId: ee:e7:c5:9d:6f:48:1d:17:cb:d7:4e:3b:6a:02:0c:af:cf:e0:b6:bf

Fingerprint (sha1): 58:5a:18:31:5f:30:7c:51:e3:25:7b:ed:a2:cf:2f:16:45:36:b0:2a
Fingerprint (sha256): 3a:18:39:2b:ff:e0:53:23:aa:ab:a7:47:85:88:ca:c8:c0:13:80:cc:6f:bf:38:1a:06:77:96:d7:f2:fd:fa:d0

Issuing Certificate URL: http://crt.usertrust.com/EuropeanSSLServerCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/EuropeanSSLServerCA2.crl

Check the revocation status for certificate compendium-heroicum.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for compendium-heroicum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

compendium-heroicum.de
www.compendium-heroicum.de

Other certificates including the domain name compendium-heroicum.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for compendium-heroicum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 175097585653050167570848712465789414293
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Durmersheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Single'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'compendium-heroicum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880734229024960728023854416949134921208604811413470459549727904898997499316331119861867158154105688315327861983275916136529357457133684386389555285088804896766927693944199452427722506881580950471753734527079713277892565385446060751563956735985361559618715252378898633560633823537237307675024126683568087773446310245122318504506959681555721348659974184522849943414718472907515424077087521293482281686739805220437171928237261164282111725022860885146374206419079190589283013482754925977022049153709444089278105025841189290068206126044816336212241747372211644447460666233959410085660526074850130889524690216754732776063492918021396455761323794928030047455196970051543399418558474350944510500698244035110457478320898333465866216641565318169813911812555043243404784644390871606219823704070369618064799802456454239671998307654141919049907593807836301130312460629344642706746215893484724143613016186692732910928340063795065366612711350652169240398089432583997053342086506093271453636598245336870591196273439932290751136925051532093901069842025361340385253993272162031569701557897804152191115470418624205386152027917224283271792411660371575444341193794059109794546884623024092370455786338801092654547461551278226381508847542929414912681752969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eee7c59d6f481d17cbd74e3b6a020cafcfe0b6bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccf1ac516700208b543a987a84b7f7975ccfcdd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.31082.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/EuropeanSSLServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/EuropeanSSLServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compendium-heroicum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compendium-heroicum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0047bc28b9f25307ac1147294f660970459d394913dac72e61b7b4b25627ac1ec9d6672fe65c21d3a7e61cff2131d13cf0b4c34bcc9c920dc6218a06ccc088ea59f95acfbad4ce66bbe5e75c9e933e512c5dc66252356eb67d346935a7f54a08f79c640b75303bbf967f405c7f90ecda8951fbdef822e56b8d9eef89091ff08048de7fb23ad8c097d436eeeb1ae38887142d8a241f26c7ccd54e195649bf29bb282c1bc2fcd2c93d428405f38f7ff7a755325099a128da089d56212b6e4dd25de327b82ff9c1f338ca5d57835af730dbf0eaaec852e6c215a2641cd17306816535c3d1686201049672ded2b6c8350ba2b9cb3f7149e5db682533b643acfd38a200