compendium-heroicum.de

Issued by EuropeanSSL Server CA 2

About this certificate

This digital certificate with serial number be:86:42:19:95:c9:cd:90:85:81:34:37:c3:1d:b9:5f was issued on by EUNETIC GmbH.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=compendium-heroicum.de,OU=Domain Control Validated+OU=Provided by EUNETIC GmbH+OU=EuropeanSSL Trial

EUNETIC GmbH

Organization: EUNETIC GmbH
State / Province: Baden-Württemberg
Locality: Durmersheim
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): be:86:42:19:95:c9:cd:90:85:81:34:37:c3:1d:b9:5f
Serial Number (int): 253250427644272817925005966607258597727
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cc:f1:ac:51:67:00:20:8b:54:3a:98:7a:84:b7:f7:97:5c:cf:cd:d7
AuthorityKeyId: ee:e7:c5:9d:6f:48:1d:17:cb:d7:4e:3b:6a:02:0c:af:cf:e0:b6:bf

Fingerprint (sha1): c3:85:a7:e7:55:a7:65:f4:36:65:df:3e:e8:a2:04:40:a5:ab:e8:3b
Fingerprint (sha256): c1:43:de:81:cf:a6:0a:2d:f5:8e:e7:4b:94:31:90:c3:22:52:38:fe:2c:48:32:eb:a7:4f:05:1e:99:68:ea:2b

Issuing Certificate URL: http://crt.usertrust.com/EuropeanSSLServerCA2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/EuropeanSSLServerCA2.crl

Check the revocation status for certificate compendium-heroicum.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for compendium-heroicum.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

compendium-heroicum.de
www.compendium-heroicum.de

Other certificates including the domain name compendium-heroicum.de

(limited to 100 certificates)
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
www.compendium-heroicum.de
www.compendium-heroicum.de
www.compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
compendium-heroicum.de
www.compendium-heroicum.de

Certificate

The complete raw certificate details for compendium-heroicum.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIRAL6GQhmVyc2QhYE0N8MduV8wDQYJKoZIhvcNAQELBQAw
eTELMAkGA1UEBhMCREUxGzAZBgNVBAgMEkJhZGVuLVfDvHJ0dGVtYmVyZzEUMBIG
A1UEBxMLRHVybWVyc2hlaW0xFTATBgNVBAoTDEVVTkVUSUMgR21iSDEgMB4GA1UE
AxMXRXVyb3BlYW5TU0wgU2VydmVyIENBIDIwHhcNMTgxMDI0MDAwMDAwWhcNMTgx
MTIzMjM1OTU5WjCBgzEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVk
MSEwHwYDVQQLExhQcm92aWRlZCBieSBFVU5FVElDIEdtYkgxGjAYBgNVBAsTEUV1
cm9wZWFuU1NMIFRyaWFsMR8wHQYDVQQDExZjb21wZW5kaXVtLWhlcm9pY3VtLmRl
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1+KTsAxTOy+sNEJC/jBd
LQEHCGYq44dGbh8C90X2NNd8OwNNzfbFG5+/tUAls64heH4zLKM7Gxwc2b67lhjX
mt9gvXR/n2/1KBNvbgOCTjlIab8fZf9KAsogi7z5pwwotNAo6BgoPuP8pEdhYXd9
6om3OdkqIMjazmheVC2rdC+2m9kWI0rgs6GKPavanyb0pDOfC9izG8VT+3ai86t+
fD5OXIVcvVNW8MvDLM6aYnu+Mdpk5STY7Z5TqxZ6AE03fiIqF1506b772yfDajR7
N6BIOn+MRVmLDAYOOjejHSS8gD7giEePof3CO5GyrUh69m3SLYwKepoUWSw1KB9l
l3WsUnmg4BjooqWp35N2C0zXR+xdJLUo8sOb998ba9jBBfhmm4q4R3rkWsNUCZIN
ka3vt1iIL+2H7ZT+AT39vUeJy9EkWkURPEOXB7HOAbJeY2+RqH+9IdqZ72t+ayGJ
IYUj7zdy7RIauAvfLOyVexSy1ZQwYAEfU8AeXXYdREDbIuuQ7wHMZpkOj8xYiYk9
cdRgNqHm6f9xsZ2SSKAqT2SbhFGYIeJUPuP6RYIZv6CpapzMyelFvMLa5j74v0GS
LmtkE8FNMY51e+Ixsaa5wGg4zyI6mRfMu3OcNjFvMYAPoCoPONFlEwE6hjUJ0JJU
2lzWWNz+4zOfgtonwZRwuYkCAwEAAaOCAdswggHXMB8GA1UdIwQYMBaAFO7nxZ1v
SB0Xy9dOO2oCDK/P4La/MB0GA1UdDgQWBBTM8axRZwAgi1Q6mHqEt/eXXM/N1zAO
BgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgorBgEEAYHyagEBMCcwJQYIKwYBBQUH
AgEWGWh0dHBzOi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIBMEIGA1UdHwQ7
MDkwN6A1oDOGMWh0dHA6Ly9jcmwudXNlcnRydXN0LmNvbS9FdXJvcGVhblNTTFNl
cnZlckNBMi5jcmwwdAYIKwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8v
Y3J0LnVzZXJ0cnVzdC5jb20vRXVyb3BlYW5TU0xTZXJ2ZXJDQTIuY3J0MCUGCCsG
AQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMD0GA1UdEQQ2MDSCFmNv
bXBlbmRpdW0taGVyb2ljdW0uZGWCGnd3dy5jb21wZW5kaXVtLWhlcm9pY3VtLmRl
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhLqQF8Cbp
jUegKNVkTMM46XlP9a8vCKfSuumUQi3sJpE6VEQ5uL9ZbfwqBmhgDyIJIFiVJiSi
71CFsj2f1uzviDeUlVmrdfQRf2ND+uAfAI02fe/y2FNRunUzj0km6O81EM+tIem5
DKvMEVpofgbmzB7/skVTot4Kk5Z0cQJS90Z7eXyK4C9ZwQxzTOATm/wxBsNgllcz
V51RJOtC9IjuhaflvX3jpAh9LalnvCys32ArHDb33BFadgHGSMNkG0pcxGEVuIFc
tumXQ/Zk70b8mdL0ELghVq+N8zkOs4KjmqK3n8v/ehY9e6C2eZihtvliZNHPq1V7
XeWFoKefhTGC
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 253250427644272817925005966607258597727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Durmersheim'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Provided by EUNETIC GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EuropeanSSL Trial'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'compendium-heroicum.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 880734229024960728023854416949134921208604811413470459549727904898997499316331119861867158154105688315327861983275916136529357457133684386389555285088804896766927693944199452427722506881580950471753734527079713277892565385446060751563956735985361559618715252378898633560633823537237307675024126683568087773446310245122318504506959681555721348659974184522849943414718472907515424077087521293482281686739805220437171928237261164282111725022860885146374206419079190589283013482754925977022049153709444089278105025841189290068206126044816336212241747372211644447460666233959410085660526074850130889524690216754732776063492918021396455761323794928030047455196970051543399418558474350944510500698244035110457478320898333465866216641565318169813911812555043243404784644390871606219823704070369618064799802456454239671998307654141919049907593807836301130312460629344642706746215893484724143613016186692732910928340063795065366612711350652169240398089432583997053342086506093271453636598245336870591196273439932290751136925051532093901069842025361340385253993272162031569701557897804152191115470418624205386152027917224283271792411660371575444341193794059109794546884623024092370455786338801092654547461551278226381508847542929414912681752969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eee7c59d6f481d17cbd74e3b6a020cafcfe0b6bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ccf1ac516700208b543a987a84b7f7975ccfcdd7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.31082.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/EuropeanSSLServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/EuropeanSSLServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compendium-heroicum.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compendium-heroicum.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00212ea405f026e98d47a028d5644cc338e9794ff5af2f08a7d2bae994422dec26913a544439b8bf596dfc2a0668600f22092058952624a2ef5085b23d9fd6ecef8837949559ab75f4117f6343fae01f008d367deff2d85351ba75338f4926e8ef3510cfad21e9b90cabcc115a687e06e6cc1effb24553a2de0a939674710252f7467b797c8ae02f59c10c734ce0139bfc3106c360965733579d5124eb42f488ee85a7e5bd7de3a4087d2da967bc2cacdf602b1c36f7dc115a7601c648c3641b4a5cc46115b8815cb6e99743f664ef46fc99d2f410b82156af8df3390eb382a39aa2b79fcbff7a163d7ba0b67998a1b6f96264d1cfab557b5de585a0a79f853182